Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
File: I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft (raw, json)
Hash identifier: sWHIvBPfGceIq+Ku1ySkrm26hgOW1km8zh6RqR/exLg=
Subject key identifier: E9:F4:EF:C8:59:7D:AC:8D:2B:16:F3:0E:6F:E3:16:52:87:DA:3B:A8
Authority key identifier: 23:F8:9F:57:D0:72:84:9E:0C:AB:21:95:CD:0B:AF:25:57:93:5E:A0
Certificate issuer: /CN=23f89f57d072849e0cab2195cd0baf2557935ea0
Certificate serial: 019A522C4E22B9028B130002A025E54BF72B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
Manifest number: 170B
Signing time: Wed 05 Nov 2025 04:00:26 +0000
Manifest this update: Wed 05 Nov 2025 04:00:26 +0000
Manifest next update: Thu 06 Nov 2025 04:00:26 +0000
Files and hashes: 1: I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl (hash: GWyF8P6VrHl8M6MXtbhSJ+ODPhgfk4xj6NQ8pa9iLqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:4e:22:b9:02:8b:13:00:02:a0:25:e5:4b:f7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f89f57d072849e0cab2195cd0baf2557935ea0
Validity
Not Before: Nov 5 04:00:26 2025 GMT
Not After : Nov 6 04:00:26 2025 GMT
Subject: CN=e9f4efc8597dac8d2b16f30e6fe3165287da3ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:49:12:56:a3:91:70:a6:5d:99:85:98:d7:11:
09:ed:da:b5:87:86:41:ac:91:9f:8e:19:74:73:d7:
40:1a:b0:77:d0:b5:7c:11:20:35:bc:34:4b:ab:90:
70:57:b4:0b:62:b3:85:0b:ee:5d:36:e4:7c:f0:67:
24:42:dd:75:e5:ad:5c:81:cd:08:a0:34:03:86:8b:
d9:55:36:34:4e:3a:8f:a1:fd:8f:c0:e0:c3:10:24:
51:5a:61:63:89:8c:48:bb:bf:04:69:5f:a2:5b:a7:
ce:09:ca:d6:03:e3:27:51:c0:7b:93:d2:9d:5d:f6:
46:cf:76:5e:27:f6:ab:4d:ea:90:b5:5c:db:f3:47:
94:6d:5d:75:c2:b6:8c:45:3b:97:6b:89:63:c8:e6:
c0:37:50:f4:5d:4e:82:5b:cd:49:2d:e2:34:0a:67:
e8:41:d9:2c:8b:fe:21:1e:38:45:e5:2a:11:bb:7d:
be:8d:6d:c4:2d:a5:50:31:ec:04:9d:a0:ea:f7:2a:
7e:9f:f4:33:9f:cc:ed:c4:c7:ba:ed:ce:96:50:ae:
da:5f:bf:5b:50:af:34:b4:31:d9:85:70:c0:84:72:
e8:bc:82:f5:b8:d6:a5:09:c5:9f:33:46:38:0e:35:
e7:ae:be:01:f8:e5:d4:ae:85:f8:a6:80:3a:ce:33:
22:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F4:EF:C8:59:7D:AC:8D:2B:16:F3:0E:6F:E3:16:52:87:DA:3B:A8
X509v3 Authority Key Identifier:
keyid:23:F8:9F:57:D0:72:84:9E:0C:AB:21:95:CD:0B:AF:25:57:93:5E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:1f:e6:25:34:83:83:87:1e:a3:3a:76:ba:fb:78:ed:0a:04:
9f:e6:2d:02:c1:76:a7:82:5b:19:61:6b:1f:3a:52:9b:ab:aa:
69:e7:f2:60:23:da:08:fd:79:ad:25:24:4d:13:03:17:f7:6c:
25:3e:ee:cb:6b:48:70:b5:f8:85:aa:4e:40:1c:7a:38:31:c3:
bf:1f:ba:00:7e:e5:5d:73:e8:cd:79:f7:47:89:14:36:cd:89:
19:e2:6f:11:7c:b9:da:9c:87:3c:71:52:b9:26:53:2b:60:4c:
6c:11:37:28:39:fb:b5:28:3d:30:36:b6:d0:54:12:31:52:dd:
c5:39:ef:3f:67:1e:15:47:c1:a2:bf:2e:2a:27:78:dd:59:46:
91:1a:c3:84:ef:7e:de:08:c7:1c:07:9b:74:08:75:37:76:72:
8f:4f:7f:da:22:9f:b3:8f:65:fb:19:53:2a:66:ca:be:41:af:
05:49:f0:cb:a5:cf:59:c2:ed:b3:39:06:50:1a:da:0b:fd:c0:
d4:ae:f9:e5:37:a6:6e:cf:43:07:88:23:b3:e3:a4:26:67:fc:
a9:b4:61:92:c3:f8:08:50:05:d9:b4:dc:6b:16:2d:3d:80:f2:
b3:7e:c8:ee:94:6d:18:fe:72:ca:32:48:63:1f:2a:9d:45:ef:
49:32:5b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:20:45 2025 by rpki-client