Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
File: iDyv-AezKVLWjHGq8BuRmErR6gg.mft (raw, json)
Hash identifier: M05NE4Yn16HxKvtSzYD8vxFGUYvRNw5/E4D3BHKj3Tw=
Subject key identifier: 9A:E5:50:75:E9:B4:7C:64:00:77:66:08:55:7B:A0:A7:2B:F1:E4:D5
Authority key identifier: 88:3C:AF:F8:07:B3:29:52:D6:8C:71:AA:F0:1B:91:98:4A:D1:EA:08
Certificate issuer: /CN=883caff807b32952d68c71aaf01b91984ad1ea08
Certificate serial: 019A4EF4CE0F466AB99629E066FD4BC21332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
Manifest number: 04F6
Signing time: Tue 04 Nov 2025 13:00:57 +0000
Manifest this update: Tue 04 Nov 2025 13:00:57 +0000
Manifest next update: Wed 05 Nov 2025 13:00:57 +0000
Files and hashes: 1: iDyv-AezKVLWjHGq8BuRmErR6gg.crl (hash: /HeZVqetOn9dcj09XB066JXRZvKUGXJnv01LS1gX0kU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:ce:0f:46:6a:b9:96:29:e0:66:fd:4b:c2:13:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883caff807b32952d68c71aaf01b91984ad1ea08
Validity
Not Before: Nov 4 13:00:57 2025 GMT
Not After : Nov 5 13:00:57 2025 GMT
Subject: CN=9ae55075e9b47c6400776608557ba0a72bf1e4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fd:3b:98:84:f0:c2:4a:99:e4:b3:75:08:6f:
45:8a:ba:ec:e6:e1:ca:3a:6a:de:d2:89:00:df:61:
b1:c2:f3:e6:9b:bc:69:d6:22:3e:ef:b9:c2:9d:01:
e9:33:ab:fa:50:43:0c:cf:06:45:8e:8d:93:48:3c:
a6:b8:b8:16:ed:83:5b:58:aa:8b:62:d2:e4:94:9e:
d1:f4:3a:93:39:08:29:52:28:ef:8e:ea:5d:5c:3b:
a9:fd:25:49:52:07:b5:9d:09:3f:db:a6:6c:18:a0:
89:1b:bb:dd:d9:61:3c:da:7b:38:3f:50:14:74:b1:
f7:46:24:62:fc:e2:53:8d:33:7c:c1:3f:64:3f:3a:
f4:f1:c6:06:71:2a:e8:a7:ac:6d:43:ee:9b:40:68:
19:94:c8:bd:05:9c:ec:86:7f:15:c9:ef:d1:8b:50:
8d:dd:e5:b1:0d:16:a5:1a:9a:bc:ee:d9:90:7d:1e:
b9:f2:4e:69:5f:1e:06:54:f2:d2:a9:b5:a2:88:13:
1e:2f:6a:ed:bf:43:fe:a5:a2:ed:6e:90:61:97:69:
29:2a:ba:0e:f7:f1:a9:21:0d:b9:e3:3c:54:ea:b5:
4a:07:1c:31:2b:e4:81:e3:52:b5:31:b9:c2:7b:56:
52:5b:01:e9:0f:0f:cf:6c:27:7c:c3:1c:48:b7:3b:
bd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E5:50:75:E9:B4:7C:64:00:77:66:08:55:7B:A0:A7:2B:F1:E4:D5
X509v3 Authority Key Identifier:
keyid:88:3C:AF:F8:07:B3:29:52:D6:8C:71:AA:F0:1B:91:98:4A:D1:EA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDyv-AezKVLWjHGq8BuRmErR6gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a8b3c2-cad5-45a3-afaa-9ced5e5eff0f/1/iDyv-AezKVLWjHGq8BuRmErR6gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:72:f8:50:a9:dd:6d:f4:af:45:e6:9c:b8:b7:0c:a6:93:93:
