Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft
File: iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft (raw, json)
Hash identifier: SKSskIqnjR8cYvZ81q3V+H/prcn2eciy3mCjeflSkac=
Subject key identifier: 62:17:D8:DE:B2:8C:AC:59:EA:54:91:0B:EB:59:1F:0E:F5:DD:CF:13
Authority key identifier: 89:36:DF:4A:C2:F4:67:EA:66:C1:19:7A:86:29:D3:F6:4B:B5:63:F0
Certificate issuer: /CN=8936df4ac2f467ea66c1197a8629d3f64bb563f0
Certificate serial: 019A52D14CCF4956FB118F9D28D10E00FA39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft
Manifest number: 1354
Signing time: Wed 05 Nov 2025 07:00:39 +0000
Manifest this update: Wed 05 Nov 2025 07:00:39 +0000
Manifest next update: Thu 06 Nov 2025 07:00:39 +0000
Files and hashes: 1: iTbfSsL0Z-pmwRl6hinT9ku1Y_A.crl (hash: f8C5CGHkzRifkEcJ8J2Cttp4ICA7jssKfG+sElLBVPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:4c:cf:49:56:fb:11:8f:9d:28:d1:0e:00:fa:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8936df4ac2f467ea66c1197a8629d3f64bb563f0
Validity
Not Before: Nov 5 07:00:39 2025 GMT
Not After : Nov 6 07:00:39 2025 GMT
Subject: CN=6217d8deb28cac59ea54910beb591f0ef5ddcf13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fb:49:52:7e:14:e1:3d:c3:62:da:18:e4:e4:
d7:8c:e7:5d:4e:79:8d:1a:a3:94:9a:c5:41:e4:57:
9e:43:5b:c5:18:a7:a4:da:79:5e:f9:a5:89:b8:75:
69:aa:c2:fa:ff:ae:8f:f1:ba:02:38:35:51:0d:cd:
af:ba:95:49:01:0e:0b:98:e5:8e:0f:6e:87:da:a3:
dd:a4:2f:73:11:3a:83:aa:63:d9:fc:db:3e:de:cb:
3f:51:8e:d3:aa:46:f0:d4:3b:d6:7f:22:a0:5f:6e:
82:91:32:a5:c7:aa:4c:eb:8c:05:8f:98:8c:df:b2:
bd:15:87:9f:b1:9a:cf:00:8f:7c:59:f5:45:71:16:
8b:d2:ff:34:cd:9c:ee:5e:5f:c7:e9:23:b2:ad:72:
87:0a:b5:12:ab:94:c7:c1:6a:96:dd:84:61:5a:4d:
fc:c3:a1:c8:18:01:a3:6f:99:c0:e0:48:5a:ea:6d:
c5:56:d0:ad:02:d8:4f:d3:2e:d8:6e:a8:ab:61:48:
55:e7:c2:72:72:f0:ff:4e:9b:2c:ef:b7:44:4a:a0:
26:73:97:d8:38:ae:8d:d8:50:81:91:86:38:b9:79:
07:ac:89:0b:f7:bf:30:f4:3d:a1:a4:33:99:ad:14:
c4:81:0a:fc:b7:c4:bd:d7:b3:ef:34:65:6c:38:57:
cb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:17:D8:DE:B2:8C:AC:59:EA:54:91:0B:EB:59:1F:0E:F5:DD:CF:13
X509v3 Authority Key Identifier:
keyid:89:36:DF:4A:C2:F4:67:EA:66:C1:19:7A:86:29:D3:F6:4B:B5:63:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:bf:41:3d:b1:6c:ce:77:4a:22:d0:74:7e:8c:b7:a9:fe:b3:
c5:a8:38:49:72:4d:a3:13:5d:f5:f5:21:31:58:07:e4:b1:94:
12:b1:46:3f:57:d6:c7:5c:fe:9f:6c:79:06:52:15:54:ba:fd:
1c:0c:dc:23:e9:f1:1b:e0:6d:04:b4:ac:54:06:96:15:a0:49:
d4:d6:27:c1:41:5a:99:d4:19:c1:11:af:e0:e4:ec:ab:e7:f8:
7e:3c:a4:90:75:95:0e:6e:c8:08:01:23:f9:65:64:bd:13:1f:
e9:6f:3e:86:9a:bb:32:41:a2:1a:76:2f:f0:22:1d:4d:c4:fb:
d3:d3:5e:fc:72:47:cb:39:f6:84:eb:83:fa:78:b1:a7:c1:b5:
11:af:7f:13:51:a1:17:7e:18:d3:83:cf:20:0a:c8:76:0c:33:
24:80:71:ec:84:d0:b9:c9:39:f3:60:62:6a:d6:61:f8:55:b8:
6b:08:d2:c7:0f:56:2f:cd:49:eb:92:d2:44:6a:d4:80:f7:9b:
7c:5d:45:98:8f:5d:75:9b:89:47:4e:c2:d3:95:39:f4:e2:f0:
7a:f2:db:ca:3b:6a:6d:64:b7:3d:0b:14:dc:ba:d5:cc:e7:e9:
6c:96:e5:92:29:2c:6c:65:76:40:85:7e:03:11:f5:75:0d:79:
83:b5:0d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:24:19 2025 by rpki-client