Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
File: I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft (raw, json)
Hash identifier: 3+1ZNC29A2xd2NCT2/kgtFx0FVmgmXbSxsIluRyjjIs=
Subject key identifier: C9:9F:3F:46:01:FB:9C:B4:5D:6D:A9:68:A3:CF:40:F1:12:14:02:F3
Authority key identifier: 23:F8:9F:57:D0:72:84:9E:0C:AB:21:95:CD:0B:AF:25:57:93:5E:A0
Certificate issuer: /CN=23f89f57d072849e0cab2195cd0baf2557935ea0
Certificate serial: 019A7112A0EA2A581C91C79A062BAAF7D770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 04:00:37 +0000
Manifest this update: Tue 11 Nov 2025 04:00:37 +0000
Manifest next update: Wed 12 Nov 2025 04:00:37 +0000
Files and hashes: 1: I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl (hash: LHAQPZfjDf4tLpoA4LP8gpWGXzjVWcTrcmsbBpNDO3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:a0:ea:2a:58:1c:91:c7:9a:06:2b:aa:f7:d7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f89f57d072849e0cab2195cd0baf2557935ea0
Validity
Not Before: Nov 11 04:00:37 2025 GMT
Not After : Nov 12 04:00:37 2025 GMT
Subject: CN=c99f3f4601fb9cb45d6da968a3cf40f1121402f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f9:c3:34:7e:d8:53:c1:46:0f:64:2c:25:d1:
8f:e8:7a:11:a4:09:c0:a5:36:97:ff:80:7e:5e:14:
2a:94:7b:a7:2e:4d:90:9d:e6:8b:60:01:01:75:6a:
6c:fd:cb:35:ab:7f:9f:55:07:a1:fc:6d:1b:d0:ae:
f0:e6:3d:53:32:97:44:a6:28:86:96:49:da:30:6f:
43:08:53:da:09:d2:45:e3:26:46:5b:53:be:30:0a:
07:83:99:6b:18:92:db:0a:5c:61:e3:06:03:ee:3a:
8f:4b:2e:bc:78:3e:85:c2:5e:30:59:63:e3:82:62:
52:43:9d:50:a7:02:40:b9:a3:81:25:ec:f5:17:d4:
15:b8:be:e3:4b:00:2e:47:93:af:c6:3f:6c:e0:63:
21:4d:92:a6:56:1d:9e:60:d9:c1:d4:5e:98:f8:66:
0e:d2:f5:8a:c3:8e:29:7c:50:14:bc:57:dc:3a:97:
1d:19:10:c4:06:a4:13:25:9a:3e:f8:56:61:35:cb:
28:27:ad:5e:55:2c:54:8d:4e:90:19:85:ef:26:9b:
8d:02:09:60:d1:33:18:00:f2:2c:b5:57:12:b3:c3:
2f:63:b1:93:da:99:dc:b9:1b:6d:7c:7a:4c:6e:66:
98:0d:12:b5:9e:68:13:94:52:14:c1:8f:15:d7:b8:
4b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9F:3F:46:01:FB:9C:B4:5D:6D:A9:68:A3:CF:40:F1:12:14:02:F3
X509v3 Authority Key Identifier:
keyid:23:F8:9F:57:D0:72:84:9E:0C:AB:21:95:CD:0B:AF:25:57:93:5E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:75:c4:e8:73:39:ee:58:82:01:3d:ee:50:5d:58:84:84:5e:
8b:0d:b5:d2:0b:a7:b5:53:db:42:c8:8a:42:b6:29:37:d7:02:
0c:4c:5e:0d:f6:0f:72:dd:c2:d3:e0:8e:5c:59:ca:2d:02:ff:
01:83:f6:bf:40:50:ec:4e:43:75:d2:23:10:8e:7e:5f:44:4f:
30:32:11:6b:f3:4c:b5:b8:05:26:a9:ed:7c:1f:f6:90:72:37:
03:8a:15:0d:fe:07:15:a4:8b:ac:b1:55:03:87:74:54:bf:61:
80:9d:2d:54:bf:39:a7:c2:0b:02:88:19:d0:7e:72:b6:e8:51:
bc:b3:7a:8f:ec:36:63:fb:6a:a4:36:06:0b:9f:aa:2c:00:fd:
03:48:1d:a5:dc:12:0c:01:f9:06:83:56:7f:f2:08:c4:4e:66:
42:1c:60:7a:09:b6:75:40:b7:fd:53:ea:89:c0:5c:12:39:0e:
3e:69:d8:fb:d5:6d:44:30:33:97:94:c4:19:26:0f:fe:49:25:
6e:12:a6:6c:ec:bb:78:de:1e:14:ef:b8:7f:84:f0:44:db:0d:
98:6a:da:c2:d2:42:e7:11:a4:9b:b2:a7:c9:54:27:9c:33:ee:
30:fa:dc:92:54:c4:4c:2b:82:03:50:68:66:9b:8d:95:65:fb:
8f:6c:90:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:43 2025 by rpki-client