Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
File: I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft (raw, json)
Hash identifier: XX2UgshPx1fmMJp5NgePqWjRSS7DU1y+i461/2P43sM=
Subject key identifier: CD:FF:51:41:3A:0F:DD:85:14:E7:6A:71:C1:57:D0:07:4A:D8:C6:9E
Authority key identifier: 23:CF:F6:46:AD:C1:9C:03:F6:41:7A:6E:2A:1C:41:83:C6:B8:D3:FE
Certificate issuer: /CN=23cff646adc19c03f6417a6e2a1c4183c6b8d3fe
Certificate serial: 019A71EEC28A7E3BC700F552EDE018BFC096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 08:01:04 +0000
Manifest this update: Tue 11 Nov 2025 08:01:04 +0000
Manifest next update: Wed 12 Nov 2025 08:01:04 +0000
Files and hashes: 1: I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl (hash: xLrIikfN5/33tqjZnR9lpRWgZeaw290BGl95xebfFa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c2:8a:7e:3b:c7:00:f5:52:ed:e0:18:bf:c0:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23cff646adc19c03f6417a6e2a1c4183c6b8d3fe
Validity
Not Before: Nov 11 08:01:04 2025 GMT
Not After : Nov 12 08:01:04 2025 GMT
Subject: CN=cdff51413a0fdd8514e76a71c157d0074ad8c69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4a:e0:ca:65:de:6f:b7:ef:74:20:c4:4e:54:
ce:d6:f3:15:91:79:73:88:a7:69:90:e8:d7:df:20:
0f:f4:f7:37:7c:f3:f0:13:fa:5e:82:f3:db:e0:9f:
fc:4e:9d:ea:e9:73:7b:c8:43:14:98:c6:fe:01:b9:
0a:e1:1d:d5:1a:60:d3:b9:d1:a1:8f:ba:9d:fc:f2:
63:1c:fa:b7:d7:3a:09:2a:f6:59:ed:9a:b9:af:f7:
46:c6:a8:7f:83:ba:65:65:17:d0:47:ca:67:87:e8:
d5:18:92:2c:a2:b0:53:ed:1d:91:4c:b3:e0:10:c9:
d2:38:88:42:11:33:87:2b:7b:44:76:98:f1:1c:b4:
95:be:f5:90:de:ad:9e:6c:34:3f:b4:44:a5:5c:c4:
bf:6b:bc:db:ed:9f:d6:f9:28:0f:e6:3f:e7:60:31:
5c:75:bd:57:93:9d:70:79:99:ce:bd:89:d7:27:15:
73:ec:0e:4d:03:66:bc:d5:55:2b:fe:51:65:2c:9f:
f5:f3:7d:4d:f5:62:87:4a:22:d0:0a:d3:2a:cf:ec:
55:67:d4:07:37:53:1c:56:35:d6:28:75:23:cd:02:
6e:1f:44:4b:81:99:fa:65:a1:40:cf:c1:53:ee:2a:
c2:74:59:5d:69:e1:95:d2:c9:4c:49:84:ba:26:fb:
fc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FF:51:41:3A:0F:DD:85:14:E7:6A:71:C1:57:D0:07:4A:D8:C6:9E
X509v3 Authority Key Identifier:
keyid:23:CF:F6:46:AD:C1:9C:03:F6:41:7A:6E:2A:1C:41:83:C6:B8:D3:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:01:1b:0d:86:2a:07:4c:c8:0f:99:ff:b7:28:5f:85:5d:94:
c7:45:98:9c:d7:97:e7:f4:ee:53:45:35:aa:a2:cf:33:9c:e5:
1b:62:4e:68:f4:3a:77:bb:f4:58:e0:21:89:46:34:41:81:67:
7f:52:54:bc:6f:25:88:5a:c1:c0:97:f1:a8:76:f0:df:fd:9f:
46:a5:f2:5a:1c:1a:38:8b:f6:4a:0d:68:4e:82:d0:dd:25:9c:
4d:9c:17:d1:f9:43:ad:28:a8:e9:76:c1:ad:8b:49:42:93:0b:
b2:0a:2b:15:65:cf:d8:c8:a5:32:ec:ba:6e:b7:85:dc:07:83:
aa:f1:d9:41:e2:8c:02:4c:ca:fa:37:83:b2:03:16:2b:48:2f:
1b:35:78:fd:08:73:3f:1b:01:96:62:f6:3f:43:83:68:a7:e9:
00:c8:b8:29:c8:01:c1:c6:80:bd:36:cb:8f:03:8e:79:a7:60:
84:e8:4f:b8:26:88:8a:89:27:8a:d7:02:88:77:74:96:2e:01:
85:28:3e:44:e5:16:bc:92:d7:07:17:a3:d3:69:36:9b:76:bc:
1e:c3:19:ca:a0:f3:f1:29:2f:e1:6b:7f:35:ed:1e:43:68:7f:
13:a7:23:58:98:54:0a:07:b0:a1:6f:f6:3b:a9:d1:61:81:6f:
3a:b7:c5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:39:34 2025 by rpki-client