
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
File: I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft (raw, json)
Hash identifier: hO7o5131Rqoq4cqHQenMVqMObjP7Kzw9Bm5MoaOSGD8=
Subject key identifier: 83:D9:E2:33:0F:02:A0:7A:D5:A4:35:0F:0B:73:A4:98:24:FF:CC:81
Authority key identifier: 23:F8:9F:57:D0:72:84:9E:0C:AB:21:95:CD:0B:AF:25:57:93:5E:A0
Certificate issuer: /CN=23f89f57d072849e0cab2195cd0baf2557935ea0
Certificate serial: 019922FA74F9594D2375E754BE352E92E80C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 07:01:03 +0000
Manifest this update: Sun 07 Sep 2025 07:01:03 +0000
Manifest next update: Mon 08 Sep 2025 07:01:03 +0000
Files and hashes: 1: I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl (hash: LzYO0e3tUM564J5FWTlNWYQYH9b8G3MYsQDOyzVqPWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:74:f9:59:4d:23:75:e7:54:be:35:2e:92:e8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f89f57d072849e0cab2195cd0baf2557935ea0
Validity
Not Before: Sep 7 07:01:03 2025 GMT
Not After : Sep 8 07:01:03 2025 GMT
Subject: CN=83d9e2330f02a07ad5a4350f0b73a49824ffcc81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:58:f5:62:cc:4a:95:f1:94:bb:7f:b7:37:8a:
b2:e3:b4:b8:6e:ae:a8:69:fe:22:b8:66:c3:49:29:
38:90:96:4d:2f:41:b7:64:24:63:58:80:66:8f:74:
23:5a:d4:a1:fb:e1:27:f8:43:06:4f:c0:2e:ed:da:
91:da:2b:32:f7:9d:84:b5:14:4f:64:60:fa:22:ca:
b9:52:23:4f:d4:c0:15:7b:74:d4:fd:a6:1b:0c:aa:
0c:74:00:e5:01:78:d9:6b:ba:ca:3d:29:7a:23:60:
a0:30:a9:91:f8:3e:dc:56:92:39:49:ba:f4:78:68:
c0:55:35:f1:b1:37:55:92:b4:ff:d2:6b:f3:55:17:
0c:ab:37:36:0a:16:b0:9d:65:dc:1d:6d:b7:73:39:
fa:75:26:e7:e7:f5:8d:55:ea:86:c2:bd:a8:16:25:
34:a7:5a:39:30:dd:33:06:04:da:21:73:94:c3:e3:
59:bb:e7:ef:da:9b:e0:ca:e0:3d:c7:27:a7:cc:9e:
f6:83:2c:78:a3:13:c2:c5:c4:0d:d1:28:8e:66:64:
7f:ad:ed:68:32:a7:d5:04:cb:c3:22:dc:4b:5c:b6:
ef:3e:2d:a9:d6:07:a4:fa:51:89:18:c0:30:73:78:
3c:13:22:24:a0:b7:2f:7a:58:0d:ea:7a:43:8b:cc:
30:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D9:E2:33:0F:02:A0:7A:D5:A4:35:0F:0B:73:A4:98:24:FF:CC:81
X509v3 Authority Key Identifier:
keyid:23:F8:9F:57:D0:72:84:9E:0C:AB:21:95:CD:0B:AF:25:57:93:5E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:65:55:6e:00:c1:fa:45:18:18:4a:ac:ca:58:f9:0f:57:30:
04:af:49:9d:26:e4:2d:0d:97:f5:a0:c8:7a:1a:af:4d:dd:b6:
a6:26:ce:22:49:52:aa:07:ed:65:d5:f4:8b:3a:3d:c1:d0:75:
d3:e6:9d:87:66:71:bc:50:3d:45:09:ea:f9:38:8e:ec:6d:fe:
48:cb:e2:d3:10:65:4e:c3:d1:5d:f6:16:91:2c:3a:e6:e8:62:
94:08:1b:3f:92:1f:b2:e0:8b:a2:1e:41:fe:b8:35:69:5c:66:
bd:54:81:7d:0c:b1:e4:46:90:4d:e5:2f:1f:a5:85:8f:eb:ab:
63:0a:8f:34:1b:3a:ea:c4:00:fd:09:d6:27:8e:03:3c:27:6a:
69:05:e4:01:c5:3e:52:2d:6f:f3:c2:3f:c2:4a:43:6a:b3:0f:
e9:0d:23:5a:b6:80:bb:e9:8b:c6:fe:80:aa:e9:a2:39:8e:60:
fe:1b:fd:7c:0e:f4:9a:69:3d:ce:18:94:b2:e8:62:0d:c4:4c:
34:00:1c:cb:84:37:6e:b4:a7:74:cb:5c:b7:eb:0a:f4:66:44:
9f:72:94:ae:3b:1f:e0:bf:40:a4:32:73:33:d3:04:0b:d4:44:
de:bc:57:d7:02:f4:7d:5b:76:1f:38:06:7a:b4:58:f4:73:66:
7f:3c:29:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:48 2025 by rpki-client