Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
File: IlVxaqH0w8EChxihwzHiKzOerXw.mft (raw, json)
Hash identifier: DEePZ37Sdzq4MqU9h8UweZ1XCBfbkjxXkwrXAkSRLnQ=
Subject key identifier: 8C:71:24:4F:8E:64:23:39:3B:F5:D8:AF:C6:57:9E:B7:1B:47:15:01
Authority key identifier: 22:55:71:6A:A1:F4:C3:C1:02:87:18:A1:C3:31:E2:2B:33:9E:AD:7C
Certificate issuer: /CN=2255716aa1f4c3c1028718a1c331e22b339ead7c
Certificate serial: 019A4FCFF2EF732F21123ABB0EEF9C1B9E51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlVxaqH0w8EChxihwzHiKzOerXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
Manifest number: 138E
Signing time: Tue 04 Nov 2025 17:00:19 +0000
Manifest this update: Tue 04 Nov 2025 17:00:19 +0000
Manifest next update: Wed 05 Nov 2025 17:00:19 +0000
Files and hashes: 1: IlVxaqH0w8EChxihwzHiKzOerXw.crl (hash: yKN3jJlp6euJ+EZ2ThdeiSxTqAl/i3xVsa6ZaI73jNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IlVxaqH0w8EChxihwzHiKzOerXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:f2:ef:73:2f:21:12:3a:bb:0e:ef:9c:1b:9e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2255716aa1f4c3c1028718a1c331e22b339ead7c
Validity
Not Before: Nov 4 17:00:19 2025 GMT
Not After : Nov 5 17:00:19 2025 GMT
Subject: CN=8c71244f8e6423393bf5d8afc6579eb71b471501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:63:e4:80:54:90:86:ae:57:7f:44:9b:c3:ee:
64:5d:a8:e6:95:a6:34:fc:e8:b0:bd:c2:3e:93:f2:
05:8a:9b:aa:3d:93:40:e8:65:7e:bf:83:05:37:68:
17:22:ed:53:38:b4:ee:d0:ac:e2:cb:15:b8:20:e6:
1f:73:c7:b1:85:ce:67:ae:0e:a8:57:c8:e5:02:e8:
e0:03:4a:9b:98:d6:7e:5b:ea:09:88:e8:f6:a3:25:
2b:b0:d6:67:e9:61:7d:57:76:21:04:b5:8a:fb:35:
0c:a8:da:68:6d:05:f9:08:12:2f:80:39:3d:09:5b:
0e:35:fa:7e:b9:73:88:6d:ad:39:66:9c:b0:d6:89:
d5:b8:80:74:96:74:16:b1:7f:96:96:4c:b7:db:53:
22:45:5c:c1:05:8a:cc:1a:51:89:df:39:33:06:fa:
f3:57:90:bf:84:fc:69:d8:34:46:31:86:c7:a0:4a:
b4:6e:23:f2:16:2f:a5:5f:33:f5:3b:42:d6:66:41:
cb:16:38:79:fc:63:1e:6c:6a:c6:e6:98:64:66:52:
d5:2e:bc:52:d2:b5:7c:60:b3:92:78:4d:d2:1b:6e:
63:77:a5:5f:cc:c9:9e:1e:66:72:e5:3f:04:66:ad:
a7:e6:4f:4d:d5:33:47:d4:77:ab:8b:97:35:ea:17:
62:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:71:24:4F:8E:64:23:39:3B:F5:D8:AF:C6:57:9E:B7:1B:47:15:01
X509v3 Authority Key Identifier:
keyid:22:55:71:6A:A1:F4:C3:C1:02:87:18:A1:C3:31:E2:2B:33:9E:AD:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlVxaqH0w8EChxihwzHiKzOerXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:84:62:c5:a8:5a:41:47:a8:ab:52:80:ef:3d:41:44:b1:11:
74:ba:ad:9a:93:ea:ea:c5:38:ba:b1:db:08:3d:1b:8b:f5:4b:
cb:b5:55:da:b9:bb:9a:fc:e4:3a:26:98:3d:c4:7b:44:9d:c3:
4f:f5:1d:ad:fc:4b:70:6e:6c:28:9b:52:04:be:ef:78:48:97:
5a:0a:f8:41:c9:59:3c:fb:28:fc:31:9c:4c:c3:1e:cf:a9:c1:
1a:7d:0e:52:f5:31:66:3b:46:59:21:b4:c1:0c:ba:33:33:28:
a5:45:ff:80:c8:97:a6:d4:2d:2e:2c:2e:39:07:a9:79:8e:e2:
05:4f:17:dd:49:a2:90:e5:a5:7f:b7:2f:84:95:35:ff:ba:77:
97:e3:64:f2:de:98:87:a0:45:9e:cc:d1:dc:35:9e:82:75:af:
f6:45:17:65:b1:57:ef:69:4f:62:2a:9a:7f:28:9a:b6:21:17:
09:d9:15:f2:7e:e0:09:60:dd:3c:7a:dc:8e:37:4b:55:87:9a:
25:21:ee:3e:c2:47:ab:25:ff:85:e2:66:bd:e6:b4:5e:18:80:
d6:b5:a9:fb:0e:f6:39:09:66:87:94:ec:95:41:db:3e:38:6d:
eb:85:2a:0b:1a:a2:ca:c7:d5:c5:7c:2f:16:ec:fe:f6:d4:90:
09:e9:6c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:36 2025 by rpki-client