Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
File: Iqs7vLPNUyaosST8ld7RRFN1L6I.mft (raw, json)
Hash identifier: HBGwtcBnOBGacZCFCctrh4BgVSSJzCm9ndDdkxiY82g=
Subject key identifier: F1:18:D8:C3:88:D0:C5:34:A6:64:57:FE:77:C6:6F:49:C3:31:5B:E6
Authority key identifier: 22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2
Certificate issuer: /CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2
Certificate serial: 019A71809E7A292A0D8C4D976888D46B7640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
Manifest number: 118F
Signing time: Tue 11 Nov 2025 06:00:45 +0000
Manifest this update: Tue 11 Nov 2025 06:00:45 +0000
Manifest next update: Wed 12 Nov 2025 06:00:45 +0000
Files and hashes: 1: Iqs7vLPNUyaosST8ld7RRFN1L6I.crl (hash: 0O7NhxPMc4vHXuKQmy6jMdDX68nMgCPJAq1YQv3Ns3U=)
2: uDx7Z1tuokndeydIySa8WuoqYoI.roa (hash: V+Jlh82Z7YVpAlrJMiPWI0QRjW3a+dx4x4YSGHlfjZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:9e:7a:29:2a:0d:8c:4d:97:68:88:d4:6b:76:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2
Validity
Not Before: Nov 11 06:00:45 2025 GMT
Not After : Nov 12 06:00:45 2025 GMT
Subject: CN=f118d8c388d0c534a66457fe77c66f49c3315be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:19:ec:0c:30:e2:3c:d5:10:df:1a:b0:4a:84:
52:04:54:76:a2:1f:6c:22:17:02:24:b2:e3:f4:0b:
43:cd:6a:b6:8e:9a:02:e7:e7:89:5e:1b:d0:c2:ed:
c2:52:b2:2d:fa:1e:e5:99:56:95:84:98:0b:a3:39:
6a:3e:b0:26:77:ea:68:39:92:7c:0e:e8:c8:0d:c1:
44:ed:1d:f1:d4:76:d8:07:1d:8e:80:58:1c:2f:d3:
c9:d4:b4:dd:61:34:dd:5a:37:43:bc:ff:93:af:22:
a5:2b:79:97:d5:21:b3:07:3a:6c:5d:ca:dd:f6:a0:
5c:93:4e:5a:ee:35:1f:f3:01:4e:49:b0:bb:4b:15:
6d:38:a5:1b:0b:e8:0c:3b:e7:65:15:8c:93:e5:f4:
1f:82:67:76:5a:03:d5:84:69:37:1b:e1:34:90:e2:
6c:58:2f:60:99:63:97:96:5f:10:bb:d3:8a:37:b7:
24:80:64:47:3e:47:ed:47:4a:62:f0:13:ae:4e:bc:
df:71:fd:25:17:26:95:59:c0:cc:d0:e2:71:68:fd:
64:c9:9b:11:01:17:af:2f:8f:2f:a5:13:22:7e:16:
4a:9a:1a:cc:8c:6f:06:61:97:5d:ed:66:27:b8:28:
82:a4:e2:c3:4b:54:f2:0f:5e:dd:f3:55:79:85:3e:
18:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:18:D8:C3:88:D0:C5:34:A6:64:57:FE:77:C6:6F:49:C3:31:5B:E6
X509v3 Authority Key Identifier:
keyid:22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:be:25:4b:47:8e:b6:2f:04:f1:e4:63:9d:5e:73:01:91:fb:
9e:cb:2e:9b:c9:1a:23:03:16:2a:00:13:90:2b:8f:fd:37:18:
73:a3:99:c8:fc:1b:07:92:31:82:33:0c:c9:70:f5:c2:3c:b6:
92:a2:26:c1:51:ef:17:65:ea:f8:d8:75:94:30:e9:35:b9:76:
05:0f:bc:ee:e6:6d:a9:9b:3f:b6:12:14:c1:8d:15:19:b8:ff:
64:9e:7e:41:c1:8c:a4:cf:e8:55:5f:94:e8:98:89:bd:b0:70:
a8:2b:8f:5c:05:2e:ea:a5:79:e8:74:4d:fe:a7:19:22:06:05:
dd:41:ca:65:63:66:79:e7:24:ea:2c:d6:87:bf:1e:fb:c2:09:
7d:23:09:44:6b:ce:c0:a5:7f:67:ee:ff:80:f8:8c:78:52:1b:
3f:ff:43:36:58:73:84:1e:82:14:08:3d:a8:81:57:22:33:85:
6e:bf:d6:f3:ab:77:dc:4a:20:9d:36:7f:62:94:e2:24:ac:ba:
2e:4b:09:53:7b:6e:c4:80:fb:cc:e4:66:30:f5:d1:64:c9:93:
d9:67:bb:90:84:c6:b9:c6:3c:c0:30:3e:77:3a:a3:c3:b9:c2:
63:20:55:10:76:2d:09:30:c3:84:65:89:bc:31:89:41:7f:0a:
77:19:de:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:48 2025 by rpki-client