Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
File: iFeQ87X0pUUjTzIwv4lmOFbge8c.mft (raw, json)
Hash identifier: d/zRRUQE96nOX6xLoAf5+WlYjrD/MH6KErvNkZ3RwKI=
Subject key identifier: 5D:D3:8E:AF:91:45:CC:BB:48:9F:4F:0F:3E:E1:E5:64:D2:3A:42:08
Authority key identifier: 88:57:90:F3:B5:F4:A5:45:23:4F:32:30:BF:89:66:38:56:E0:7B:C7
Certificate issuer: /CN=885790f3b5f4a545234f3230bf89663856e07bc7
Certificate serial: 019A4EF46DB894367B41B2F5E8AB9F516EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 13:00:32 +0000
Manifest this update: Tue 04 Nov 2025 13:00:32 +0000
Manifest next update: Wed 05 Nov 2025 13:00:32 +0000
Files and hashes: 1: iFeQ87X0pUUjTzIwv4lmOFbge8c.crl (hash: wVURb76Jq1hoEDwqDUrjsYAMBGD+1DvDbYyCfx7JCr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:6d:b8:94:36:7b:41:b2:f5:e8:ab:9f:51:6e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885790f3b5f4a545234f3230bf89663856e07bc7
Validity
Not Before: Nov 4 13:00:32 2025 GMT
Not After : Nov 5 13:00:32 2025 GMT
Subject: CN=5dd38eaf9145ccbb489f4f0f3ee1e564d23a4208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4e:21:3d:c0:1b:ec:4b:ad:06:29:bc:b3:2d:
7f:fe:d8:61:95:06:b1:61:6d:b4:eb:1a:1b:0f:0c:
ff:79:86:9a:77:1b:32:50:a4:50:0d:e4:34:b4:39:
e8:44:34:81:48:59:2a:ac:ab:82:af:84:5f:e6:6a:
e3:ac:b7:4a:00:99:77:f5:f3:f7:3c:c8:0e:61:a1:
b7:3d:9d:69:57:63:57:93:9c:29:89:04:2a:e2:3e:
99:a4:9c:a1:08:f4:45:50:76:93:0d:0b:fd:4f:25:
f9:4e:1e:98:3b:71:43:8f:00:58:26:ab:f8:ca:a8:
01:1f:31:1c:15:24:d9:fe:ba:4a:8e:02:b9:cf:74:
58:fa:12:c5:80:3e:f7:43:54:4d:00:7d:7f:da:62:
fe:86:0a:7a:1b:cd:5e:31:d6:ba:04:27:30:77:11:
8a:d0:fa:e0:22:70:e0:47:ad:a0:3d:fb:13:27:c2:
15:46:e0:cc:4f:ce:bb:37:30:32:db:c9:d3:ed:c1:
87:07:b1:43:a5:ad:b0:09:01:f2:6b:6d:b8:4e:20:
a3:4b:68:37:07:15:cc:58:55:c7:ec:93:20:58:c7:
ad:ab:8f:27:a9:38:28:89:80:e6:45:1c:6a:fb:33:
73:53:22:7f:a6:0b:51:6f:0f:69:8a:b4:24:61:09:
a6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D3:8E:AF:91:45:CC:BB:48:9F:4F:0F:3E:E1:E5:64:D2:3A:42:08
X509v3 Authority Key Identifier:
keyid:88:57:90:F3:B5:F4:A5:45:23:4F:32:30:BF:89:66:38:56:E0:7B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:87:77:89:ff:e4:0a:69:35:5e:fa:5c:6b:49:c5:f5:65:f4:
dc:40:27:d7:fb:7f:de:26:62:1c:57:9f:b8:07:23:1b:c6:6f:
23:ad:2b:aa:8c:aa:81:72:a1:5f:f7:71:b9:2d:39:6d:8e:fe:
8d:37:1d:e9:de:b4:8c:ad:9f:4b:5b:ab:12:95:03:72:b7:dc:
36:73:e6:ab:6b:fd:55:d9:fc:fd:90:b5:92:82:e1:1f:bb:81:
ce:7f:2c:92:48:12:d6:30:9c:67:0c:a1:d8:37:e3:cd:47:5d:
81:00:34:29:4a:63:d0:7b:b3:b9:76:54:9a:eb:be:c1:6c:39:
72:68:1f:49:7b:8f:40:ea:09:9c:f8:42:91:ef:8c:6c:f7:e6:
ca:a8:47:fa:79:2d:cb:fc:32:62:fc:7a:b6:48:13:53:de:93:
40:06:33:4e:1c:bb:5b:98:e4:3c:5d:da:9c:93:71:ae:c8:30:
c6:10:8e:4e:78:e0:2e:68:e4:b3:77:41:9e:89:66:07:46:2a:
95:7d:55:82:22:e6:7e:7b:ef:5c:d9:23:0b:35:7a:8f:95:70:
f8:b3:9e:a6:72:17:29:08:39:ea:ee:db:95:30:7f:33:72:25:
6f:9f:10:53:72:83:7c:3e:00:c6:7f:43:a0:ca:86:72:e3:9c:
45:c8:26:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:27:54 2025 by rpki-client