Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
File: ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft (raw, json)
Hash identifier: nJc2tIozWh2lGCJSwlHNQGD+DUeShVQpny22Tkji98Y=
Subject key identifier: C4:B5:54:83:90:02:6C:5E:E5:B2:85:2C:43:79:4F:E7:DD:9D:FD:4F
Authority key identifier: 89:F1:85:8C:D3:7F:B3:8B:2A:CF:A5:CB:4E:F4:3E:3C:30:8D:3D:61
Certificate issuer: /CN=89f1858cd37fb38b2acfa5cb4ef43e3c308d3d61
Certificate serial: 019A4E4F9B1678C756C266F94049956317E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 10:00:31 +0000
Manifest this update: Tue 04 Nov 2025 10:00:31 +0000
Manifest next update: Wed 05 Nov 2025 10:00:31 +0000
Files and hashes: 1: ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl (hash: OxaUSKeRqNKw+hF1GZO2HsUVpRvv9a20MXM9NdJQmfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:9b:16:78:c7:56:c2:66:f9:40:49:95:63:17:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f1858cd37fb38b2acfa5cb4ef43e3c308d3d61
Validity
Not Before: Nov 4 10:00:31 2025 GMT
Not After : Nov 5 10:00:31 2025 GMT
Subject: CN=c4b5548390026c5ee5b2852c43794fe7dd9dfd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:18:d7:e8:6f:bd:23:b0:ab:d4:3a:f8:50:be:
f6:40:b0:ac:62:60:00:29:8d:fd:43:e1:72:d3:9d:
b1:63:8c:74:2e:37:71:ef:53:37:97:f0:c2:7f:2c:
77:cc:c9:c5:5c:8d:d8:41:7a:6f:cf:62:85:67:29:
fe:ef:2e:9d:49:5b:bf:38:b0:3c:d6:95:67:fe:1a:
ba:ed:7a:bf:94:6a:a6:54:ea:67:02:18:fd:7c:cb:
4a:af:89:78:b4:0b:24:5d:31:4f:76:4b:c5:29:07:
82:e7:2a:25:50:a5:d7:0a:6a:de:44:e6:cd:13:3f:
ae:c9:78:0f:7b:20:ed:7a:c3:eb:8e:e1:5d:63:16:
50:ed:f6:07:bc:4a:e7:a8:6f:6e:aa:97:3b:0e:83:
b5:5c:28:c9:df:7f:94:0b:f9:a2:96:ec:12:36:9b:
01:07:8a:3c:80:db:2f:17:e5:62:97:b7:0b:f1:ad:
7e:09:10:35:44:43:96:df:65:1c:eb:3a:e3:e3:7f:
ab:45:26:ad:67:ab:d4:25:6a:a0:13:75:30:a0:01:
18:2e:69:97:9d:37:87:0c:82:5b:4a:62:74:28:4b:
96:b1:15:5c:18:d7:cc:fe:4d:08:52:bd:19:03:5e:
60:2c:a2:16:cd:fb:f9:a3:ad:48:3a:b3:bd:05:5c:
5c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B5:54:83:90:02:6C:5E:E5:B2:85:2C:43:79:4F:E7:DD:9D:FD:4F
X509v3 Authority Key Identifier:
keyid:89:F1:85:8C:D3:7F:B3:8B:2A:CF:A5:CB:4E:F4:3E:3C:30:8D:3D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:68:4f:b1:4f:ef:a6:c5:96:03:49:72:83:f5:85:23:5c:37:
67:9f:e9:1f:e2:d1:72:b9:fc:2c:ac:cb:9a:f6:7d:d8:02:f7:
14:1c:48:b8:bc:da:d9:72:3c:37:07:6d:01:55:8b:78:09:65:
16:14:2c:2a:3e:36:ec:bc:6e:3b:57:6f:e1:18:ae:5b:44:7c:
7b:13:7f:46:63:e5:9a:cb:5a:1c:5e:c8:83:79:0d:92:a1:f2:
09:f6:37:30:d1:f9:15:46:d2:21:3e:fc:32:7f:ef:f8:18:c3:
7e:91:2e:45:01:0f:f7:ff:7e:c3:1b:c2:9f:c7:65:ac:2b:9c:
da:ce:d2:1f:05:55:c1:8b:11:49:ad:ca:b7:ae:8d:bf:cb:6e:
7f:22:66:78:70:e2:4e:15:ea:ed:2c:4e:e3:46:67:23:05:3d:
95:76:a5:24:9c:ee:2e:23:3c:64:70:eb:4a:16:f9:d5:bf:e7:
c7:b7:85:b0:85:0d:d3:af:82:4d:52:f8:de:e1:cc:8a:ac:7e:
6d:6b:43:48:34:b1:91:54:cf:ec:83:cf:76:04:f7:59:49:51:
f9:db:72:c3:f2:eb:cc:d7:a2:26:f0:7d:a3:18:bb:15:b1:9c:
7d:7e:58:1b:9c:81:d2:d3:20:b2:a8:25:ce:38:2f:b9:09:7c:
79:20:16:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:57:56 2025 by rpki-client