Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
File: iKslD4208gR6QBWFwmTzjA4ih_4.mft (raw, json)
Hash identifier: 0ylvbiRDxl0vYZ2v4nQzU/Q3Ex7TVEvsTUE8vZ43770=
Subject key identifier: C6:52:1A:96:CF:29:5E:93:05:15:55:07:3D:16:DB:E1:8C:3E:40:CF
Authority key identifier: 88:AB:25:0F:8D:B4:F2:04:7A:40:15:85:C2:64:F3:8C:0E:22:87:FE
Certificate issuer: /CN=88ab250f8db4f2047a401585c264f38c0e2287fe
Certificate serial: 019A559B4D6F0DFA16EFC56B16E310469480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
Manifest number: 153D
Signing time: Wed 05 Nov 2025 20:00:32 +0000
Manifest this update: Wed 05 Nov 2025 20:00:32 +0000
Manifest next update: Thu 06 Nov 2025 20:00:32 +0000
Files and hashes: 1: iKslD4208gR6QBWFwmTzjA4ih_4.crl (hash: HbEuR1Pgo7wJSEeJSZeKYdgtpUzp8iVit0cKcGzm8ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:9b:4d:6f:0d:fa:16:ef:c5:6b:16:e3:10:46:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ab250f8db4f2047a401585c264f38c0e2287fe
Validity
Not Before: Nov 5 20:00:32 2025 GMT
Not After : Nov 6 20:00:32 2025 GMT
Subject: CN=c6521a96cf295e93051555073d16dbe18c3e40cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:39:9e:7c:33:e5:19:90:04:61:a0:2e:c0:e6:
69:48:65:fc:5a:6f:ea:0e:35:d5:40:d9:14:22:89:
6d:3f:61:4d:58:71:5d:4c:d9:f1:df:f5:a4:be:3b:
48:cd:7b:52:15:08:28:2a:77:69:ad:44:2e:aa:c5:
d6:c4:e4:9e:81:1e:c0:09:c4:17:03:14:97:9c:3d:
c6:cc:1b:93:03:62:16:a5:4c:4b:ad:97:fa:82:bf:
65:4b:ad:aa:a5:5b:7d:4a:75:2a:33:0f:8c:b4:2e:
8b:83:09:4d:f6:b8:e4:a5:5a:95:58:1c:68:44:ee:
40:ea:07:e6:1a:db:7e:31:c0:d5:09:df:d3:32:4e:
25:8c:48:fe:91:1f:e2:b7:7a:72:da:6b:f6:e1:f3:
9e:91:d9:29:47:a4:49:8d:a9:fc:ff:87:45:bb:dc:
c8:4e:ef:41:3c:26:06:34:75:49:80:f4:96:8b:75:
31:d3:de:30:74:9f:68:15:85:55:92:88:b5:52:53:
eb:7b:da:9a:2e:d5:4b:bb:99:f1:db:10:c1:d5:72:
f8:5a:a6:f3:df:77:2e:b6:1d:88:21:a7:bd:42:f2:
3e:e3:2d:54:5e:6a:e7:ea:94:45:69:34:cd:d4:45:
bd:3b:e6:56:84:d0:1a:6b:c7:3b:42:d4:97:cd:f1:
0c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:52:1A:96:CF:29:5E:93:05:15:55:07:3D:16:DB:E1:8C:3E:40:CF
X509v3 Authority Key Identifier:
keyid:88:AB:25:0F:8D:B4:F2:04:7A:40:15:85:C2:64:F3:8C:0E:22:87:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:95:9b:2a:a6:fe:c2:d4:18:7a:66:fe:5c:5c:77:44:49:29:
93:2e:64:2a:ee:32:59:6a:2e:0e:3e:8a:a8:1e:db:eb:ab:bb:
c0:be:2d:13:13:cb:a3:0e:a5:60:9c:ec:43:bb:f4:cd:87:55:
02:fd:c5:15:26:d6:30:65:dc:61:2a:6d:72:e8:06:24:25:1c:
7f:db:c2:ea:04:7d:63:bd:f1:ab:41:00:ea:b7:0d:c0:2d:9d:
9d:a5:09:d6:3f:c0:89:c8:b8:14:0a:f0:a6:07:a6:96:d5:9d:
6b:ff:43:75:cc:70:a5:b8:d1:12:5b:8e:b8:4b:53:7b:d5:e0:
b7:13:97:ad:43:c1:36:be:16:f1:1a:2a:91:ca:58:99:d8:a1:
84:15:1b:19:90:58:8d:5b:ab:25:5c:98:5d:2f:e2:a3:47:5f:
ce:e1:a4:da:f9:b9:fd:55:ec:04:fe:68:89:ed:5e:7a:a6:53:
33:73:d0:c0:d3:dd:32:a4:20:b3:f4:a7:eb:40:73:b7:b7:b4:
72:5d:3b:94:95:d0:72:f8:30:bf:29:86:52:55:4f:0c:67:bd:
71:85:10:6d:1d:7b:7b:5b:6f:c0:40:55:ad:42:27:3a:ce:68:
ff:bf:ac:5d:83:ed:f9:d9:5d:f2:53:ed:ef:d9:be:e1:2c:5c:
b8:16:11:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:02:56 2025 by rpki-client