Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
File: Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft (raw, json)
Hash identifier: Y5YmyPjW8fxM0tFtftSISSA8iGddaJQB6ZCf0hH/1to=
Subject key identifier: 87:97:F4:37:EF:51:F0:49:43:97:60:91:4A:31:30:C7:50:50:03:C3
Authority key identifier: 23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E
Certificate issuer: /CN=233adc97f9826262007f46286591830df58fc55e
Certificate serial: 019A4F61FDE8928FEFE63FD7A531781F3A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
Manifest number: 0B38
Signing time: Tue 04 Nov 2025 15:00:13 +0000
Manifest this update: Tue 04 Nov 2025 15:00:13 +0000
Manifest next update: Wed 05 Nov 2025 15:00:13 +0000
Files and hashes: 1: Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl (hash: TaO+8KhkX7aVO5yZivvqCEhMz1RPhXtjhNf0Dfpd4DY=)
2: R7UR19A8DA5u7WHUKAJI549nkdo.roa (hash: 4PQK0W7UKUZhH5u+a1D7FV7JRsd1931HwX1XToed8Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:fd:e8:92:8f:ef:e6:3f:d7:a5:31:78:1f:3a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233adc97f9826262007f46286591830df58fc55e
Validity
Not Before: Nov 4 15:00:13 2025 GMT
Not After : Nov 5 15:00:13 2025 GMT
Subject: CN=8797f437ef51f049439760914a3130c7505003c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fe:cd:cc:3e:5b:28:00:0b:00:da:44:d0:60:
36:0f:59:ec:68:3e:9d:c5:5f:3b:3a:4f:6d:37:09:
60:e0:1d:e2:9c:c2:6d:86:72:88:f8:66:83:b3:09:
79:be:22:cf:22:7d:05:27:82:34:3f:5f:26:58:11:
94:fa:4b:9e:44:c7:28:56:3f:10:a6:f3:e7:05:a8:
be:ec:9b:24:60:ac:5c:8b:49:ff:2b:88:0f:70:7e:
09:35:0a:d6:61:21:e0:f5:65:66:f0:5e:e3:e1:6b:
bc:c0:d3:a3:4e:7a:a0:17:7a:cc:8f:70:cd:c7:6b:
e3:af:8b:6c:f3:c6:1d:10:aa:6c:21:eb:a0:d8:4c:
a1:92:ff:60:13:bb:aa:e2:7b:40:55:17:5c:09:fa:
ed:7c:1e:f1:f1:6f:93:d0:33:80:15:e4:fc:a2:ff:
cd:b0:3b:52:f2:b6:28:fa:38:74:a1:ae:c3:28:f1:
4a:9c:3f:06:68:3d:3b:37:18:60:9e:cb:28:87:be:
32:7f:3a:7b:12:33:90:1c:0c:b6:f5:89:99:6a:c4:
ec:c3:13:72:6c:2f:89:1f:b0:55:4d:ad:73:4a:d7:
ba:91:c6:27:d2:05:b1:7b:ca:d6:13:92:ab:a3:e8:
09:f7:11:09:cc:a7:fd:5a:60:44:d4:a4:cb:69:ee:
d6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:97:F4:37:EF:51:F0:49:43:97:60:91:4A:31:30:C7:50:50:03:C3
X509v3 Authority Key Identifier:
keyid:23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ca:d8:79:94:2c:7c:16:7f:a8:35:83:8e:d3:50:1e:af:12:
a1:29:59:05:fc:07:d0:03:6d:97:de:9e:88:71:27:53:af:f4:
f7:98:c4:66:4b:b3:81:ed:79:ca:68:33:4f:35:e1:44:22:3c:
9e:be:35:58:b8:83:88:63:d8:a6:9d:43:80:1f:33:b7:7d:10:
69:85:a1:6a:fe:eb:7b:80:cf:00:9a:ad:9a:a1:83:21:8e:cc:
41:b8:a2:1b:55:02:89:fa:e3:dd:4d:df:37:a8:fe:ba:10:3e:
7e:b4:84:21:7d:c6:21:6e:fa:b4:31:12:6e:ce:c9:91:63:2d:
27:54:b5:41:bb:b4:ec:06:7f:1e:81:53:01:ec:fc:33:62:fc:
cf:92:dc:f7:83:c0:35:e7:a6:36:53:3a:96:c8:8b:1e:50:ff:
25:d1:7a:d4:bd:f0:c1:24:36:30:c9:6a:23:08:7a:5f:f4:60:
cf:4e:b3:5a:c1:23:c4:82:0d:50:3d:ad:ae:64:69:1b:71:72:
c2:eb:77:6b:02:0e:a3:86:c0:a7:15:7b:37:ca:a0:ae:6e:8e:
24:55:5d:f1:e2:29:a1:b0:98:87:dc:27:80:b3:2d:98:79:71:
3e:68:9b:37:59:64:e1:03:5f:b4:91:30:d3:94:b4:94:3d:c9:
f2:78:51:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:41 2025 by rpki-client