Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
File: IIsiFwCygfgj4yKjIiGoZ-WweaY.mft (raw, json)
Hash identifier: 2O+RyQIqm1m+80aUVbgp93F6l0WLHjR92GX1bYcYzzA=
Subject key identifier: 28:C2:CF:1B:2A:CB:1F:31:52:AC:86:22:30:DA:E6:C1:45:E6:BF:BD
Authority key identifier: 20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
Certificate issuer: /CN=208b221700b281f823e322a32221a867e5b079a6
Certificate serial: 019A52D2295A8AF9C6212A10304362E0F4C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
Manifest number: 170B
Signing time: Wed 05 Nov 2025 07:01:36 +0000
Manifest this update: Wed 05 Nov 2025 07:01:36 +0000
Manifest next update: Thu 06 Nov 2025 07:01:36 +0000
Files and hashes: 1: IIsiFwCygfgj4yKjIiGoZ-WweaY.crl (hash: dFvaLwkdhV+RpDjeh0aRG4R/AGrtZCx7Ihh6JFuG5LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:29:5a:8a:f9:c6:21:2a:10:30:43:62:e0:f4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208b221700b281f823e322a32221a867e5b079a6
Validity
Not Before: Nov 5 07:01:36 2025 GMT
Not After : Nov 6 07:01:36 2025 GMT
Subject: CN=28c2cf1b2acb1f3152ac862230dae6c145e6bfbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:93:ad:b6:d4:12:e5:97:ed:19:dc:fc:24:
e2:68:3b:75:4f:77:aa:86:00:21:5a:9e:45:d6:f2:
ec:9a:7a:02:51:96:fa:25:0e:a4:00:6a:e6:0a:44:
80:48:72:0c:86:86:e4:0a:22:13:82:53:7b:69:bf:
f8:23:a2:f5:79:a6:79:39:f7:29:eb:26:71:db:5d:
8c:bb:37:85:b3:86:4f:ea:48:01:88:af:50:b7:9c:
9b:ad:0e:cb:6e:e2:31:4a:24:23:eb:ef:a9:c6:80:
40:99:a1:f2:ab:39:68:d5:6a:68:c5:56:16:87:06:
e9:ec:01:95:f2:5f:46:c3:0d:00:d4:f8:45:b1:8c:
08:47:3a:85:b2:93:83:a3:93:e9:cd:0b:98:5d:c7:
6d:e5:10:45:21:60:02:8d:09:87:9d:bb:6b:9f:00:
cd:c2:7d:9d:8d:51:09:0c:d7:7c:af:d6:1e:5c:93:
f9:b6:28:33:fa:43:96:92:b4:e7:5e:4b:5f:16:ce:
87:2a:98:58:b4:0e:fe:33:b4:a0:1e:4e:ce:56:ef:
78:82:8b:b6:c1:6c:81:ae:5a:45:f1:8a:c3:99:78:
ec:db:91:a4:ca:e7:1e:ee:66:a8:5f:5f:33:ea:6c:
0a:c7:01:07:5d:95:bc:c2:fa:1c:2b:df:79:4f:02:
12:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C2:CF:1B:2A:CB:1F:31:52:AC:86:22:30:DA:E6:C1:45:E6:BF:BD
X509v3 Authority Key Identifier:
keyid:20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:54:a3:d2:6d:07:66:ca:06:35:2c:24:94:e0:d2:79:61:af:
84:e3:9c:40:52:3a:da:ee:64:f6:09:5d:23:47:01:d1:e4:70:
33:c6:4c:c8:e5:50:41:e7:98:eb:23:66:68:dd:90:2f:17:3b:
5b:d2:9e:2c:6b:e1:07:60:7b:cd:40:7b:fd:e6:34:91:8e:dd:
7b:a5:9a:ff:31:19:36:f8:21:bd:1e:5a:1d:2b:96:ba:ff:72:
21:34:66:80:f9:58:e4:9a:ea:f8:09:22:8c:a4:24:c2:8b:0a:
67:1f:3c:e1:1e:d2:2a:bb:71:e5:08:fc:d9:9f:7d:9f:47:f5:
b0:6c:5c:96:98:9b:ff:13:2e:20:a6:14:e7:c7:e5:21:db:8a:
a2:fa:70:6f:78:e2:3a:96:b3:58:6a:6e:7d:12:d7:bc:20:f8:
03:ce:38:fa:3c:1d:65:d1:bf:82:7a:f3:4c:52:c5:76:09:d2:
a1:1d:f6:f5:ce:a2:ed:a8:42:7c:c7:09:e2:bd:b8:25:1e:5d:
84:5a:ce:0d:57:1b:b3:df:ab:b5:05:e1:1c:c1:e3:74:b0:8e:
6e:15:11:ef:16:00:d3:1a:52:2b:0c:15:95:e1:fc:90:9a:3b:
35:a7:85:ed:33:d6:49:c5:58:a7:37:2e:40:12:08:00:d5:0e:
5f:a2:98:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:26:11 2025 by rpki-client