Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
File: i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft (raw, json)
Hash identifier: XAIA9vIhYTmfQ4SftuqjYyTRTeh9+6J6a+Kh1UZm3zE=
Subject key identifier: FC:F5:FD:67:C6:33:76:61:79:1F:CD:18:B3:3D:D1:3F:40:0C:09:43
Authority key identifier: 8B:69:CF:1E:A6:5F:08:E2:90:A0:41:52:77:E6:5E:C9:5B:78:0D:77
Certificate issuer: /CN=8b69cf1ea65f08e290a0415277e65ec95b780d77
Certificate serial: 019A71B8C33178D44C356352A72EB9360566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
Manifest number: 0E55
Signing time: Tue 11 Nov 2025 07:02:05 +0000
Manifest this update: Tue 11 Nov 2025 07:02:05 +0000
Manifest next update: Wed 12 Nov 2025 07:02:05 +0000
Files and hashes: 1: i2nPHqZfCOKQoEFSd-ZeyVt4DXc.crl (hash: e/JLa1zEYaRWd3W0B7Vz1dcdisSC2iHQxtuxot4qTpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:c3:31:78:d4:4c:35:63:52:a7:2e:b9:36:05:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69cf1ea65f08e290a0415277e65ec95b780d77
Validity
Not Before: Nov 11 07:02:05 2025 GMT
Not After : Nov 12 07:02:05 2025 GMT
Subject: CN=fcf5fd67c6337661791fcd18b33dd13f400c0943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b9:4a:ba:b9:37:fa:34:28:2d:4e:39:64:7b:
12:5b:98:aa:b6:6a:00:ed:1b:9c:64:d2:e1:00:a9:
9c:f3:34:60:73:cd:b2:ea:8e:09:d1:49:2a:47:d9:
9a:48:19:a0:a7:81:91:4d:f7:de:e1:8a:ff:2b:fb:
b2:ad:9f:c1:63:b6:d0:94:28:10:65:8e:d7:93:4b:
63:94:33:fb:49:ba:2c:9f:9f:91:8d:90:d3:c0:2c:
4b:c7:e0:d2:04:92:3f:e7:03:49:66:ae:f1:fa:4c:
db:85:1e:58:c2:f7:26:fb:15:e9:73:72:5f:2b:3e:
d3:bb:20:46:75:79:a9:69:c9:00:ad:1c:19:41:25:
22:37:3d:3c:b7:c9:11:39:7c:3e:bf:84:54:c1:3d:
a6:de:4f:e2:67:4b:77:dd:6b:bb:5d:b9:7f:39:6e:
79:33:f6:af:61:88:c7:62:04:c6:3e:a2:5f:3b:9f:
db:29:07:35:b4:e1:22:dd:08:6a:d7:70:f6:8c:9a:
2f:2c:ca:d0:bb:96:27:bd:55:29:b4:69:7f:97:94:
8a:8b:d8:3d:16:00:a1:c1:33:34:4c:a3:c8:f2:57:
9b:cf:5c:77:63:3e:48:75:d0:ad:fa:38:b6:80:05:
a9:fc:ba:b2:e4:c3:32:77:4a:6b:5a:60:42:c2:2f:
ab:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F5:FD:67:C6:33:76:61:79:1F:CD:18:B3:3D:D1:3F:40:0C:09:43
X509v3 Authority Key Identifier:
keyid:8B:69:CF:1E:A6:5F:08:E2:90:A0:41:52:77:E6:5E:C9:5B:78:0D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:20:29:ca:b2:54:e4:5f:ed:47:8d:30:aa:e9:51:3a:5f:1c:
d4:27:42:5f:25:47:00:93:4b:99:0e:53:5e:dd:32:e6:26:a1:
06:90:7b:a9:9a:9c:11:1a:c4:c4:8c:0b:21:85:46:16:1d:3c:
59:b5:c7:ab:42:19:d2:52:a3:a1:68:4f:e2:83:45:57:39:ca:
b2:48:c3:e2:37:89:4c:f6:de:83:98:2d:e4:c3:15:ab:f0:a7:
44:c3:93:96:93:23:72:f4:6a:0b:23:3c:ca:4f:9e:5b:de:5b:
be:5e:c6:25:62:ae:65:c5:70:f4:a0:7b:9f:98:07:ad:81:7d:
9f:30:6f:54:1c:28:62:40:e6:0e:25:14:23:16:4c:de:02:e1:
04:36:f7:75:25:c1:23:cc:24:63:2b:89:21:f4:60:61:40:d0:
92:1a:12:8e:6f:96:ae:be:49:d8:e6:e0:45:a4:bb:14:e9:16:
0e:69:7d:54:6b:e0:dc:23:ac:6f:25:58:49:eb:5c:78:b1:62:
02:90:2a:0f:25:b4:92:6b:cc:38:67:94:71:ed:67:2a:17:a7:
3b:8d:65:f1:2c:0c:59:a6:20:7e:93:c1:f1:70:0b:14:03:ad:
26:b1:a7:f7:48:8b:b6:85:3d:42:88:93:1d:5f:41:78:0b:d0:
2e:ea:2f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:05 2025 by rpki-client