Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft
File: ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft (raw, json)
Hash identifier: nvFQaXztZPnkHJV6oSXmLiDBun63qXpDqGWOwOoqZic=
Subject key identifier: 8D:2D:27:F4:87:D8:C7:A9:F3:2F:8A:8B:A4:DA:D1:CD:C8:59:38:7F
Authority key identifier: 8B:15:81:27:E9:87:FE:03:71:1B:7A:97:D4:CA:9D:FA:00:06:52:8C
Certificate issuer: /CN=8b158127e987fe03711b7a97d4ca9dfa0006528c
Certificate serial: 019A711331CEAD5253C2282595EAADBAC80A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft
Manifest number: 11DD
Signing time: Tue 11 Nov 2025 04:01:14 +0000
Manifest this update: Tue 11 Nov 2025 04:01:14 +0000
Manifest next update: Wed 12 Nov 2025 04:01:14 +0000
Files and hashes: 1: ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl (hash: 6+kfjSaYo3RxCuyuixqLx60ucQgJdX95sX25QTDHybg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:31:ce:ad:52:53:c2:28:25:95:ea:ad:ba:c8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b158127e987fe03711b7a97d4ca9dfa0006528c
Validity
Not Before: Nov 11 04:01:14 2025 GMT
Not After : Nov 12 04:01:14 2025 GMT
Subject: CN=8d2d27f487d8c7a9f32f8a8ba4dad1cdc859387f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3a:be:80:14:14:a4:bc:85:46:7b:91:3f:ba:
dd:d3:3e:c4:e7:3e:00:54:41:40:bf:3c:f7:e7:8f:
c5:d3:c3:e2:36:4a:08:10:1c:c3:80:cd:bc:dd:94:
a3:3f:e9:a9:6d:ce:34:da:84:d2:49:d9:2f:81:0f:
7f:53:0c:3c:71:04:d8:57:92:c3:53:59:ab:2c:8e:
0b:a7:15:c0:a0:7a:a5:45:49:43:8f:90:80:e9:7e:
9b:60:1b:cf:ec:e5:e0:3f:30:d9:79:81:a0:20:d8:
06:d5:b1:5a:05:e3:7e:5b:69:64:88:07:f5:f8:e1:
a9:1b:7c:d4:3c:f2:36:69:33:af:12:8e:fc:79:75:
54:1b:76:3e:cf:a8:42:97:3f:c0:91:e3:1e:6a:83:
62:35:b9:91:ac:45:fb:00:5f:4d:11:c3:c2:0f:8c:
54:e7:76:c7:8a:82:9c:6e:a7:b8:07:a5:94:25:6a:
ba:0e:f8:93:db:b4:2c:56:c6:46:59:3c:d2:03:e5:
01:11:15:81:ec:3f:8d:fd:4c:f3:81:58:b2:08:c8:
b1:03:cb:eb:3c:a8:4f:d9:c3:1b:13:9d:19:a7:df:
10:8d:e4:c3:d6:4a:b5:1f:86:9a:85:28:fa:82:23:
51:4f:16:57:27:27:ee:f8:cb:a5:b7:db:33:42:8c:
54:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2D:27:F4:87:D8:C7:A9:F3:2F:8A:8B:A4:DA:D1:CD:C8:59:38:7F
X509v3 Authority Key Identifier:
keyid:8B:15:81:27:E9:87:FE:03:71:1B:7A:97:D4:CA:9D:FA:00:06:52:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7d:81:a8:83:2a:4b:f7:1a:4f:fc:fb:e4:ba:f5:4f:74:3b:
a2:b1:79:2b:2a:b0:34:90:f1:c2:b6:bd:e0:66:ee:52:c4:8c:
ed:17:ed:45:f9:a0:b0:df:8b:13:1b:83:28:09:41:5e:28:91:
23:43:04:35:af:31:61:88:61:08:93:b1:88:a4:21:fc:bf:25:
de:30:c4:65:7d:d6:b1:e7:df:82:ed:3b:23:a1:d7:1e:7f:88:
c6:1a:8c:6f:cf:95:74:1f:2d:70:c5:d2:e0:b5:ce:18:c7:a2:
db:41:e8:6d:cc:a2:a5:35:2e:44:a5:70:f0:fb:97:29:2a:ff:
1d:31:ca:57:01:ef:fd:1f:70:7f:83:db:54:f9:eb:42:2a:2d:
de:06:7b:49:1b:e1:88:22:e9:f9:95:b1:eb:81:0f:8b:97:a6:
23:c4:7c:ed:3c:00:c9:7b:87:9e:ac:fb:22:2a:06:81:7e:27:
cb:a1:0a:c1:bd:fc:9e:16:ce:68:4e:8d:fe:8e:d2:36:31:71:
d4:11:21:60:2b:96:f7:02:94:94:f4:1d:30:0f:fb:c5:b2:84:
15:ef:52:b0:f3:a2:0b:2e:72:37:50:2a:bb:0a:4d:79:cc:20:
f0:8c:ba:15:cf:27:2a:b4:7a:9f:04:2b:53:93:dc:68:d1:f1:
86:ea:d9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:55 2025 by rpki-client