Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
File: its62HX3YlxjkjZZ8UKVjbeHijI.mft (raw, json)
Hash identifier: nvzRw6qwzWQ2QYV2qMARpxRwT8LNMD+lijxg2dxNHgU=
Subject key identifier: 98:06:39:AE:80:5F:91:F5:4B:E7:14:A2:4E:B3:5C:BD:27:5D:9B:46
Authority key identifier: 8A:DB:3A:D8:75:F7:62:5C:63:92:36:59:F1:42:95:8D:B7:87:8A:32
Certificate issuer: /CN=8adb3ad875f7625c63923659f142958db7878a32
Certificate serial: 019A71B87CE1B540C92B51E37F3A0E0464D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:01:47 +0000
Manifest this update: Tue 11 Nov 2025 07:01:47 +0000
Manifest next update: Wed 12 Nov 2025 07:01:47 +0000
Files and hashes: 1: its62HX3YlxjkjZZ8UKVjbeHijI.crl (hash: EV7YLQy4z+kR9oMOjGjFV0XcFEyHnjtduhCjiknpur0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:7c:e1:b5:40:c9:2b:51:e3:7f:3a:0e:04:64:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8adb3ad875f7625c63923659f142958db7878a32
Validity
Not Before: Nov 11 07:01:47 2025 GMT
Not After : Nov 12 07:01:47 2025 GMT
Subject: CN=980639ae805f91f54be714a24eb35cbd275d9b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:46:40:31:7e:8d:8e:95:af:d6:59:05:96:e7:
c4:99:cb:e4:53:59:fb:87:15:81:ba:4b:d4:f7:74:
18:72:cc:c2:39:99:70:95:d2:28:07:ff:d6:bd:6f:
eb:42:60:d5:1c:40:e7:fb:5a:49:3f:49:79:ac:db:
d7:0d:1b:d1:a0:5e:fb:34:8b:d9:60:32:fe:35:3e:
bd:25:67:4d:7c:72:e2:b7:8f:43:2e:5d:bd:89:21:
c4:fa:88:61:47:f7:73:0e:32:0b:1c:54:c4:1e:70:
78:cc:e9:ea:a0:ae:dd:1d:1d:f7:a0:2f:02:01:c5:
18:c7:9b:eb:36:e3:25:b3:a0:f3:c6:da:1d:48:24:
0a:4c:de:3f:dd:7e:ff:3b:57:33:1b:e9:ee:52:18:
3a:e7:53:91:08:19:49:68:3d:47:74:b7:52:dc:0b:
f8:b7:d2:a8:31:2a:4a:f2:69:9f:49:f9:9c:55:9e:
03:4f:ff:97:78:c3:60:8d:fd:2e:c4:c5:36:09:5a:
c4:c5:60:19:31:d7:9d:c1:a9:eb:55:50:e1:60:64:
17:df:ff:68:1c:fc:38:77:0e:fe:43:22:b4:bd:06:
99:fd:b2:60:cc:44:fe:59:6e:99:68:96:17:82:11:
c7:44:0a:f6:92:9f:0e:0c:39:d7:a9:43:42:ae:ec:
80:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:06:39:AE:80:5F:91:F5:4B:E7:14:A2:4E:B3:5C:BD:27:5D:9B:46
X509v3 Authority Key Identifier:
keyid:8A:DB:3A:D8:75:F7:62:5C:63:92:36:59:F1:42:95:8D:B7:87:8A:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:3c:a2:69:6c:0a:40:df:5d:3c:fb:e2:cd:b1:42:39:ee:c4:
6e:4c:8d:96:ad:63:a3:ae:45:e4:b2:42:db:4d:fb:d1:7b:6b:
b7:65:df:ff:df:d7:fe:2d:6a:60:f9:b3:44:75:a6:21:4d:cd:
81:32:5f:30:a5:13:8f:6f:bd:b3:20:19:c8:74:e7:c3:8c:10:
19:b2:b4:3c:19:cf:bc:f7:32:92:fe:79:ca:cb:01:28:a1:28:
38:d8:de:c6:e7:79:a5:fc:b1:92:e7:ef:84:f1:04:15:de:45:
48:25:4f:16:aa:3c:cf:8b:f5:3d:b2:d8:d6:45:72:26:98:af:
e4:1f:47:95:26:4a:14:fc:07:3f:3c:85:ad:6e:8c:eb:98:34:
c2:5e:5f:83:4c:45:8a:5e:39:34:77:5d:f5:b8:a7:af:a8:d8:
b9:32:75:05:ec:37:28:77:ef:8c:87:91:f2:97:3d:ed:6c:99:
a8:81:d3:8e:68:fc:13:fd:bd:d3:bf:38:7b:0d:61:8d:42:2e:
5b:cb:ec:1a:f3:3f:54:5e:0f:92:8d:3a:d8:c6:28:93:5e:8e:
5f:fa:5e:1f:cf:e3:f4:2e:8a:b9:44:c4:13:ca:58:43:d1:f8:
75:8f:d6:1c:12:06:80:59:12:dc:3b:c7:e7:0a:e6:c3:e6:d0:
28:b7:35:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:44 2025 by rpki-client