Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
File: iSWuMjSiyXwn9171HT_zJr4GDiw.mft (raw, json)
Hash identifier: eFVLY6TlBGpFIBqWAs0Li/CwbZ47CUna0G0mlGQR6iw=
Subject key identifier: EA:FE:32:25:2B:CF:09:28:A8:3B:FC:07:F1:42:D6:2C:F8:CA:F6:D7
Authority key identifier: 89:25:AE:32:34:A2:C9:7C:27:F7:5E:F5:1D:3F:F3:26:BE:06:0E:2C
Certificate issuer: /CN=8925ae3234a2c97c27f75ef51d3ff326be060e2c
Certificate serial: 019A725CEE80F0964EC87DAA9DC826F27F23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 10:01:24 +0000
Manifest this update: Tue 11 Nov 2025 10:01:24 +0000
Manifest next update: Wed 12 Nov 2025 10:01:24 +0000
Files and hashes: 1: iSWuMjSiyXwn9171HT_zJr4GDiw.crl (hash: uHZm8zrKRqRvEHOOsPlyNj8buoeeEQfVlSfdXOxB10M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ee:80:f0:96:4e:c8:7d:aa:9d:c8:26:f2:7f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8925ae3234a2c97c27f75ef51d3ff326be060e2c
Validity
Not Before: Nov 11 10:01:24 2025 GMT
Not After : Nov 12 10:01:24 2025 GMT
Subject: CN=eafe32252bcf0928a83bfc07f142d62cf8caf6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:03:43:bd:9a:38:d5:d6:6a:56:7a:0b:a4:04:
ca:0b:1d:45:6f:3b:1f:1c:e2:c0:03:47:fb:3a:6e:
47:80:df:ec:91:2d:01:f3:44:24:0c:54:d7:a6:19:
13:1b:90:64:66:13:ed:4d:a2:ff:76:25:da:40:64:
eb:ff:2b:db:e1:22:49:8c:f4:52:a9:e1:ae:08:3f:
53:bc:cd:cf:1d:93:ae:35:1a:a7:b2:11:47:21:fb:
84:3a:0d:7b:b4:1c:1f:c8:96:72:03:c9:1e:48:75:
ce:12:7d:37:b2:5f:05:bf:8a:72:cb:ea:52:82:6a:
1c:e9:54:59:6d:d5:a3:a7:f0:9b:4e:fd:fb:94:60:
a3:35:5b:1f:ba:f7:8f:0d:dd:be:66:40:08:ac:3b:
d1:ee:9f:d8:99:c8:ae:dc:e5:7d:1c:47:79:e0:5e:
ee:e9:5d:9e:72:d4:0e:c5:84:33:a2:65:ee:16:ae:
b0:df:8b:09:80:f3:92:65:01:dd:78:43:61:34:39:
47:cc:a0:0c:86:34:e8:cb:93:f6:c4:94:d6:14:94:
b3:2d:d3:d2:05:58:1c:5b:cd:b7:56:f8:ea:d2:9a:
98:17:f1:14:98:2f:4f:6d:9d:4e:a1:ef:7d:bf:32:
80:23:a3:a7:87:98:9a:11:0f:64:e5:a6:d7:43:dd:
a7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FE:32:25:2B:CF:09:28:A8:3B:FC:07:F1:42:D6:2C:F8:CA:F6:D7
X509v3 Authority Key Identifier:
keyid:89:25:AE:32:34:A2:C9:7C:27:F7:5E:F5:1D:3F:F3:26:BE:06:0E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:93:64:44:44:c4:f7:e5:83:08:d7:e0:dc:84:4f:27:10:fb:
c4:96:06:a0:69:48:ef:e1:84:42:3c:b2:ad:d8:82:f2:b7:50:
e8:12:c4:95:5e:fa:3c:a2:17:90:94:0d:53:50:69:a4:f1:52:
