Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft
File: inwNQWIenTgIi43T5t4VVBvuHIw.mft (raw, json)
Hash identifier: pOnDfjsImuu2SoUdLk4VzWrkM34KEBLiUHRsuu2zmec=
Subject key identifier: 54:BE:86:CA:E5:44:5E:C2:C6:61:C4:8B:EB:5B:C1:42:BA:D3:F1:02
Authority key identifier: 8A:7C:0D:41:62:1E:9D:38:08:8B:8D:D3:E6:DE:15:54:1B:EE:1C:8C
Certificate issuer: /CN=8a7c0d41621e9d38088b8dd3e6de15541bee1c8c
Certificate serial: 019A4FCFD6836BE7441295E4794F614EB90C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inwNQWIenTgIi43T5t4VVBvuHIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 17:00:12 +0000
Manifest this update: Tue 04 Nov 2025 17:00:12 +0000
Manifest next update: Wed 05 Nov 2025 17:00:12 +0000
Files and hashes: 1: inwNQWIenTgIi43T5t4VVBvuHIw.crl (hash: 6qIHnlUEdGz+KPdSYzYo8nY7oDtVC9UylQrBDPgcRhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/inwNQWIenTgIi43T5t4VVBvuHIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:d6:83:6b:e7:44:12:95:e4:79:4f:61:4e:b9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7c0d41621e9d38088b8dd3e6de15541bee1c8c
Validity
Not Before: Nov 4 17:00:12 2025 GMT
Not After : Nov 5 17:00:12 2025 GMT
Subject: CN=54be86cae5445ec2c661c48beb5bc142bad3f102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a4:07:ac:8f:d5:64:04:94:0f:c4:7a:ae:f9:
5d:33:0b:7f:dc:76:a0:75:82:1e:c9:69:3a:4a:8e:
69:ba:28:4f:cc:ab:4b:e8:b3:b2:3f:d4:b3:2b:c6:
85:c1:31:c3:f5:3d:ff:0a:24:09:b6:bb:cc:83:3c:
4c:d5:46:80:9f:03:cd:11:31:02:df:bf:c9:e8:3a:
9a:4a:0d:1f:f9:8d:0a:81:6f:ef:8c:f6:05:d9:2e:
c2:13:77:19:65:55:fc:88:03:cc:79:1a:c1:bc:87:
77:d0:3f:bb:fb:5f:9f:34:e0:b5:20:41:6e:ab:a7:
e5:8e:9c:9d:04:56:c8:e1:5f:dc:cf:32:3c:19:5d:
53:3c:a4:67:08:52:12:d1:e2:d9:4f:a5:dd:97:2c:
c2:cc:7a:08:5f:af:a1:92:ce:56:0f:26:df:da:1d:
85:c2:ab:4e:2d:26:33:11:93:8b:2d:b4:63:2d:7b:
50:60:17:9e:b3:3b:3e:85:fe:e2:f8:7f:d4:75:00:
5b:da:f6:8e:b3:fb:08:9d:31:b3:9f:04:28:25:34:
fb:ed:20:69:fd:92:e0:97:da:6f:95:0b:a7:db:a1:
51:d0:c1:37:b4:34:db:f6:8b:8a:da:c8:85:78:b7:
d8:38:61:53:b9:11:41:cc:91:c2:92:5b:34:07:7b:
61:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BE:86:CA:E5:44:5E:C2:C6:61:C4:8B:EB:5B:C1:42:BA:D3:F1:02
X509v3 Authority Key Identifier:
keyid:8A:7C:0D:41:62:1E:9D:38:08:8B:8D:D3:E6:DE:15:54:1B:EE:1C:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inwNQWIenTgIi43T5t4VVBvuHIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a6:a5:47:ff:32:93:25:92:b9:1c:4b:42:83:0b:bb:0b:2f:
ee:4e:cf:60:02:cd:fe:59:e1:ff:a0:0e:9b:0a:ed:54:9e:71:
56:1b:57:fa:e0:de:f9:7a:f2:22:38:06:c8:74:ec:6b:32:d4:
f5:b7:cb:9d:3c:ad:fb:6e:40:cd:d4:07:79:cf:6a:f3:f7:ac:
e6:49:d3:db:5a:ff:51:d0:de:b2:1d:e0:63:0b:71:d6:cc:64:
38:7b:b6:1c:58:44:55:7c:b7:be:b2:ac:57:4b:ae:c1:01:f9:
c6:2f:12:fb:8a:a7:fb:ab:8a:33:01:be:31:73:fb:49:0f:bd:
73:5c:c4:b4:a9:d6:42:f9:65:05:53:58:cd:54:c3:7c:f3:fa:
72:96:97:0b:cf:3f:dd:0a:8a:c9:54:6d:81:7b:a8:71:96:09:
49:86:fb:dd:1e:52:71:a7:e6:7f:35:5f:94:8f:55:8c:dc:b3:
53:42:bc:9f:40:e7:21:ef:48:cd:74:84:d2:1a:6d:89:22:a9:
d6:5f:94:26:da:de:99:8a:a2:34:eb:8e:e7:04:22:6b:70:e8:
16:26:63:ac:01:88:7f:4e:5f:2f:48:b8:8f:4f:34:1b:f2:6c:
67:be:b5:e5:be:fb:91:5e:76:51:ed:85:82:cb:a6:0a:ca:1f:
20:7e:5f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:47:04 2025 by rpki-client