Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
File: IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft (raw, json)
Hash identifier: ssw5USXzYsce3gkudV1Qld0sXCgFZ6hRyFfP/OMV9bI=
Subject key identifier: FC:C5:A7:31:C4:86:FC:44:40:DC:F7:99:17:AB:45:F4:C9:F7:F7:D0
Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
Certificate issuer: /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Certificate serial: 019A4DAAB3AB26F5759EAF7A11046766049D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
Manifest number: 06DE
Signing time: Tue 04 Nov 2025 07:00:23 +0000
Manifest this update: Tue 04 Nov 2025 07:00:23 +0000
Manifest next update: Wed 05 Nov 2025 07:00:23 +0000
Files and hashes: 1: IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl (hash: ocdRfmPjBz2PzQ2YQeRN2XV5LgW7x4brl2d1nb2N8Ls=)
2: MgObQ10wwnTwMpDOp8O8ZUg1GzY.roa (hash: zFtBDJVKy0069qgd24TCedcTigM24qIyeHl/OMqiw7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:b3:ab:26:f5:75:9e:af:7a:11:04:67:66:04:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Validity
Not Before: Nov 4 07:00:23 2025 GMT
Not After : Nov 5 07:00:23 2025 GMT
Subject: CN=fcc5a731c486fc4440dcf79917ab45f4c9f7f7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:99:ce:9f:04:9b:3d:33:34:73:f0:24:b3:5f:
0a:b9:52:08:2e:51:ce:93:dc:47:c2:5d:82:bd:cf:
09:d8:86:8c:37:c7:74:af:73:7d:47:cb:5b:1d:a3:
b6:78:ff:8c:63:8e:ff:78:e2:e7:8b:7b:51:25:3d:
7f:61:0b:c0:76:3f:ec:84:fc:7a:f7:f9:34:af:e6:
a4:6e:5d:fd:f6:2a:2c:9e:67:34:d1:21:50:10:49:
90:05:17:eb:1c:8b:0c:7e:cf:5d:50:fc:25:5e:5a:
e6:81:c1:c0:d3:ce:2b:d9:da:54:69:fc:fe:75:8a:
3c:87:7b:43:4e:37:e3:60:9a:ea:2c:14:52:fe:12:
16:66:57:c7:48:6b:33:b8:ac:d6:cf:98:40:e7:65:
16:77:1e:b5:ae:3f:41:9f:30:21:18:1a:e5:c5:07:
b2:55:23:78:1e:1e:f9:a2:eb:e2:fc:8b:b0:81:a2:
a2:5b:ef:0a:a8:fc:33:a3:06:1f:92:3d:d1:01:30:
f2:bb:af:e4:8f:8a:dd:b8:5e:55:c5:a3:37:c9:c5:
62:6b:46:37:33:2a:f9:f3:f6:7a:ee:3f:28:fc:03:
b8:ca:94:2b:be:5d:6f:dc:ef:1f:f7:7a:a0:b6:80:
ad:5a:1f:09:7e:d5:f1:72:a6:bf:fe:92:87:6c:0b:
ed:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C5:A7:31:C4:86:FC:44:40:DC:F7:99:17:AB:45:F4:C9:F7:F7:D0
X509v3 Authority Key Identifier:
keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a1:8a:12:90:8d:a7:a0:22:5a:f4:f1:45:8b:c7:d3:64:fd:
22:ac:12:c1:01:ad:09:48:ca:0b:56:b5:74:c3:59:db:f0:34:
69:93:ba:fe:75:73:db:52:f5:55:86:ec:4c:b4:7a:d0:17:53:
21:76:44:fe:fc:36:40:25:ae:dd:1f:9a:c6:2d:50:e8:e4:8a:
36:e1:fa:9c:7d:3b:73:2c:ca:0c:a5:1a:d5:db:4f:71:63:3e:
bb:29:8c:e7:14:d4:a3:5a:b9:63:7b:ba:20:58:05:e1:53:29:
ed:c0:28:94:5d:5c:3c:7d:2e:75:fe:f9:98:d3:39:58:9e:b3:
b3:98:77:5e:20:fd:18:ad:3c:70:07:af:c1:4d:32:70:9d:aa:
43:f9:88:14:69:6c:1d:8b:29:cd:c1:20:1e:0a:4f:69:86:ad:
ca:f5:44:f7:cc:3c:e1:68:63:e1:a7:b7:e8:a8:20:b1:92:c6:
ae:14:78:2f:b8:89:26:fc:a8:a1:6b:27:0d:b4:52:a1:5f:d0:
70:8f:19:f9:8c:ae:27:b8:c8:12:d6:46:d1:fd:cc:d5:43:e1:
7b:11:0e:4b:82:b0:4f:b8:1e:f1:06:3f:3d:fc:df:34:3c:bc:
a1:e2:6a:fa:fc:7a:60:2f:a5:52:8e:d9:e4:d6:01:ea:ef:2b:
91:d2:ea:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:59 2025 by rpki-client