Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
File: IMnySVGbH_R5NQ8xclT0Bei_yr0.mft (raw, json)
Hash identifier: KPGfM+c79iBMQvVZ/nSVkqkDW1GwifB2dmFiDHePnYY=
Subject key identifier: C6:83:42:99:44:79:A0:CB:69:D9:50:B7:8A:74:09:63:22:53:F6:63
Authority key identifier: 20:C9:F2:49:51:9B:1F:F4:79:35:0F:31:72:54:F4:05:E8:BF:CA:BD
Certificate issuer: /CN=20c9f249519b1ff479350f317254f405e8bfcabd
Certificate serial: 019A729346202F7FA0984BB30AB31BD16C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
Manifest number: 1115
Signing time: Tue 11 Nov 2025 11:00:45 +0000
Manifest this update: Tue 11 Nov 2025 11:00:45 +0000
Manifest next update: Wed 12 Nov 2025 11:00:45 +0000
Files and hashes: 1: IMnySVGbH_R5NQ8xclT0Bei_yr0.crl (hash: UI4A0OtYOYkjZKlGNvL/xK6jb4a0YcJhNg1LG1G9mow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:46:20:2f:7f:a0:98:4b:b3:0a:b3:1b:d1:6c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c9f249519b1ff479350f317254f405e8bfcabd
Validity
Not Before: Nov 11 11:00:45 2025 GMT
Not After : Nov 12 11:00:45 2025 GMT
Subject: CN=c68342994479a0cb69d950b78a7409632253f663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:4b:c9:c9:6f:78:4a:ec:67:80:53:8a:38:08:
26:63:89:63:49:48:83:84:99:a4:1d:36:24:0d:e3:
51:8d:ac:42:e9:82:a8:73:bb:de:35:43:3e:f5:fd:
30:47:ce:a0:6b:c5:52:cc:c1:2c:30:32:0f:7e:f9:
7f:fe:b1:27:63:ec:e0:27:59:d4:e2:15:54:21:fb:
92:fb:00:81:a8:f6:2e:18:65:bf:a6:f6:f7:08:55:
99:d8:4f:fc:7e:94:18:84:f1:9a:78:21:c8:86:5b:
7d:fb:42:01:14:13:c7:e9:7e:e4:df:b8:22:72:c7:
d7:ab:3a:25:03:b2:69:c1:fb:d3:75:90:02:15:b9:
d7:b0:e3:d0:9c:57:39:f4:3f:eb:75:63:ac:d3:63:
e8:59:e9:e9:30:78:f2:4f:fe:be:03:3b:22:bf:81:
2f:6a:81:5a:e4:71:e4:c4:55:06:ba:bb:a3:91:3c:
6c:0a:30:f2:9e:79:1a:fd:d0:4d:f8:ce:a2:8d:4c:
00:fc:86:26:c3:7c:4d:56:b5:68:25:e7:e4:1b:db:
31:97:b8:e2:85:aa:49:9e:e7:a1:06:57:04:11:f3:
10:ef:e3:5c:b2:05:c4:5f:b2:fc:25:78:76:06:be:
b7:e1:52:1f:aa:58:28:a8:4b:1e:2e:44:27:3b:89:
81:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:83:42:99:44:79:A0:CB:69:D9:50:B7:8A:74:09:63:22:53:F6:63
X509v3 Authority Key Identifier:
keyid:20:C9:F2:49:51:9B:1F:F4:79:35:0F:31:72:54:F4:05:E8:BF:CA:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMnySVGbH_R5NQ8xclT0Bei_yr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/38c26f-25a2-4b20-9ecd-0e6bced00463/1/IMnySVGbH_R5NQ8xclT0Bei_yr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:29:af:21:49:ec:fe:56:2a:04:55:04:ab:e8:d9:17:42:7f:
fb:07:ca:e2:d0:c5:c5:11:df:5f:ef:bc:a8:c8:9f:69:2f:7e:
95:13:c6:7d:a0:dd:6f:6d:dc:bf:48:82:3d:4b:e3:7a:f0:14:
0f:1e:83:fe:01:2f:22:8f:10:27:b1:2a:1d:ac:56:7c:46:45:
21:b6:a8:31:6b:83:52:d5:21:88:3c:f4:72:46:91:16:48:3d:
71:1d:68:74:61:83:4c:42:d1:f1:32:ed:78:cf:c2:a9:3a:e3:
f0:46:ae:9e:95:2c:c3:2e:93:12:05:f5:cd:65:7a:e4:24:38:
c5:31:b2:6d:05:72:84:bd:49:d2:ef:5f:1d:46:6d:80:77:08:
53:05:9d:21:ca:d6:01:dc:80:9d:a4:d9:35:3e:11:1c:d3:f4:
b1:fa:c8:19:3a:20:df:c5:c3:ee:a6:ed:f7:77:14:8c:bf:74:
fe:4b:57:25:b4:9d:be:c6:fa:d5:59:87:8a:c1:16:71:93:c4:
60:4c:78:8f:39:ef:84:5b:2b:67:a6:38:d7:67:ec:f6:b0:af:
51:df:40:be:85:18:6f:db:51:6b:38:bf:fd:8c:e9:0b:7e:cc:
ae:fe:85:aa:0c:24:af:d1:4f:56:17:b5:67:86:d3:27:7e:8e:
37:5b:08:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:26 2025 by rpki-client