
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
File: iD9pgz7Edx87C85PAJNleTVG9qg.mft (raw, json)
Hash identifier: jO9WB4OPv25k/+2Xm9fqXvD0Utnf71Q+ULmPwATgFo8=
Subject key identifier: F8:14:40:DC:23:C2:26:4B:39:3E:5D:20:7A:46:6A:AD:58:E8:E9:09
Authority key identifier: 88:3F:69:83:3E:C4:77:1F:3B:0B:CE:4F:00:93:65:79:35:46:F6:A8
Certificate issuer: /CN=883f69833ec4771f3b0bce4f009365793546f6a8
Certificate serial: 019A4EF5403EE4EBD4E4F4F822E32B90C4D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
Manifest number: 0749
Signing time: Tue 04 Nov 2025 13:01:26 +0000
Manifest this update: Tue 04 Nov 2025 13:01:26 +0000
Manifest next update: Wed 05 Nov 2025 13:01:26 +0000
Files and hashes: 1: iD9pgz7Edx87C85PAJNleTVG9qg.crl (hash: jFoQmK3lk87g69smbytZtV3NPvzPv4q1GKNzGkLDBnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:40:3e:e4:eb:d4:e4:f4:f8:22:e3:2b:90:c4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883f69833ec4771f3b0bce4f009365793546f6a8
Validity
Not Before: Nov 4 13:01:26 2025 GMT
Not After : Nov 5 13:01:26 2025 GMT
Subject: CN=f81440dc23c2264b393e5d207a466aad58e8e909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b5:5a:f6:c8:16:bf:a0:39:09:e8:94:97:88:
7a:b1:41:a8:de:3a:39:51:03:68:62:dc:87:0d:39:
64:3c:84:a1:ee:b9:e7:2b:19:fe:01:c6:c3:39:2f:
01:2e:b3:e2:56:e7:c5:9e:f6:83:1d:be:24:a8:65:
01:60:14:84:59:31:65:57:13:92:65:2b:c3:fa:58:
b6:46:8a:f3:69:26:61:5c:24:6a:81:c4:7e:11:63:
a1:b6:6c:40:fd:21:42:e2:2f:42:04:1e:31:01:fe:
3a:e7:69:84:2d:eb:e1:e0:45:dc:b4:83:93:24:87:
a9:1a:1a:45:97:1b:2c:d7:e9:f0:11:cd:05:b7:08:
ae:fb:71:96:b1:a4:f4:ae:8a:13:65:39:ae:fb:99:
6e:63:9a:e8:6f:c8:9c:9d:ed:c4:b8:16:1d:4f:13:
8e:f6:9d:c2:34:f7:d7:2a:7a:65:17:ce:a8:ce:5a:
c8:cb:27:49:25:b2:b2:78:1e:f2:df:60:10:e4:ea:
ea:7c:14:9c:36:e1:2e:e9:7a:51:48:87:da:c1:7b:
62:ef:f1:d0:68:2d:7c:94:e0:3b:9d:76:18:7c:7c:
61:5b:a2:83:2c:02:02:f9:72:92:fb:05:06:10:9b:
8a:e3:55:42:80:04:b7:92:78:7e:e4:54:1b:07:37:
f4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:14:40:DC:23:C2:26:4B:39:3E:5D:20:7A:46:6A:AD:58:E8:E9:09
X509v3 Authority Key Identifier:
keyid:88:3F:69:83:3E:C4:77:1F:3B:0B:CE:4F:00:93:65:79:35:46:F6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9pgz7Edx87C85PAJNleTVG9qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/934599-f38e-444a-a3c0-6bf2bdbae5c4/1/iD9pgz7Edx87C85PAJNleTVG9qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d7:e2:35:bd:bf:b9:6a:bf:08:27:63:19:5d:f0:6d:fa:7e:
0f:89:0d:64:2f:45:0c:49:30:47:10:56:d2:92:fd:0f:7c:d4:
b4:d7:ba:30:56:95:5f:86:5c:fc:90:b8:53:e1:7f:f3:2f:7f:
23:e3:f2:23:09:4b:5b:2d:99:13:da:ae:01:ad:bb:8e:35:73:
89:a4:bf:9a:4c:7c:eb:d7:8e:55:2e:b9:22:b2:8d:65:80:1b:
00:43:c5:40:45:d8:12:44:2e:82:7d:c7:cc:8e:1f:7b:c9:56:
39:75:ba:d7:dd:7a:62:87:af:ee:84:5a:2f:36:91:ee:a5:5b:
9e:81:6c:f3:58:c7:a8:34:1d:87:bf:64:ba:d2:48:f6:ca:aa:
9f:76:23:78:78:a6:70:14:07:97:4d:68:ac:63:18:b0:b9:7a:
f5:8f:36:54:cd:6d:fd:5e:c0:0f:30:f3:3e:79:fe:7a:7c:46:
8f:e6:0d:aa:15:e9:d4:36:ee:29:b0:40:b3:31:6b:af:e3:7a:
e6:af:bb:47:2e:24:39:d2:18:29:71:fd:85:33:81:1b:8a:bb:
34:bb:be:f3:ba:34:e3:ab:5e:06:a9:f8:2a:a8:bd:f3:48:e8:
5c:07:9b:39:55:30:fe:f2:ee:90:58:ad:21:65:55:f2:13:c9:
a5:ac:44:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:48 2025 by rpki-client