Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f45c5c-b645-4be4-a74c-320e1459a40a/1/iWxjRnXxe_ak81-hi7hVYBoYpbU.mft
File: iWxjRnXxe_ak81-hi7hVYBoYpbU.mft (raw, json)
Hash identifier: Q3GvWY1qeEY4gCOoG9hZKoXRRGxIrlfVDs2loEwIuRU=
Subject key identifier: 93:C8:63:83:8B:69:0A:79:B7:D6:71:49:84:2B:B3:03:CB:0E:CF:BC
Authority key identifier: 89:6C:63:46:75:F1:7B:F6:A4:F3:5F:A1:8B:B8:55:60:1A:18:A5:B5
Certificate issuer: /CN=896c634675f17bf6a4f35fa18bb855601a18a5b5
Certificate serial: 019A71B8B17E2F4DE99194CFAEE084D72039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWxjRnXxe_ak81-hi7hVYBoYpbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f45c5c-b645-4be4-a74c-320e1459a40a/1/iWxjRnXxe_ak81-hi7hVYBoYpbU.mft
Manifest number: D1
Signing time: Tue 11 Nov 2025 07:02:00 +0000
Manifest this update: Tue 11 Nov 2025 07:02:00 +0000
Manifest next update: Wed 12 Nov 2025 07:02:00 +0000
Files and hashes: 1: iWxjRnXxe_ak81-hi7hVYBoYpbU.crl (hash: jgpYBsrnZfyrr1jjtod546GulCyYzGd4PnPwktTsohU=)
2: yulwp-3vKKFAdXVOa4nXVzHSFWU.roa (hash: q4+Kq35pmEpGGWwSszRZa770efG6x8cdf3PGbgipeks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f45c5c-b645-4be4-a74c-320e1459a40a/1/iWxjRnXxe_ak81-hi7hVYBoYpbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f45c5c-b645-4be4-a74c-320e1459a40a/1/iWxjRnXxe_ak81-hi7hVYBoYpbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWxjRnXxe_ak81-hi7hVYBoYpbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b1:7e:2f:4d:e9:91:94:cf:ae:e0:84:d7:20:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896c634675f17bf6a4f35fa18bb855601a18a5b5
Validity
Not Before: Nov 11 07:02:00 2025 GMT
Not After : Nov 12 07:02:00 2025 GMT
Subject: CN=93c863838b690a79b7d67149842bb303cb0ecfbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a2:81:ea:5f:6e:fd:22:cb:e6:35:c9:dd:db:
5d:7a:cb:bf:10:e7:4d:0f:ba:e3:5e:e0:e3:ff:30:
57:97:fc:33:79:a4:5f:e0:75:fe:68:92:76:ee:a4:
db:d7:df:a1:90:4d:f9:72:35:9e:61:4b:0d:dd:68:
fb:6c:26:e1:74:d9:51:a1:c5:5d:5f:d6:6a:f5:ad:
24:ee:f4:7e:6e:18:9d:16:bc:b5:83:89:b3:de:cf:
de:96:79:ec:23:cb:e4:9a:f8:8d:e3:0f:b2:bf:84:
89:61:91:7a:a9:66:58:e5:fa:1a:63:96:51:4f:d3:
3c:e2:40:fb:7d:77:7b:32:62:1f:ad:f2:93:a1:a6:
5c:12:27:52:d5:dd:ff:0f:6e:c4:26:bc:fc:84:55:
18:db:4a:0f:2e:97:6b:bd:b2:9d:ae:7e:15:86:69:
05:79:d0:06:13:02:27:84:60:a0:db:0c:57:f3:d4:
fa:c0:86:04:63:fb:92:9c:d4:b1:ec:d3:93:dd:6b:
06:a9:9a:37:a4:4a:46:3d:dd:c7:b2:38:73:48:b1:
8f:d9:73:0b:40:5b:ce:98:07:79:e3:98:a9:7e:c0:
32:66:fc:47:44:68:51:c0:e9:0f:7b:c8:fa:4d:22:
d1:bd:05:e1:30:bd:2b:ae:6e:84:f7:8b:7d:1c:b9:
73:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C8:63:83:8B:69:0A:79:B7:D6:71:49:84:2B:B3:03:CB:0E:CF:BC
X509v3 Authority Key Identifier:
keyid:89:6C:63:46:75:F1:7B:F6:A4:F3:5F:A1:8B:B8:55:60:1A:18:A5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWxjRnXxe_ak81-hi7hVYBoYpbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f45c5c-b645-4be4-a74c-320e1459a40a/1/iWxjRnXxe_ak81-hi7hVYBoYpbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f45c5c-b645-4be4-a74c-320e1459a40a/1/iWxjRnXxe_ak81-hi7hVYBoYpbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ab:61:7d:46:00:85:51:cb:82:e6:7f:39:5a:cd:54:dc:c1:
0f:e1:ce:3d:55:ff:ff:55:1e:44:fe:4a:0d:b4:88:a0:17:cd:
43:62:d3:1d:3d:1f:f1:8f:ba:fb:40:1a:d6:2a:0d:5e:d2:55:
26:52:86:90:20:5b:8b:0c:6c:62:70:07:99:e7:41:43:2a:e5:
31:91:fd:14:65:3d:60:4e:6a:5d:f9:b5:b0:07:3a:4e:84:a7:
a4:92:cf:3e:74:70:9f:95:08:af:2c:66:dc:b9:bd:db:c3:b1:
36:c9:98:ca:85:63:2d:37:6f:56:e5:c3:bd:08:01:c7:c9:10:
2b:4d:53:d9:7b:56:2f:88:34:af:47:21:76:5d:99:df:fd:49:
1c:77:f9:0f:45:f6:97:4a:6e:a2:6b:5a:47:3c:b9:a9:3c:62:
52:79:5d:f5:96:c4:64:2c:66:8e:07:08:fe:55:d7:be:f5:9d:
22:fd:46:f7:52:63:34:1c:b1:5d:97:53:c4:51:e0:6b:8c:96:
0c:0b:a2:4d:a2:d8:24:aa:ba:37:29:e3:94:56:2c:8b:00:89:
0f:0b:d7:57:e1:1c:05:98:ef:97:a1:ef:b2:d5:36:b5:35:e5:
1f:d0:c6:ca:e4:3a:7c:91:c5:53:4e:68:87:7a:83:45:36:bb:
81:76:8c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:56:47 2025 by rpki-client