Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
File: INaBg9YBj1BMXm-uIo4bNQxvD-8.mft (raw, json)
Hash identifier: z4+OCKfug4JZ881m2vW34yE39Es/ugdN3lo6QmKDbXI=
Subject key identifier: AB:1D:CC:57:DB:92:54:53:5B:47:AC:B5:E2:4F:E9:8B:95:F3:08:1F
Authority key identifier: 20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF
Certificate issuer: /CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
Certificate serial: 019A4E19183A911A251655F574E86933271E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
Manifest number: 0500
Signing time: Tue 04 Nov 2025 09:00:58 +0000
Manifest this update: Tue 04 Nov 2025 09:00:58 +0000
Manifest next update: Wed 05 Nov 2025 09:00:58 +0000
Files and hashes: 1: INaBg9YBj1BMXm-uIo4bNQxvD-8.crl (hash: eSqBVHJWe7fpvtYlnD9tVxSem4s7Hcl/VwPUpHZsy8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:18:3a:91:1a:25:16:55:f5:74:e8:69:33:27:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
Validity
Not Before: Nov 4 09:00:58 2025 GMT
Not After : Nov 5 09:00:58 2025 GMT
Subject: CN=ab1dcc57db9254535b47acb5e24fe98b95f3081f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f5:41:f4:dc:67:ce:10:6c:9a:30:b4:89:ee:
48:e9:9a:87:b5:b1:01:98:70:12:aa:68:42:22:1b:
cb:24:4e:70:e9:49:86:17:46:16:fb:55:83:b6:5e:
bc:9b:76:74:8f:78:a1:34:72:31:b7:f7:e3:d9:91:
97:6e:17:73:90:fd:1f:9f:a7:de:44:d2:46:08:6c:
7a:c4:4f:43:80:b3:c4:77:fb:9e:9e:30:cf:01:e7:
78:f9:be:38:ec:64:f7:e1:95:56:83:c1:63:19:9e:
4b:44:23:07:78:b5:fa:02:e4:7a:8a:a3:74:45:84:
1d:6e:03:71:8b:2f:3e:99:54:76:82:ae:e7:82:1a:
ed:36:ca:83:72:d0:7a:2f:af:e6:c5:67:8e:05:54:
b1:9b:dc:e7:32:0a:46:1d:c4:fe:d7:80:ea:cb:07:
9a:c3:87:b4:26:12:fd:db:4d:85:36:07:aa:30:6d:
e1:99:65:0a:b3:c8:c6:d4:a3:fb:79:c0:39:2f:bc:
ad:b7:16:78:2a:38:dd:34:97:00:28:43:ca:f7:dc:
b8:ca:50:f8:95:e9:76:cf:eb:75:4b:c7:25:e2:a5:
49:04:fc:69:c5:a8:b4:d7:ed:2e:12:7c:ef:f1:d2:
72:d9:f0:75:ad:4d:f5:b8:0c:24:f9:0d:30:5e:e1:
2b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1D:CC:57:DB:92:54:53:5B:47:AC:B5:E2:4F:E9:8B:95:F3:08:1F
X509v3 Authority Key Identifier:
keyid:20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:04:52:aa:2b:44:65:8f:c7:cd:1d:0e:5a:37:95:ed:5d:7f:
aa:61:b1:3e:9f:ff:65:29:fa:69:ec:2a:e9:f0:be:59:40:a4:
29:d1:24:50:93:16:4d:ac:f7:90:30:9f:df:62:ce:c1:69:6e:
4c:01:40:48:1f:82:04:63:99:63:1b:da:fe:97:b0:f5:0c:a6:
17:62:74:4a:82:66:fb:8c:cf:cf:60:0b:f4:dd:72:16:34:15:
bf:4e:d9:df:c7:b6:3c:b2:79:69:b6:bb:b0:20:45:cc:72:6b:
ba:d2:f5:45:13:38:e7:8b:2c:3c:e8:f8:f2:1f:f7:bf:2d:55:
af:2b:74:89:79:6b:0f:fd:32:40:c7:be:43:99:6f:f0:27:a0:
8d:cd:29:96:b7:95:73:c9:bf:7e:2e:47:ae:64:52:05:f3:d7:
8f:74:31:ea:4c:71:14:06:8d:1d:b9:02:6a:fe:ae:cb:8e:93:
d0:bd:e5:d0:da:4d:fe:a0:18:6f:20:37:e1:fd:a9:64:d9:66:
39:30:69:d8:e6:1e:36:8f:f2:48:de:fc:70:7b:04:a1:75:26:
03:74:df:5d:3a:a9:fe:c7:36:1c:4b:c7:50:9e:e7:d2:80:b7:
ab:ac:b1:45:a7:93:b9:69:83:8a:a1:85:fd:cf:07:58:b4:ab:
fc:f6:72:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:50 2025 by rpki-client