Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
File: i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft (raw, json)
Hash identifier: q8mX2FX4FuMt7V+9wDLBei9xtAF4b3zQIpGwfeABdRg=
Subject key identifier: 3D:2C:05:05:6B:CB:D3:CC:5C:1B:9C:CC:B6:19:A1:00:CB:A3:E5:60
Authority key identifier: 8B:D8:93:1F:63:57:94:28:BF:08:CC:B1:99:A3:A9:8D:CB:A6:B8:24
Certificate issuer: /CN=8bd8931f63579428bf08ccb199a3a98dcba6b824
Certificate serial: 019A503E3E00605E78CD03D1EC9EA6D2FBA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
Manifest number: 0BE5
Signing time: Tue 04 Nov 2025 19:00:47 +0000
Manifest this update: Tue 04 Nov 2025 19:00:47 +0000
Manifest next update: Wed 05 Nov 2025 19:00:47 +0000
Files and hashes: 1: i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl (hash: p9o8ANnl74UaVV7ABS22Y2sZ25BjD/DOBpFvtUFmTtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:3e:00:60:5e:78:cd:03:d1:ec:9e:a6:d2:fb:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd8931f63579428bf08ccb199a3a98dcba6b824
Validity
Not Before: Nov 4 19:00:47 2025 GMT
Not After : Nov 5 19:00:47 2025 GMT
Subject: CN=3d2c05056bcbd3cc5c1b9cccb619a100cba3e560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:42:65:89:40:87:0d:44:50:7a:b6:1e:d6:22:
d6:d1:96:db:42:b4:f6:05:e1:35:19:e0:73:c1:53:
31:5a:07:e6:08:c2:61:70:20:c5:75:98:9b:ac:28:
af:2f:11:22:c4:22:60:ac:8b:14:47:e8:83:fc:72:
cb:05:97:dd:4d:6b:3c:13:e6:f5:8f:9c:01:90:7d:
6c:b8:cf:7c:57:e7:3c:50:25:3d:0c:c1:5a:e3:9f:
03:01:f0:eb:92:23:d8:31:36:85:53:2b:07:87:27:
73:c8:84:92:b3:aa:83:3b:5f:6b:6a:84:05:23:9a:
15:66:a2:31:7b:6f:e6:85:33:ca:e8:a1:a5:83:f7:
16:90:be:81:13:47:a6:59:c3:4e:18:30:ee:c7:ef:
24:1b:bf:7c:6c:66:e1:7c:92:a6:e4:ff:4a:50:f7:
4f:21:71:68:8a:7f:e3:cb:89:d0:b2:11:c9:f0:c5:
dc:7d:0c:b8:4d:e3:69:11:31:37:99:6c:20:df:39:
c9:6b:ec:04:43:1c:a6:2c:85:47:a0:e1:9a:95:86:
d3:b3:93:72:a1:80:57:37:11:f7:a7:75:a0:10:e9:
1d:1f:a5:31:87:18:b2:ac:ca:ef:b7:5f:e4:0f:0c:
7b:a5:fd:6b:46:62:1e:68:9c:08:96:aa:63:67:7b:
e7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2C:05:05:6B:CB:D3:CC:5C:1B:9C:CC:B6:19:A1:00:CB:A3:E5:60
X509v3 Authority Key Identifier:
keyid:8B:D8:93:1F:63:57:94:28:BF:08:CC:B1:99:A3:A9:8D:CB:A6:B8:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:df:dd:f0:78:b4:29:a2:5a:c5:5b:6a:4f:40:00:4d:48:22:
a6:94:7d:89:e1:c9:c2:72:8d:e1:ca:1a:7d:bf:49:99:7d:c4:
d4:99:97:65:68:06:c8:fc:11:5b:7a:ff:f8:f0:b3:83:30:df:
8c:45:8d:cc:24:9e:c7:32:93:e0:7d:31:62:0e:19:77:e1:eb:
ef:00:3f:93:7e:de:b2:90:e8:72:f1:1a:5a:10:a6:b3:4a:fb:
6d:2c:d1:e5:9a:e3:e6:cf:33:81:47:ef:03:53:31:8a:02:21:
82:90:92:7d:91:e9:0d:e9:57:4b:6c:b6:8a:e0:c8:fd:a4:d3:
cf:c4:a0:c7:a9:cd:82:7c:32:68:b1:5a:41:c9:ca:a6:44:eb:
21:73:81:cc:eb:84:c8:f6:e2:a4:19:e9:8b:86:13:d3:f9:62:
43:47:37:51:9f:9d:73:2d:15:b9:9f:6a:48:74:e0:64:b8:35:
da:ed:14:85:d8:de:01:70:8a:7e:e2:3c:13:7f:55:aa:43:70:
ee:9c:a3:09:df:58:c0:d9:d3:5f:8b:e6:ea:ba:15:c1:74:95:
14:cc:5e:70:b6:9d:fe:5b:f4:45:46:bc:c6:83:d5:3c:ff:2f:
cd:07:a4:e6:10:65:78:f6:5f:83:66:ed:d4:11:9b:38:15:1d:
6b:1a:3e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:22:38 2025 by rpki-client