Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
File: IY2n_1dueNwjTrdMvwcwdsH368k.mft (raw, json)
Hash identifier: GLzq5Rny2VWX09Aenve88jPnLhZDAmvz27iGW42NWR4=
Subject key identifier: 3C:87:D0:A7:34:87:52:F8:BF:BE:EB:E0:ED:52:42:C4:B0:6A:AC:F8
Authority key identifier: 21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9
Certificate issuer: /CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9
Certificate serial: 019A71EECDCE912D74AD2C02663BFD8EAB67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
Manifest number: 1342
Signing time: Tue 11 Nov 2025 08:01:06 +0000
Manifest this update: Tue 11 Nov 2025 08:01:06 +0000
Manifest next update: Wed 12 Nov 2025 08:01:06 +0000
Files and hashes: 1: IY2n_1dueNwjTrdMvwcwdsH368k.crl (hash: 4ferNbtk05fIEJkF4BE/zEFVXlrq58KEXZ4d6SHYWwI=)
2: vHFL3NqT62c-dvNoqZM6UY1Qkso.roa (hash: a6jTEveih8CJwQfmE458rXUCSvGrU0Bb9osIwlUUdEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:cd:ce:91:2d:74:ad:2c:02:66:3b:fd:8e:ab:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9
Validity
Not Before: Nov 11 08:01:06 2025 GMT
Not After : Nov 12 08:01:06 2025 GMT
Subject: CN=3c87d0a7348752f8bfbeebe0ed5242c4b06aacf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:25:e3:52:75:c4:0e:7a:56:01:ef:46:6b:cb:
c0:72:b0:a7:cf:00:87:10:32:94:a9:2e:a8:72:a9:
f0:f2:bb:dd:04:2b:a2:e3:fd:f3:12:3e:06:13:71:
d0:95:e9:dc:3a:b8:4d:21:38:32:84:45:70:d9:69:
f9:bf:79:a1:a7:21:12:07:0e:ee:38:8d:78:1b:23:
58:6a:03:0c:2e:c8:3d:fd:b5:dc:68:58:96:c3:bf:
76:8d:4e:ef:0e:2d:8a:75:2a:b3:3e:50:27:17:ca:
55:c3:d0:bf:11:8f:f4:d8:2b:09:34:07:e8:fe:a7:
b4:15:d6:99:13:99:a7:f8:60:99:a0:11:8c:cb:7b:
09:fa:bd:3c:cf:6a:0a:19:66:2d:0f:b5:09:0a:77:
29:d4:da:3e:af:a0:24:a2:73:67:ff:df:51:20:2e:
b0:00:0e:53:cf:a9:68:d9:2d:19:35:b4:da:46:b9:
27:fd:30:9e:8d:9b:8d:16:ab:3c:83:36:8c:e7:f1:
55:64:9d:cd:8e:37:e0:36:2b:3e:02:19:bd:9b:a2:
62:c3:73:ee:1f:e1:3f:b6:12:3b:26:e4:08:16:c8:
9a:94:5f:98:c0:70:49:8e:df:bc:1d:d5:62:37:d9:
e9:f0:3a:1d:5b:ed:e5:29:2e:bb:c8:fa:4f:73:29:
c4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:87:D0:A7:34:87:52:F8:BF:BE:EB:E0:ED:52:42:C4:B0:6A:AC:F8
X509v3 Authority Key Identifier:
keyid:21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:1a:d2:cc:56:41:b6:7f:84:a8:fc:2b:d5:c1:5c:c9:0d:9a:
32:3a:b9:19:f7:f6:4c:b6:72:10:3f:97:d6:a2:4b:a7:d8:19:
ba:e4:20:e2:e0:5e:86:4d:a6:cc:5f:d2:65:dd:9b:f3:ac:50:
72:2c:46:77:c6:05:2b:e4:31:80:eb:06:64:95:c0:10:0b:51:
17:f2:26:80:54:4b:07:ab:fc:14:d7:8f:3a:9e:34:74:39:fa:
1f:1c:7b:05:13:e9:c1:81:20:4f:90:8a:df:4f:75:8e:b2:09:
61:3a:87:b9:90:07:99:6d:30:bc:0a:6e:0a:60:0b:d0:ad:b8:
74:09:71:df:cb:31:2f:e9:2c:3a:12:35:9d:29:7d:04:87:aa:
bd:7d:46:93:67:c5:77:f6:9c:af:19:a3:37:4b:cd:7d:1c:97:
4c:74:83:ec:9d:26:44:2b:c4:9c:c0:76:9e:17:ab:03:aa:ca:
8a:43:01:86:73:6f:85:91:c0:5c:c7:0d:2d:66:8a:83:49:3a:
ff:92:8f:4b:14:59:5f:dc:71:48:2d:e2:db:2e:14:99:e2:12:
37:54:8d:43:7f:d8:3a:29:1c:4e:16:27:10:d3:e3:5e:3c:fa:
94:51:ea:16:8f:bf:ff:a9:dd:1b:4f:a7:ce:82:7c:f1:dd:e4:
71:39:7c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:28 2025 by rpki-client