0b:a9:f8:ab:f6:4b:91:8c:dc:f5:8a:d3:20:96:c7:5e:0d:8c:
02:e4:09:11:a1:f9:a0:8a:48:1d:ce:c7:4f:92:8d:a6:b9:2d:
6a:6d:8d:fc:9c:65:5b:10:4a:c0:96:dc:ed:e5:06:14:8e:7a:
93:35:c7:14:a7:97:88:89:51:4e:32:aa:df:8c:ae:a9:07:ab:
ac:5d:db:81:a3:d1:77:51:02:b7:1c:8a:3b:77:23:a3:ea:78:
4d:82:f9:37:69:e2:89:5d:91:42:df:0b:9b:7c:a1:77:2a:38:
49:05:2f:92:d7:c3:21:16:0c:7c:9a:29:69:22:f6:4c:11:d7:
2f:c6:67:2a:2d:5a:de:04:06:f9:df:a3:a6:dc:50:95:69:6e:
d8:a0:48:20:b6:a7:b0:34:91:93:fd:78:bf:1d:7a:09:da:7c:
47:02:2f:98:44:4c:e7:67:d3:76:19:38:ff:d2:cf:4c:b8:f9:
34:b2:69:7a:1a:ab:fe:de:0f:cf:96:78:04:bd:2a:13:be:9c:
ec:45:8c:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXO6A8JZOyH2qncgm8n8jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MjVhZTMyMzRhMmM5N2MyN2Y3NWVmNTFkM2ZmMzI2YmUw
NjBlMmMwHhcNMjUxMTExMTAwMTI0WhcNMjUxMTEyMTAwMTI0WjAzMTEwLwYDVQQD
EyhlYWZlMzIyNTJiY2YwOTI4YTgzYmZjMDdmMTQyZDYyY2Y4Y2FmNmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQNDvZo41dZqVnoLpATKCx1Fbzsf
HOLAA0f7Om5HgN/skS0B80QkDFTXphkTG5BkZhPtTaL/diXaQGTr/yvb4SJJjPRS
qeGuCD9TvM3PHZOuNRqnshFHIfuEOg17tBwfyJZyA8keSHXOEn03sl8Fv4pyy+pS
gmoc6VRZbdWjp/CbTv37lGCjNVsfuvePDd2+ZkAIrDvR7p/Ymciu3OV9HEd54F7u
6V2ectQOxYQzomXuFq6w34sJgPOSZQHdeENhNDlHzKAMhjToy5P2xJTWFJSzLdPS
BVgcW823Vvjq0pqYF/EUmC9PbZ1Ooe99vzKAI6Onh5iaEQ9k5abXQ92n5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOr+MiUrzwkoqDv8B/FC1iz4yvbXMB8GA1UdIwQY
MBaAFIklrjI0osl8J/de9R0/8ya+Bg4sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVNXdU1qU2l5WHduOTE3MUhUX3pKcjRHRGl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9mYjYyNzAtMDM1My00NmZjLWI5ZjUt
N2U4ZTZlODg4ZGFjLzEvaVNXdU1qU2l5WHduOTE3MUhUX3pKcjRHRGl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9mYjYyNzAtMDM1My00NmZjLWI5ZjUtN2U4ZTZlODg4ZGFj
LzEvaVNXdU1qU2l5WHduOTE3MUhUX3pKcjRHRGl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEpNkRETE
9+WDCNfg3IRPJxD7xJYGoGlI7+GEQjyyrdiC8rdQ6BLElV76PKIXkJQNU1BppPFS
C6n4q/ZLkYzc9YrTIJbHXg2MAuQJEaH5oIpIHc7HT5KNprktam2N/JxlWxBKwJbc
7eUGFI56kzXHFKeXiIlRTjKq34yuqQerrF3bgaPRd1ECtxyKO3cjo+p4TYL5N2ni
iV2RQt8Lm3yhdyo4SQUvktfDIRYMfJopaSL2TBHXL8ZnKi1a3gQG+d+jptxQlWlu
2KBIILansDSRk/14vx16Cdp8RwIvmERM52fTdhk4/9LPTLj5NLJpehqr/t4Pz5Z4
BL0qE76c7EWMMg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:48 2025 by rpki-client