Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.mft
File: IClZ7xuVPXmKoPVkMafxG2vhltY.mft (raw, json)
Hash identifier: NAHYOh3Jwu9T9n4aNKrSNqYyP/sDtSKVG2o8U9o23F0=
Subject key identifier: 9B:CE:B1:7A:5A:F9:ED:82:33:0D:C9:2B:7D:1B:18:7B:F9:85:9F:A3
Authority key identifier: 20:29:59:EF:1B:95:3D:79:8A:A0:F5:64:31:A7:F1:1B:6B:E1:96:D6
Certificate issuer: /CN=202959ef1b953d798aa0f56431a7f11b6be196d6
Certificate serial: 019A4DE19EF3116FA40CB9EC01A9F6288E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IClZ7xuVPXmKoPVkMafxG2vhltY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.mft
Manifest number: 1305
Signing time: Tue 04 Nov 2025 08:00:23 +0000
Manifest this update: Tue 04 Nov 2025 08:00:23 +0000
Manifest next update: Wed 05 Nov 2025 08:00:23 +0000
Files and hashes: 1: IClZ7xuVPXmKoPVkMafxG2vhltY.crl (hash: Sr1/7jRV6hs8hyxi5msL2Bh6Zp4GqbOTTY8jnCCpjtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IClZ7xuVPXmKoPVkMafxG2vhltY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:9e:f3:11:6f:a4:0c:b9:ec:01:a9:f6:28:8e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202959ef1b953d798aa0f56431a7f11b6be196d6
Validity
Not Before: Nov 4 08:00:23 2025 GMT
Not After : Nov 5 08:00:23 2025 GMT
Subject: CN=9bceb17a5af9ed82330dc92b7d1b187bf9859fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:85:2f:54:f7:0d:ed:9b:1d:79:db:fd:55:35:
e6:6c:0d:09:11:56:71:03:e3:3d:a2:89:16:d6:2e:
38:0a:a7:27:29:8b:56:f3:3b:31:ed:d3:e6:fd:b4:
07:73:41:6d:fe:f2:81:41:01:e6:1c:29:66:3f:72:
75:6a:87:0b:52:ec:6f:4b:92:a0:37:01:05:c0:eb:
62:42:3d:a0:ae:45:86:0c:6f:52:4d:ec:8c:94:35:
83:45:54:4f:89:31:6a:55:4b:77:a0:93:6e:6b:22:
38:d7:22:7f:98:c6:65:83:c5:7c:b2:bb:7e:83:2b:
7b:d2:e0:f4:a1:9d:ed:55:70:86:df:a7:40:e7:4d:
b5:83:9a:66:a5:c0:f9:4a:59:d1:ed:55:2a:e5:de:
d4:2d:81:fa:79:db:3b:33:d2:35:9c:3a:e0:ae:91:
ba:f7:48:75:63:a8:c3:3c:6f:81:f9:77:44:92:5e:
0f:e0:ac:e1:bb:bc:ef:05:be:2f:38:af:aa:6c:0a:
66:bb:4f:75:81:e9:31:e8:d8:45:fe:ef:90:88:dd:
23:ed:27:89:93:a3:23:c0:eb:aa:51:c1:31:2e:62:
72:d2:f6:ca:92:e1:b2:69:fb:e5:41:5d:74:e0:f9:
01:d0:ee:73:eb:71:6c:c7:2a:73:4b:38:d5:89:a1:
a5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CE:B1:7A:5A:F9:ED:82:33:0D:C9:2B:7D:1B:18:7B:F9:85:9F:A3
X509v3 Authority Key Identifier:
keyid:20:29:59:EF:1B:95:3D:79:8A:A0:F5:64:31:A7:F1:1B:6B:E1:96:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IClZ7xuVPXmKoPVkMafxG2vhltY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:7c:5e:0f:a7:4a:82:f0:a5:9a:6f:67:84:d7:8b:c9:15:46:
3e:6d:34:e0:12:6e:fc:ea:59:56:1e:53:0c:5f:92:c8:7d:0d:
5b:c2:8c:5f:d0:b4:31:9e:3b:74:89:04:70:31:7f:d6:2d:7c:
cf:06:14:99:b7:cd:ac:74:af:b0:55:d5:4c:f9:57:03:fc:09:
ac:15:20:0e:7e:1a:de:74:d3:8b:09:56:cf:8c:66:a0:d1:0e:
cb:b5:fe:89:0a:c7:b6:1e:c8:d2:cd:35:30:6c:e1:7e:65:2e:
6f:69:28:4f:59:44:6f:7f:f8:d0:c6:a5:87:90:fd:78:47:11:
e7:60:ca:a4:91:8c:6e:ce:c5:f0:f7:9e:39:89:2d:60:c0:31:
7e:a0:43:3e:f4:74:f5:e6:39:81:ce:07:0a:7c:08:ae:9e:7e:
a3:89:41:c5:ca:c1:d5:bd:21:f6:ff:b1:aa:32:b3:19:a0:5a:
8b:d0:43:ed:cc:da:9d:13:eb:08:d7:82:bf:21:00:7f:78:2c:
7b:96:90:6e:ae:4f:7e:48:e6:a2:08:c8:10:a0:a7:d9:13:0b:
f1:5b:2a:60:e7:a6:fd:68:4a:1c:4c:14:42:d1:d3:1d:7e:a7:
f2:be:7d:b0:62:1b:44:8d:5f:a8:eb:c3:d5:8f:64:65:1f:2f:
f2:f4:63:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:16 2025 by rpki-client