Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
File: izGWcRDKvuxKZreAN-Uqh7K8j10.mft (raw, json)
Hash identifier: dlijHZrPdOeHDRyLzXJZxBaRVf/6MZNFknS9ZgXoOzQ=
Subject key identifier: FB:A5:D3:B3:7F:9C:1D:B6:DE:BE:20:BB:88:D7:98:76:56:D0:CA:EE
Authority key identifier: 8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
Certificate issuer: /CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Certificate serial: 019A4F98E4CDBB6B65097AB8AF46FFFE6205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
Manifest number: 1409
Signing time: Tue 04 Nov 2025 16:00:11 +0000
Manifest this update: Tue 04 Nov 2025 16:00:11 +0000
Manifest next update: Wed 05 Nov 2025 16:00:11 +0000
Files and hashes: 1: izGWcRDKvuxKZreAN-Uqh7K8j10.crl (hash: JLLIgvSQ8FPbUoGfYARRgePk0btxnZ95pqQ4QqbBy0g=)
2: pb0HpyJZMsT5W8dfe0VOR5LOW_M.roa (hash: 8ccg9QKMd308GM+mOMPhnrelb3Ldijvww8dEm02A/EQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:e4:cd:bb:6b:65:09:7a:b8:af:46:ff:fe:62:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Validity
Not Before: Nov 4 16:00:11 2025 GMT
Not After : Nov 5 16:00:11 2025 GMT
Subject: CN=fba5d3b37f9c1db6debe20bb88d7987656d0caee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ef:3a:c2:3a:6a:7b:0c:34:63:23:bb:41:42:
0f:69:55:52:b6:e2:4f:96:e1:99:c9:04:d5:08:5e:
de:ec:6e:1b:0c:99:83:f1:04:86:b0:bf:b1:64:3a:
d3:0e:4b:16:0e:77:5a:c5:92:bb:18:46:84:12:23:
66:30:bd:8d:82:6e:c1:af:78:df:3c:ae:fc:d0:fa:
4b:68:30:f8:4a:63:57:ab:0d:c5:43:28:83:d8:25:
7a:e3:b7:87:8a:d9:b7:85:6e:37:81:1c:86:b2:48:
6a:78:eb:cc:6d:01:0d:8f:c4:7b:5e:99:66:27:e8:
77:bc:76:5b:bd:e5:95:04:b8:38:88:c2:d4:84:50:
d7:bb:0f:e5:9a:82:27:d6:a4:62:10:ed:e6:b5:5e:
2b:4f:1b:05:66:6a:bd:8e:35:97:00:93:2e:e9:6e:
16:5b:6b:f5:40:b8:95:81:d1:c7:6b:c4:83:4b:1d:
b8:ec:eb:1f:45:40:41:fd:ef:1e:b2:ef:44:f0:94:
a3:5e:5b:b2:74:cd:45:3b:ec:d1:9b:7f:6a:eb:64:
fd:11:7b:c4:fd:60:58:12:11:42:34:44:37:31:02:
fa:44:53:f2:8b:04:dc:49:49:53:b8:ff:d4:fd:14:
7d:54:50:3c:8a:1e:ce:04:33:46:38:84:cd:0b:b0:
c7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A5:D3:B3:7F:9C:1D:B6:DE:BE:20:BB:88:D7:98:76:56:D0:CA:EE
X509v3 Authority Key Identifier:
keyid:8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:f4:77:de:48:d8:c9:10:11:86:ec:6a:97:28:f3:5d:b9:bb:
26:5f:af:50:11:48:13:9c:70:52:40:ea:38:56:3d:7f:0d:53:
63:6b:af:5f:4d:0a:3c:a5:22:43:73:aa:ff:b2:44:83:e5:f9:
2e:41:42:b5:c8:52:79:24:8e:53:c9:47:65:e8:64:95:ed:2f:
71:f5:18:58:4f:1f:5c:5c:cf:98:da:d3:d0:04:f7:aa:f2:7b:
6f:de:68:88:44:fc:46:89:b2:ea:d1:63:bc:2d:30:ee:2c:f7:
8a:bf:e0:68:2b:1c:ac:48:c3:be:90:ed:53:9c:38:1d:4f:5c:
3e:23:45:d0:1c:ce:80:5c:ef:c4:14:3a:3c:a4:8b:be:a8:25:
b7:d0:95:25:3e:30:ee:09:e9:f6:9e:f2:4b:0a:d9:60:2c:89:
80:ca:c4:7a:9d:be:05:ee:67:2a:62:1e:5b:fc:68:82:a3:df:
5e:02:5c:b5:63:ae:51:d4:7a:bc:d7:f2:9c:12:9a:d8:e0:b3:
f0:e5:c5:b5:87:50:24:92:7b:5d:bb:c3:dc:38:32:8f:7b:c2:
26:d1:90:cb:be:31:ee:ae:c2:5e:c0:52:ad:57:9f:73:a8:95:
53:8c:d8:43:49:4b:af:19:14:30:e3:e9:3c:73:f5:08:cf:70:
a7:b4:ce:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:09:38 2025 by rpki-client