Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
File: I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft (raw, json)
Hash identifier: M1aziffZDWFsWPMjSmfw9STBIHPZ/XHd4pkHpgcnsTI=
Subject key identifier: 79:2A:0A:7B:B7:4D:B1:5D:3C:E8:84:26:2C:C1:52:00:83:32:B6:34
Authority key identifier: 23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8
Certificate issuer: /CN=2393ff21c6f7310757a9dcd781da8805f23794d8
Certificate serial: 019A4EF57873F40118E84BC586E762108845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
Manifest number: 0A55
Signing time: Tue 04 Nov 2025 13:01:41 +0000
Manifest this update: Tue 04 Nov 2025 13:01:41 +0000
Manifest next update: Wed 05 Nov 2025 13:01:41 +0000
Files and hashes: 1: I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl (hash: Cr/e+d+BKOhS4bss4U4hMMgO42VgO0JiD01C4I77jEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:78:73:f4:01:18:e8:4b:c5:86:e7:62:10:88:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2393ff21c6f7310757a9dcd781da8805f23794d8
Validity
Not Before: Nov 4 13:01:41 2025 GMT
Not After : Nov 5 13:01:41 2025 GMT
Subject: CN=792a0a7bb74db15d3ce884262cc152008332b634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:43:a7:be:b8:0c:6b:ec:6e:33:87:a9:b3:0b:
16:41:50:f7:f7:53:b3:86:0b:5a:75:3c:75:2d:fc:
4f:03:24:a4:21:9c:a5:11:33:4e:5d:1a:eb:be:74:
07:d0:88:4f:e3:7d:b9:dd:f8:de:8a:d2:cd:84:f5:
03:47:80:de:73:c6:88:0b:cd:85:42:16:2b:6d:c1:
5d:36:60:5a:79:4f:4e:a9:51:6e:b3:38:6c:82:aa:
e5:61:49:37:44:34:4c:70:46:12:c8:92:34:60:58:
b6:2a:b3:03:f3:14:52:cf:e7:ea:a2:d9:43:61:c7:
5b:d6:92:1a:21:18:e1:91:55:49:19:cd:87:67:ec:
e7:40:b3:e0:25:10:c6:8d:67:f0:b3:90:07:6e:4b:
8b:f1:9b:c1:cc:58:05:d7:2d:63:36:a7:ac:a2:41:
1e:f9:4f:71:13:9b:34:6d:48:7c:35:88:b6:f1:f6:
60:20:0c:59:bd:dd:6c:77:0a:0f:cf:1a:21:d5:43:
4e:10:74:42:94:ec:02:7f:73:30:4c:30:5d:9b:0d:
fc:20:8e:93:da:9e:ab:1a:ac:bf:88:8d:ab:e0:56:
4b:7b:6f:b9:22:f4:c9:65:ab:5d:b2:5f:a5:5f:ad:
8b:06:d1:31:90:70:aa:2b:06:ee:25:c9:dc:3f:99:
9e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2A:0A:7B:B7:4D:B1:5D:3C:E8:84:26:2C:C1:52:00:83:32:B6:34
X509v3 Authority Key Identifier:
keyid:23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:fd:49:4e:6d:cd:ae:37:d2:26:8c:38:7c:03:72:67:57:a1:
6f:ca:7b:43:1b:c8:fe:46:cb:bd:c3:33:f4:c0:63:83:6d:b8:
97:b0:b3:fb:5f:60:cd:de:77:13:ac:d3:19:b4:52:f5:b4:2b:
d6:e5:48:3e:bc:58:6c:b3:49:df:de:a2:84:72:e0:38:de:68:
ef:67:60:5a:65:71:25:75:6e:99:7e:8c:82:ff:01:f5:e1:67:
30:02:8e:72:5e:c8:51:cc:34:b5:2a:c0:bb:2e:60:e7:35:8c:
1c:9f:f3:d8:c5:29:5f:42:7a:d9:b2:a5:42:05:49:c3:21:da:
42:85:9a:81:69:ae:f0:58:b1:2e:ca:1c:93:49:9e:e2:da:35:
c8:f3:3d:10:a9:3b:cd:ba:a0:fe:f9:3b:a7:52:6e:56:db:c1:
57:93:c7:28:01:3d:70:c2:77:74:d3:fd:5e:cd:91:ac:41:85:
6f:7c:2e:0d:04:9c:46:4e:53:fc:b9:d5:21:d3:f8:3b:fb:5a:
d6:19:f8:e3:b6:62:08:d0:48:7c:30:9d:28:b1:8b:2d:9d:f9:
2c:85:4c:db:d4:62:0d:ae:a7:75:9f:51:f5:ce:c4:cc:1d:63:
40:07:40:28:55:4a:e4:3d:34:b3:eb:74:ee:2b:70:33:d8:4e:
07:ab:d0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:47 2025 by rpki-client