Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft
File: IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft (raw, json)
Hash identifier: LZJD2Q2O602JvB80JziQw5b8Er9cR6SeQHJ2I5EpEnA=
Subject key identifier: E1:FA:07:AF:10:D7:80:2D:45:4D:78:FD:5D:ED:15:FF:1D:CE:A6:59
Authority key identifier: 23:22:6D:55:9F:ED:C5:0D:7A:55:C0:6E:F4:8F:D3:A2:D2:D3:FD:F4
Certificate issuer: /CN=23226d559fedc50d7a55c06ef48fd3a2d2d3fdf4
Certificate serial: 019A73DCE1502BA64CF6845826F5D7245307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyJtVZ_txQ16VcBu9I_TotLT_fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft
Manifest number: 0654
Signing time: Tue 11 Nov 2025 17:00:46 +0000
Manifest this update: Tue 11 Nov 2025 17:00:46 +0000
Manifest next update: Wed 12 Nov 2025 17:00:46 +0000
Files and hashes: 1: IyJtVZ_txQ16VcBu9I_TotLT_fQ.crl (hash: nxB6THJxO+A7tlqvXKBDM8LF0Y+c/2FxnEeZHrvMSZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IyJtVZ_txQ16VcBu9I_TotLT_fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:dc:e1:50:2b:a6:4c:f6:84:58:26:f5:d7:24:53:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23226d559fedc50d7a55c06ef48fd3a2d2d3fdf4
Validity
Not Before: Nov 11 17:00:46 2025 GMT
Not After : Nov 12 17:00:46 2025 GMT
Subject: CN=e1fa07af10d7802d454d78fd5ded15ff1dcea659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5e:09:4f:60:8f:f5:4c:16:17:07:70:b9:c2:
a7:ef:74:02:85:00:f8:92:96:70:a4:22:75:06:49:
b5:ca:8e:28:81:22:04:47:f1:61:48:1d:08:0a:75:
88:7f:b3:86:aa:fd:69:25:56:6a:87:23:f7:4d:3c:
e1:1c:d1:eb:17:e6:6c:21:bf:4b:6f:c3:c7:69:0b:
d0:4d:d7:26:ac:be:72:ea:59:81:b4:15:38:cc:a7:
5c:ce:68:b0:42:ac:df:c5:71:a4:bd:26:07:50:00:
1b:c0:b2:f4:00:37:e9:84:ca:4c:e4:99:49:9b:98:
d2:67:55:cb:19:c0:1e:c6:6d:f1:f8:10:bd:35:76:
04:fa:e0:29:c0:ae:08:c2:16:d8:5d:0d:80:04:6f:
a4:99:3e:15:fb:0f:a1:c7:7e:65:ae:c1:30:2f:dd:
6a:12:96:42:49:ad:c7:2a:35:e6:ea:af:dc:04:57:
7f:9e:c9:39:f4:cc:30:d5:d6:18:a3:1d:18:b3:5a:
ff:ee:48:12:94:80:4e:67:fa:04:14:8d:37:c6:8c:
3a:63:98:cc:ad:06:9a:a6:f6:dc:f0:f1:94:84:65:
4c:39:2b:10:f5:17:9a:b1:2a:89:e4:70:78:f5:96:
f8:8b:08:28:73:7f:c4:09:2f:1e:a9:03:47:a6:4f:
34:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FA:07:AF:10:D7:80:2D:45:4D:78:FD:5D:ED:15:FF:1D:CE:A6:59
X509v3 Authority Key Identifier:
keyid:23:22:6D:55:9F:ED:C5:0D:7A:55:C0:6E:F4:8F:D3:A2:D2:D3:FD:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyJtVZ_txQ16VcBu9I_TotLT_fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d7:eb:c8:18:65:63:0c:60:04:aa:91:a7:1d:09:c3:75:9b:
23:22:af:b2:08:e5:d8:0e:ba:e8:de:ad:35:6b:5d:83:26:9c:
7e:ca:dc:eb:fd:2a:db:22:8c:86:5c:03:33:aa:d3:1c:b1:f3:
07:b4:87:0e:71:34:be:fe:c2:7e:5c:53:7e:ef:7c:e1:3f:81:
18:d1:8d:b2:b3:90:f1:35:c7:b9:78:90:53:94:fe:54:c4:75:
64:bb:ef:62:a5:66:d5:04:02:c5:02:ce:e6:61:ee:9f:b7:3c:
f1:39:68:29:5b:67:b6:11:33:1a:62:cd:97:37:fe:75:12:55:
5c:aa:c4:f0:a4:5f:f1:99:df:c6:67:cd:49:6b:85:a0:ef:4e:
63:66:ee:b9:91:ec:c0:f3:14:c4:36:f8:d1:8a:09:8e:88:0f:
4a:a9:d4:15:53:cf:ee:d6:6a:9a:05:ae:8e:00:86:c0:8b:37:
2e:4e:57:45:c3:a1:87:1f:1a:5f:a8:45:da:1e:99:f6:6b:6a:
3c:99:8d:1d:e9:80:f4:18:8a:1e:da:14:e9:61:a8:eb:07:ba:
57:d3:e3:51:47:ce:c4:78:d1:f5:ef:36:e7:72:8a:d3:a9:36:
8a:21:c1:83:27:56:6f:f3:83:ca:06:4b:6c:14:03:ef:de:c8:
4e:4a:a7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 19:53:10 2025 by rpki-client