76:ca:e4:ae:fb:fe:39:4a:e1:f3:2f:e9:cc:cd:1d:e8:68:fc:
90:03:d8:c6:78:11:80:b7:22:08:d7:d8:3a:69:03:26:32:69:
6e:d4:77:76:2c:16:a2:e9:1c:8e:e5:43:2f:f6:65:0f:1e:c9:
e7:e5:45:ed:ce:45:27:ea:bc:32:0a:dc:ec:e5:40:47:77:26:
08:77:c3:2a:af:98:2e:b5:4e:7a:6e:51:48:2c:4e:30:86:b3:
34:c7:fc:95:d1:42:9f:6a:a7:eb:4a:8c:b4:f9:af:a3:2f:fd:
8b:25:1b:30:af:64:48:3b:9f:df:83:24:1f:36:c0:ff:3e:bb:
82:36:4d:0d:0b:7a:0d:ba:fd:8e:79:ea:ac:30:a1:b9:04:db:
69:51:e8:f4:5d:2a:f9:4e:96:a9:cf:0c:ac:be:5b:68:1a:d1:
29:8d:71:4a:56:80:70:6f:70:8c:94:fb:63:8c:a0:9b:7a:83:
db:dc:48:05:3c:05:b8:3a:90:6d:f4:09:db:55:6a:6a:52:28:
8a:df:c6:79:c1:e4:5d:3b:96:a4:b5:25:8a:8f:2a:7d:2b:58:
8a:ce:e2:96:ad:8f:85:cb:5d:14:1d:b2:77:ec:6e:29:93:b4:
e8:be:59:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9M4PRmq5lingZv1LwhMyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4M2NhZmY4MDdiMzI5NTJkNjhjNzFhYWYwMWI5MTk4NGFk
MWVhMDgwHhcNMjUxMTA0MTMwMDU3WhcNMjUxMTA1MTMwMDU3WjAzMTEwLwYDVQQD
Eyg5YWU1NTA3NWU5YjQ3YzY0MDA3NzY2MDg1NTdiYTBhNzJiZjFlNGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/07mITwwkqZ5LN1CG9Firrs5uHK
Omre0okA32GxwvPmm7xp1iI+77nCnQHpM6v6UEMMzwZFjo2TSDymuLgW7YNbWKqL
YtLklJ7R9DqTOQgpUijvjupdXDup/SVJUge1nQk/26ZsGKCJG7vd2WE82ns4P1AU
dLH3RiRi/OJTjTN8wT9kPzr08cYGcSrop6xtQ+6bQGgZlMi9BZzshn8Vye/Ri1CN
3eWxDRalGpq87tmQfR658k5pXx4GVPLSqbWiiBMeL2rtv0P+paLtbpBhl2kpKroO
9/GpIQ254zxU6rVKBxwxK+SB41K1MbnCe1ZSWwHpDw/PbCd8wxxItzu9gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrlUHXptHxkAHdmCFV7oKcr8eTVMB8GA1UdIwQY
MBaAFIg8r/gHsylS1oxxqvAbkZhK0eoIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUR5di1BZXpLVkxXakhHcThCdVJtRXJSNmdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9hOGIzYzItY2FkNS00NWEzLWFmYWEt
OWNlZDVlNWVmZjBmLzEvaUR5di1BZXpLVkxXakhHcThCdVJtRXJSNmdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9hOGIzYzItY2FkNS00NWEzLWFmYWEtOWNlZDVlNWVmZjBm
LzEvaUR5di1BZXpLVkxXakhHcThCdVJtRXJSNmdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXnL4UKnd
bfSvReacuLcMppOTdsrkrvv+OUrh8y/pzM0d6Gj8kAPYxngRgLciCNfYOmkDJjJp
btR3diwWoukcjuVDL/ZlDx7J5+VF7c5FJ+q8Mgrc7OVAR3cmCHfDKq+YLrVOem5R
SCxOMIazNMf8ldFCn2qn60qMtPmvoy/9iyUbMK9kSDuf34MkHzbA/z67gjZNDQt6
Dbr9jnnqrDChuQTbaVHo9F0q+U6Wqc8MrL5baBrRKY1xSlaAcG9wjJT7Y4ygm3qD
29xIBTwFuDqQbfQJ21VqalIoit/GecHkXTuWpLUlio8qfStYis7ilq2PhctdFB2y
d+xuKZO06L5Zhg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:05 2025 by rpki-client