Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft
File: ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft (raw, json)
Hash identifier: sk59uDMu0zMZfMgOCQo8Kd9zJOh4zTP6ukJXb8Y56xU=
Subject key identifier: C7:44:B6:07:41:04:3B:56:B3:6D:2A:E8:37:83:2D:3B:4B:1D:A5:4E
Authority key identifier: 8B:15:81:27:E9:87:FE:03:71:1B:7A:97:D4:CA:9D:FA:00:06:52:8C
Certificate issuer: /CN=8b158127e987fe03711b7a97d4ca9dfa0006528c
Certificate serial: 019A4E4FA01D2F0297B4FAB5A8F968B11F5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft
Manifest number: 11CB
Signing time: Tue 04 Nov 2025 10:00:32 +0000
Manifest this update: Tue 04 Nov 2025 10:00:32 +0000
Manifest next update: Wed 05 Nov 2025 10:00:32 +0000
Files and hashes: 1: ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl (hash: tzgfp968PzVhtwmOJ4noND4UkVkZDg1sI//wcwJxxco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:a0:1d:2f:02:97:b4:fa:b5:a8:f9:68:b1:1f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b158127e987fe03711b7a97d4ca9dfa0006528c
Validity
Not Before: Nov 4 10:00:32 2025 GMT
Not After : Nov 5 10:00:32 2025 GMT
Subject: CN=c744b60741043b56b36d2ae837832d3b4b1da54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ef:5d:17:f9:21:67:27:81:fb:2d:c2:4a:05:
44:91:f6:b0:93:62:85:ad:cd:6d:83:8c:d8:f4:b7:
4a:18:93:9c:8a:e1:f5:4e:71:1d:33:fa:14:94:01:
58:da:c1:62:cc:f0:4a:85:60:8f:be:a2:40:d8:bf:
ff:a6:68:54:5f:72:99:d9:0f:4f:3b:d6:1d:3b:40:
d2:65:a2:34:dd:cf:f7:cd:7c:9c:fb:cb:d5:41:c8:
f7:5f:e1:1c:a7:99:b3:10:97:ae:18:85:6e:36:28:
25:bf:28:d9:82:68:9e:45:2e:2a:1a:d2:e9:90:ae:
bb:58:73:39:f7:8b:e5:c3:36:9f:ff:df:87:09:12:
21:de:07:67:40:f8:6f:4a:25:cc:ec:66:e0:f2:23:
7d:4b:dd:f2:2e:e6:46:67:ae:bd:fc:39:21:a8:35:
10:7e:8a:a7:85:cd:74:fb:d0:ed:b0:d6:f4:cf:a1:
d7:bd:62:b0:d4:4b:6b:cb:7e:97:01:31:d6:64:bc:
25:5a:98:27:95:49:bc:33:6c:75:dc:e6:25:93:78:
1b:95:14:d7:df:93:ab:87:c1:0a:ec:71:16:8c:85:
97:60:df:18:95:8d:75:ef:a0:88:e0:91:a5:0f:10:
ca:68:eb:7f:08:f2:40:ed:49:73:fc:30:a6:e0:a3:
65:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:44:B6:07:41:04:3B:56:B3:6D:2A:E8:37:83:2D:3B:4B:1D:A5:4E
X509v3 Authority Key Identifier:
keyid:8B:15:81:27:E9:87:FE:03:71:1B:7A:97:D4:CA:9D:FA:00:06:52:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:44:7f:94:72:cb:88:ff:01:c1:96:08:2b:3a:3c:dd:d2:93:
82:df:fe:34:44:a2:96:02:3c:ff:1d:cb:da:c5:9f:89:72:48:
ed:d4:a3:b2:f7:92:7b:71:2d:35:49:8f:d4:37:1f:de:dd:c0:
8f:b1:a2:4a:dd:5a:0c:4f:72:b4:3c:1a:65:11:4b:96:4a:ab:
bb:49:33:ca:af:7d:b9:3c:28:66:98:c2:dc:1b:47:7a:24:64:
67:a0:b2:27:1d:dd:d3:a3:19:df:28:9c:c1:83:8c:37:2b:5a:
5d:59:3a:a2:71:30:f0:bd:87:06:cd:84:98:de:5f:b6:88:5c:
b4:10:a7:ed:89:08:08:da:f2:9f:68:cf:bd:86:98:91:70:85:
7e:91:45:cb:6f:cb:39:e9:1e:f2:2e:f0:a2:02:87:b6:6e:64:
6b:cf:c0:9b:82:6e:ae:bc:69:91:1c:d3:d3:48:f1:28:61:2e:
0e:00:59:6f:da:24:ad:bb:d4:70:96:81:05:b4:1c:e6:20:c7:
f5:a7:69:84:1a:a8:dd:30:aa:44:b8:f0:ac:b5:99:94:d7:ce:
08:42:af:11:b2:a4:f1:13:6d:47:52:0e:44:99:02:ef:7a:2c:
a4:40:ec:c1:a2:b7:24:a8:2c:b0:51:97:78:c2:33:42:70:ec:
66:be:52:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:18 2025 by rpki-client