Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/d1a77c-d4a8-4960-a139-38b279687018/1/IxogKGMGhumbv9Xhyw3Ti424IuA.mft
File: IxogKGMGhumbv9Xhyw3Ti424IuA.mft (raw, json)
Hash identifier: pmIkmu0hpqvROP8kDJobJG9x7Ys8s6JEoSUsq0bX0h8=
Subject key identifier: E6:AE:D9:5F:49:7A:EB:28:6F:B4:52:D8:CF:CE:53:E9:86:50:65:A4
Authority key identifier: 23:1A:20:28:63:06:86:E9:9B:BF:D5:E1:CB:0D:D3:8B:8D:B8:22:E0
Certificate issuer: /CN=231a2028630686e99bbfd5e1cb0dd38b8db822e0
Certificate serial: 019A725CA141C5ED3BDFBEE139C13F910A93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxogKGMGhumbv9Xhyw3Ti424IuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/d1a77c-d4a8-4960-a139-38b279687018/1/IxogKGMGhumbv9Xhyw3Ti424IuA.mft
Manifest number: 48
Signing time: Tue 11 Nov 2025 10:01:04 +0000
Manifest this update: Tue 11 Nov 2025 10:01:04 +0000
Manifest next update: Wed 12 Nov 2025 10:01:04 +0000
Files and hashes: 1: IxogKGMGhumbv9Xhyw3Ti424IuA.crl (hash: epPPObFNWlgs/3hBg8dAEZ1MJOVPI2xn1IsWNkac1w0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/d1a77c-d4a8-4960-a139-38b279687018/1/IxogKGMGhumbv9Xhyw3Ti424IuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/d1a77c-d4a8-4960-a139-38b279687018/1/IxogKGMGhumbv9Xhyw3Ti424IuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxogKGMGhumbv9Xhyw3Ti424IuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:a1:41:c5:ed:3b:df:be:e1:39:c1:3f:91:0a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=231a2028630686e99bbfd5e1cb0dd38b8db822e0
Validity
Not Before: Nov 11 10:01:04 2025 GMT
Not After : Nov 12 10:01:04 2025 GMT
Subject: CN=e6aed95f497aeb286fb452d8cfce53e9865065a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f9:4b:de:dc:72:7e:15:bc:a7:35:9f:1e:e4:
d4:f3:34:8b:62:05:42:e5:cc:f8:6a:36:5a:b0:ef:
6b:ed:fe:ff:79:3e:e7:c3:c7:62:75:d3:14:ae:75:
c9:4a:3c:11:95:87:8a:a1:36:1a:d9:ee:96:42:42:
60:3f:91:dc:e1:7f:f8:05:f6:30:b2:c9:e6:a9:c7:
7c:89:8c:45:d6:49:0a:74:46:f8:91:8a:15:0d:d9:
f1:f5:a6:d8:41:23:7a:a2:29:4a:83:ae:f5:5c:df:
fa:ae:d0:46:2c:f3:e4:07:53:21:0b:fe:3c:59:fb:
a7:51:73:db:84:56:a9:01:c9:b7:75:9d:ea:a9:ae:
63:a9:07:b5:9a:15:7b:ae:9b:32:8f:ad:76:38:a7:
cb:cc:3a:1b:ca:a2:ad:9f:a6:b9:61:e2:a3:3c:53:
9d:8e:5b:fa:16:7e:a5:ce:1e:56:8f:ac:4a:4a:db:
ec:0d:d0:43:04:63:14:12:59:68:ec:8c:9c:4f:3e:
d8:5c:97:d8:43:d8:94:50:6c:f8:f3:d9:30:b4:a4:
dd:3c:8d:31:85:32:1e:96:b6:44:7f:ad:fd:12:f4:
f1:f4:f4:fc:7d:48:fd:bb:a8:75:20:6d:57:7e:75:
eb:ac:8b:ca:a8:02:f1:cb:17:71:a4:6a:62:c1:a6:
43:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AE:D9:5F:49:7A:EB:28:6F:B4:52:D8:CF:CE:53:E9:86:50:65:A4
X509v3 Authority Key Identifier:
keyid:23:1A:20:28:63:06:86:E9:9B:BF:D5:E1:CB:0D:D3:8B:8D:B8:22:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxogKGMGhumbv9Xhyw3Ti424IuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d1a77c-d4a8-4960-a139-38b279687018/1/IxogKGMGhumbv9Xhyw3Ti424IuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d1a77c-d4a8-4960-a139-38b279687018/1/IxogKGMGhumbv9Xhyw3Ti424IuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:9e:42:82:76:fa:d4:7d:c6:80:82:81:c0:47:7d:4b:d3:66:
08:d9:02:fb:88:54:6c:aa:ff:44:2b:c1:08:29:b8:89:d1:a3:
6a:db:cd:2a:33:3e:82:63:35:df:03:9d:d7:bd:5d:49:bc:9f:
83:46:0e:97:ee:69:b5:ef:66:49:15:f5:90:17:e8:c4:e7:ec:
62:f2:14:1e:5d:5b:e0:92:1d:49:14:b9:23:08:69:c6:a7:57:
77:9a:5b:5b:3a:6e:bd:da:cf:d6:17:14:89:1f:41:fd:a9:67:
56:8c:54:f5:1b:2c:3e:42:ef:69:76:94:14:ad:16:f8:7a:95:
5e:75:a0:75:4d:f6:84:73:9b:3a:c1:94:e4:b6:1e:4e:95:27:
aa:37:df:d7:f6:63:c9:3e:84:fb:02:de:c7:48:4e:27:a5:3e:
13:56:17:6e:56:b2:cc:84:65:8a:44:b1:f3:83:b2:cb:c1:3c:
2a:4e:44:8e:b2:c5:a2:d3:b3:b7:02:ff:9b:dd:c7:8f:c5:ec:
1b:ae:4e:1f:eb:91:c0:ea:18:31:5c:7a:87:49:ed:26:cf:8f:
cd:cc:f8:42:70:de:a3:1d:12:1d:40:85:e7:3a:61:b8:81:e1:
1a:36:3c:21:4a:18:7d:df:08:7d:1b:f5:5f:9e:3f:8c:c8:51:
eb:52:a5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:37 2025 by rpki-client