Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
File: IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft (raw, json)
Hash identifier: tW0Vu5p7MCh6mIHRuoOya8cwDR8TlniKundHA5mulw8=
Subject key identifier: C5:85:6F:B8:D2:FD:08:14:8F:B0:01:07:F6:95:75:66:A8:99:F9:36
Authority key identifier: 21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88
Certificate issuer: /CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
Certificate serial: 019A4D074BB4C57BB58585D461A775BF3B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
Manifest number: 0555
Signing time: Tue 04 Nov 2025 04:01:54 +0000
Manifest this update: Tue 04 Nov 2025 04:01:54 +0000
Manifest next update: Wed 05 Nov 2025 04:01:54 +0000
Files and hashes: 1: IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl (hash: I7aL19/l0NSyBxnhy2ryVYwu6Z+75ZU6KR1s2DirTlM=)
2: _zFGaif6ktuPRSZOOpcbI9GW7qg.roa (hash: 9+34ErT+7YS3/gqguf6KZOausCEOcTWh/OEHzcUf2rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:4b:b4:c5:7b:b5:85:85:d4:61:a7:75:bf:3b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
Validity
Not Before: Nov 4 04:01:54 2025 GMT
Not After : Nov 5 04:01:54 2025 GMT
Subject: CN=c5856fb8d2fd08148fb00107f6957566a899f936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:12:e3:1c:59:de:b6:92:46:6a:e4:4b:89:09:
7a:9c:a9:fa:c9:ac:3c:b4:f7:87:7a:21:89:0d:27:
8a:0a:7a:95:67:89:87:fc:71:a2:91:10:0f:29:e7:
a4:f9:15:df:1d:d1:01:2b:b7:5b:ed:cb:16:7b:5b:
ee:0b:96:15:aa:1a:a3:f0:65:29:e9:76:eb:b5:7a:
ef:72:27:74:4e:7d:7e:83:12:6f:fb:db:cc:33:4c:
08:c5:c1:0a:19:da:d9:53:ac:fc:95:98:cb:ca:f0:
81:59:10:e3:27:4e:53:d2:71:6b:20:c4:de:2b:fe:
71:a0:20:45:84:3b:65:28:de:1a:c0:05:03:d0:17:
b3:af:58:c4:ae:85:8b:e0:7d:c4:58:90:09:5e:e3:
cc:04:2a:27:ac:8e:78:58:95:1a:27:13:9e:6a:fb:
74:7f:05:8d:e1:92:42:01:11:c8:d2:83:6a:dd:85:
7c:7a:d5:d7:b2:84:02:5f:53:04:97:d2:37:79:84:
4f:53:e9:11:67:8b:67:2a:92:27:97:70:e3:9a:2c:
40:67:42:60:a8:fd:89:74:d1:b6:7c:c8:bd:b2:2c:
52:72:04:55:ef:23:67:2e:66:63:a2:89:00:41:df:
80:61:1d:cb:76:b4:90:b8:39:44:fe:6d:3e:bb:03:
25:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:85:6F:B8:D2:FD:08:14:8F:B0:01:07:F6:95:75:66:A8:99:F9:36
X509v3 Authority Key Identifier:
keyid:21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:85:4b:8f:75:cd:69:63:6b:33:ce:0a:25:13:24:6f:d4:a2:
61:c3:c5:3a:db:a3:aa:1d:86:3e:89:27:9c:53:66:aa:6e:c6:
05:c4:7e:0b:d0:f2:6d:dc:41:05:de:15:94:50:3e:a1:e3:75:
8b:7a:89:82:b9:10:6e:78:4c:97:83:21:56:7e:e3:bb:1c:54:
88:75:a8:65:7c:fd:9a:e0:9c:0d:94:6b:4e:ba:f3:61:f5:4b:
e2:68:db:b5:4b:36:87:43:5d:13:89:69:3c:b7:39:9b:be:25:
9f:d1:e8:62:a0:d9:4a:f6:26:18:27:3b:64:5c:65:c6:81:b5:
35:8e:77:b0:f9:ed:c9:9d:34:2f:94:78:34:95:a9:9c:f4:8a:
1a:50:c5:1d:f3:a9:b8:78:f4:ee:69:61:e3:7f:c2:df:90:3c:
b3:33:d3:2a:74:2d:15:8c:f4:1f:e6:04:4f:8f:c2:f5:58:57:
1a:6d:69:5d:97:04:d5:37:64:aa:76:ea:8c:2e:81:08:2a:5c:
c7:da:ca:fb:64:f8:fa:66:65:e1:40:70:3e:b5:84:b3:0c:52:
e8:ed:04:7c:5b:04:f2:69:de:69:f6:00:41:c9:53:d3:96:53:
38:52:53:5e:cb:dc:52:ec:fc:53:6d:c0:b8:7e:7b:be:c6:df:
7d:09:4c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:19 2025 by rpki-client