Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
File: I1HFLSNz9aW3LcbdEqddE7JluQQ.mft (raw, json)
Hash identifier: YvBqMoUrM3EBIbsjtaY83xrixCOwAoxOy82Z4+Y5OK8=
Subject key identifier: 83:B4:51:78:0B:DC:EC:55:15:2D:79:47:5A:6C:55:8F:41:5A:D9:18
Authority key identifier: 23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04
Certificate issuer: /CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
Certificate serial: 019A71EE7874E2E1D368C87954BDFB7F8054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
Manifest number: 143E
Signing time: Tue 11 Nov 2025 08:00:44 +0000
Manifest this update: Tue 11 Nov 2025 08:00:44 +0000
Manifest next update: Wed 12 Nov 2025 08:00:44 +0000
Files and hashes: 1: I1HFLSNz9aW3LcbdEqddE7JluQQ.crl (hash: BMKJw9YDxjDSaUgamD5t7hzR0EYLtpTkaIAq2jmZsxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:78:74:e2:e1:d3:68:c8:79:54:bd:fb:7f:80:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
Validity
Not Before: Nov 11 08:00:44 2025 GMT
Not After : Nov 12 08:00:44 2025 GMT
Subject: CN=83b451780bdcec55152d79475a6c558f415ad918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2e:84:07:dd:92:78:fa:80:3a:16:e9:3c:fa:
d1:a9:b8:c4:7e:28:97:28:28:88:f6:36:ff:89:c2:
e2:04:9d:7d:62:f3:c5:99:b2:61:a5:77:e1:8f:36:
81:75:38:5f:d1:26:c7:b5:56:b3:9e:05:e2:09:76:
d0:7f:a2:ef:84:b2:6d:cd:51:4b:cd:66:48:e8:ef:
56:d9:28:1e:d7:5a:bb:0e:1c:17:b6:60:fe:ba:3a:
46:25:b3:95:37:a9:8c:e4:57:22:b7:56:1b:ea:f5:
a5:62:47:fe:33:08:5b:23:47:19:34:09:ff:66:c8:
e8:5d:b3:a2:c9:9b:ef:cc:7b:e7:28:15:d9:55:d3:
2a:2c:bc:4a:92:c1:1a:20:79:c2:86:4b:ef:c1:e4:
d5:77:54:56:14:1f:e5:45:ce:20:26:7b:9d:58:77:
14:3c:01:bb:0d:08:88:8a:b5:4e:aa:c5:fd:df:e2:
f1:5e:e2:f7:08:da:9c:9a:f9:4c:ce:3e:88:f9:b8:
70:5b:7b:46:78:79:b1:d2:89:24:c8:24:e6:75:55:
9d:74:5e:cb:47:56:b3:82:fe:41:7d:ca:86:e6:ff:
5c:a6:e6:41:57:e2:c6:2c:51:a8:fb:f7:75:cb:5a:
68:5b:3e:e7:e4:99:a3:13:dd:ce:2d:18:ef:86:68:
c3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B4:51:78:0B:DC:EC:55:15:2D:79:47:5A:6C:55:8F:41:5A:D9:18
X509v3 Authority Key Identifier:
keyid:23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:0a:7a:02:e1:eb:4d:08:ee:c3:cf:93:c7:7f:a2:e8:71:3d:
05:a2:da:f0:bb:0b:3b:4f:c3:05:17:46:01:0d:17:a1:5e:4d:
a0:e3:69:18:21:53:c9:c8:e8:ee:07:33:f2:e8:5b:86:b1:0f:
78:f7:2f:9b:2c:b6:cb:72:43:81:dc:2b:9a:50:72:24:44:d0:
f2:bc:07:41:bb:49:39:ff:14:ae:4c:53:5d:59:46:02:31:55:
ec:9f:af:f1:5a:89:e9:26:7d:26:7a:9a:19:ea:9e:12:55:25:
76:84:72:98:cf:a2:3d:2d:e6:52:f5:09:0b:42:b3:6c:93:fa:
9e:ad:36:fd:91:56:bf:4b:a3:0d:a4:53:8f:9c:7a:fa:cb:2b:
86:43:bc:57:8c:a2:c5:92:f2:d1:b9:20:c4:7e:31:47:d6:11:
bd:3b:fd:6b:e6:16:c5:d7:9f:6e:39:7b:73:20:f2:c4:ed:4a:
c7:20:bf:5e:1a:0e:8f:60:98:7e:8e:c9:cd:72:59:3f:6c:9b:
ec:ab:07:d8:bf:3b:05:9a:eb:e1:e3:e1:d1:11:b5:24:c8:9f:
a1:8c:56:fd:24:44:e7:34:48:85:b8:b1:c4:1e:44:db:e5:0e:
e7:c3:74:b3:dd:8f:15:bb:78:e7:86:77:9d:b6:03:30:65:61:
28:c5:ba:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:55 2025 by rpki-client