Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
File: ije4wOFZfNHaZcmgf6wFrNhEzGo.mft (raw, json)
Hash identifier: GJB9WQVb7aZn03R64o2XZWVV7dvDEhckwLDHCWpNusA=
Subject key identifier: 87:18:B7:4F:B7:C2:11:D7:39:DA:00:A2:88:72:95:DB:0A:90:92:59
Authority key identifier: 8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A
Certificate issuer: /CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a
Certificate serial: 019A4EF4DDE7B71324276961CCAC96959624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
Manifest number: 11F9
Signing time: Tue 04 Nov 2025 13:01:01 +0000
Manifest this update: Tue 04 Nov 2025 13:01:01 +0000
Manifest next update: Wed 05 Nov 2025 13:01:01 +0000
Files and hashes: 1: ije4wOFZfNHaZcmgf6wFrNhEzGo.crl (hash: 4y8WN9bqb2poCrwrapaVmlWLWOHq8Jl61z32z2ff0Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:dd:e7:b7:13:24:27:69:61:cc:ac:96:95:96:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a
Validity
Not Before: Nov 4 13:01:01 2025 GMT
Not After : Nov 5 13:01:01 2025 GMT
Subject: CN=8718b74fb7c211d739da00a2887295db0a909259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:e6:59:1c:27:43:d5:ec:46:5b:f4:60:de:
4c:5f:7c:f9:67:db:0c:82:ab:ba:e1:9e:71:7c:c4:
57:cc:ef:2e:89:9b:1c:b6:d4:da:e5:b2:c3:f9:d8:
2c:69:55:22:9c:e5:72:58:1f:1b:ac:ca:01:4f:74:
4b:a5:62:23:7a:8e:c3:c0:1c:47:f5:50:81:d5:1d:
95:96:fc:2a:51:25:e0:16:59:ea:5f:d0:6f:da:7f:
fc:f0:93:fa:a3:8d:6f:b4:ae:6c:77:3a:2c:04:c6:
ba:05:53:8f:55:3f:de:f2:a1:bd:1f:76:c8:02:d1:
37:0b:f2:29:53:2c:85:57:37:1c:9c:39:dc:80:50:
10:c1:25:ab:06:c3:f7:58:68:8d:70:8d:10:3e:74:
54:63:7e:02:dd:f4:3f:a3:ca:e9:ce:5e:fe:76:a4:
c5:1d:ec:07:85:f6:23:25:3e:0e:0a:aa:71:17:4c:
2a:47:39:03:0f:b5:27:7a:0c:a2:53:74:83:dd:03:
06:c7:dc:77:4a:3d:2a:0c:d2:70:5a:41:93:36:2d:
e7:95:8d:cc:0c:59:4e:2b:99:04:ac:c4:d3:89:b5:
19:29:75:74:80:ba:7e:e8:c7:c7:ff:8a:3b:60:d0:
ee:e6:61:43:25:ac:46:1b:76:2d:22:d5:63:c3:fc:
41:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:18:B7:4F:B7:C2:11:D7:39:DA:00:A2:88:72:95:DB:0A:90:92:59
X509v3 Authority Key Identifier:
keyid:8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:83:47:66:20:bc:73:a0:ec:8e:8c:68:3b:7d:b4:c7:6a:09:
20:33:fc:78:77:04:0c:b5:65:87:32:a6:c9:cd:4a:06:7f:19:
92:f6:4f:59:7a:7e:fb:1f:a7:c3:33:3d:4f:c9:2e:6c:4d:f1:
16:9d:7b:94:fa:95:5e:ac:69:59:c5:de:8a:90:70:92:8e:63:
5c:99:c0:ec:1b:d0:88:84:a7:cc:35:c9:97:d5:10:d6:a2:e7:
22:41:98:7e:b6:65:db:8c:0d:89:fc:b7:b5:fa:05:25:75:40:
e0:a5:af:0a:93:89:47:10:74:9a:80:dd:e2:e8:5f:69:b5:90:
75:90:78:85:08:e6:bc:5c:1e:ff:bb:3e:91:07:d9:e9:f1:19:
b6:01:67:4e:48:03:79:e1:0b:fc:f9:05:b8:f7:7a:3c:19:7d:
82:45:0c:24:d5:9f:19:65:0b:d3:5c:b7:7b:9f:37:02:40:3e:
0c:48:34:46:b3:3b:f9:5a:93:b6:93:3d:9f:95:a1:6e:18:db:
56:66:65:d6:6e:f6:a8:6d:f5:ed:e1:93:7f:c9:d1:67:9f:b6:
e0:40:09:81:53:91:0e:d8:4b:cb:83:07:45:71:8d:b9:81:36:
ae:fe:c3:b3:4c:67:ba:e3:67:4a:5a:af:66:1a:16:8f:d4:99:
cb:79:53:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:41:00 2025 by rpki-client