Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
File: X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft (raw, json)
Hash identifier: cAGvkCJJFx9PUTbGcSwCRwp5K9SbYuz85he1fsXD/rg=
Subject key identifier: 0F:98:4B:17:56:D5:24:CF:B0:3A:3F:19:87:66:DF:D3:B2:B3:59:EE
Authority key identifier: 5F:E0:BE:20:E0:2F:FC:73:54:D5:B2:D3:3E:0F:E7:71:51:9A:FD:1F
Certificate issuer: /CN=5fe0be20e02ffc7354d5b2d33e0fe771519afd1f
Certificate serial: 019A71B89B9B68233D2CE8A83A50063CBD26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
Manifest number: 07CB
Signing time: Tue 11 Nov 2025 07:01:55 +0000
Manifest this update: Tue 11 Nov 2025 07:01:55 +0000
Manifest next update: Wed 12 Nov 2025 07:01:55 +0000
Files and hashes: 1: X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl (hash: VIiQPLiHoS4uiHXNeEp1XRNceLtfH6yKqVGwF5L3fTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:9b:9b:68:23:3d:2c:e8:a8:3a:50:06:3c:bd:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe0be20e02ffc7354d5b2d33e0fe771519afd1f
Validity
Not Before: Nov 11 07:01:55 2025 GMT
Not After : Nov 12 07:01:55 2025 GMT
Subject: CN=0f984b1756d524cfb03a3f198766dfd3b2b359ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9f:bb:89:28:3b:ae:2e:8b:0b:50:e8:66:5f:
f4:14:69:da:0f:7d:ad:bb:09:f6:eb:67:15:c0:22:
65:17:bc:73:a8:58:98:b7:70:88:43:39:61:01:b3:
79:57:bf:ae:15:5a:15:95:7c:5b:e8:4e:20:8a:9a:
9d:e2:a3:ce:bf:66:59:fa:0c:fd:fe:36:5b:d1:52:
b3:72:ed:19:04:93:93:bb:7f:8c:ab:f4:a1:07:83:
6e:7a:ed:06:1e:e2:fd:a4:8f:cb:60:6f:b9:c0:d4:
5f:81:44:de:14:cd:9d:33:1d:6b:48:65:f4:01:a9:
82:f3:23:65:24:f4:14:ee:01:97:8d:41:3b:03:a6:
fd:47:db:23:3e:cd:c3:d8:30:fc:20:91:4f:c7:f9:
7b:b0:79:0d:8c:18:78:99:74:ae:12:e7:cd:59:4e:
8c:e7:4e:ad:a6:e9:8e:ce:05:9c:33:73:4a:24:d8:
4f:ed:27:6c:b1:43:22:89:d0:bd:e4:09:9c:3b:2a:
00:65:39:66:b7:a5:b1:c0:45:ff:6b:33:27:3e:39:
d9:ff:3c:4a:f6:1d:3d:f0:96:06:2b:b8:de:d7:2e:
62:65:cc:e5:64:aa:56:cf:34:ae:18:13:54:07:c9:
6d:ec:78:67:8b:b4:47:56:d1:92:82:24:4f:42:a5:
34:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:98:4B:17:56:D5:24:CF:B0:3A:3F:19:87:66:DF:D3:B2:B3:59:EE
X509v3 Authority Key Identifier:
keyid:5F:E0:BE:20:E0:2F:FC:73:54:D5:B2:D3:3E:0F:E7:71:51:9A:FD:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:67:4f:0e:3a:8c:b8:9f:7a:16:b8:5d:1e:55:f1:0e:19:a6:
4c:d4:1b:cc:fe:c6:b6:b3:d4:ef:40:cc:76:9b:e6:ff:36:c3:
22:37:01:f7:5d:38:4a:0e:70:1e:a6:8d:d3:20:fa:c9:b1:03:
e6:54:c0:31:09:48:80:12:a8:71:27:d2:65:e0:a7:44:f5:8d:
36:14:e2:20:e6:6d:6e:41:8a:2c:fe:58:7e:a3:bd:77:74:c9:
30:0d:f4:6d:1a:d0:95:58:ec:14:18:b2:cc:8f:9b:da:37:bb:
ba:21:9f:4f:6e:be:e0:2f:bb:6e:ba:8c:d1:42:50:6c:43:f1:
1d:d3:d5:81:68:84:10:e4:c7:51:0b:dd:1f:ce:e7:62:53:d5:
be:af:dd:67:0f:1f:d2:ca:1d:77:3e:ed:dc:90:4d:c0:bf:35:
2d:fd:54:2c:0c:7d:e1:70:ed:07:c2:e7:f3:2a:6a:3b:d1:b8:
84:36:75:9b:af:59:b0:28:f9:5e:40:ad:eb:1d:2f:9c:2d:f7:
a6:be:b5:a4:fe:ff:af:68:51:84:28:60:fe:77:aa:9c:bd:e9:
cb:2d:35:37:54:f3:04:e0:d3:b9:5d:96:81:0a:9d:17:a5:1a:
d8:20:f1:95:79:1a:fb:e5:bf:38:ef:5a:bb:de:c6:af:6c:f2:
5f:d5:77:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:08 2025 by rpki-client