Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/2555ef-0274-4b95-82d4-d731bd1908e3/1/I22P43gCkUrBm_04YGAw4-Q-KPs.mft
File: I22P43gCkUrBm_04YGAw4-Q-KPs.mft (raw, json)
Hash identifier: MlwjAlR0Mqz16ddV4K7FboUAlRPQpyAFZjRbV6uT6y4=
Subject key identifier: 72:66:6D:84:89:E2:42:32:D2:C3:B3:3D:9A:81:E6:B7:37:C6:4C:8D
Authority key identifier: 23:6D:8F:E3:78:02:91:4A:C1:9B:FD:38:60:60:30:E3:E4:3E:28:FB
Certificate issuer: /CN=236d8fe37802914ac19bfd38606030e3e43e28fb
Certificate serial: 019A7226307D76E00D56E1E4C811D0F5A7A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I22P43gCkUrBm_04YGAw4-Q-KPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/2555ef-0274-4b95-82d4-d731bd1908e3/1/I22P43gCkUrBm_04YGAw4-Q-KPs.mft
Manifest number: 37
Signing time: Tue 11 Nov 2025 09:01:36 +0000
Manifest this update: Tue 11 Nov 2025 09:01:36 +0000
Manifest next update: Wed 12 Nov 2025 09:01:36 +0000
Files and hashes: 1: I22P43gCkUrBm_04YGAw4-Q-KPs.crl (hash: SCDBQLSEIOEklW/wgD/6eJJi7+QPnh0FnY66e581zi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/2555ef-0274-4b95-82d4-d731bd1908e3/1/I22P43gCkUrBm_04YGAw4-Q-KPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/2555ef-0274-4b95-82d4-d731bd1908e3/1/I22P43gCkUrBm_04YGAw4-Q-KPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I22P43gCkUrBm_04YGAw4-Q-KPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:30:7d:76:e0:0d:56:e1:e4:c8:11:d0:f5:a7:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=236d8fe37802914ac19bfd38606030e3e43e28fb
Validity
Not Before: Nov 11 09:01:36 2025 GMT
Not After : Nov 12 09:01:36 2025 GMT
Subject: CN=72666d8489e24232d2c3b33d9a81e6b737c64c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f7:a5:a0:91:77:17:5b:c4:f9:d4:bf:01:55:
6c:4e:a3:79:f9:04:47:0b:58:99:15:1a:ae:e9:1d:
16:18:ae:70:5a:f5:6c:78:6e:af:30:e1:d0:a0:7c:
38:d4:c5:cb:1b:20:03:35:53:68:ed:71:1d:8b:2c:
ed:d2:db:12:93:c3:3d:a6:8a:72:4e:70:d6:36:ff:
e2:c7:87:16:ed:c4:49:50:ff:e7:47:0b:1e:59:c8:
b1:8b:1a:ba:a8:07:0c:99:fa:29:e5:49:03:f6:fa:
e2:d3:df:fa:c1:4d:1d:02:4f:b4:94:f1:d7:52:7a:
b1:6b:6a:c3:3a:92:77:a1:f3:de:8b:73:47:c4:79:
c1:67:4c:91:8d:79:0a:e0:7e:19:35:95:4a:94:20:
ae:fc:8c:0b:ee:44:12:bf:04:f6:bf:30:7e:f7:ea:
74:aa:62:72:f8:59:95:0e:6e:69:9e:49:6b:11:2e:
d5:7a:1e:7e:eb:97:d0:6e:91:27:86:f7:a4:48:de:
d5:1b:0f:24:e3:0b:63:af:5a:d8:36:0a:13:0c:f4:
1f:61:7c:2e:82:c7:4b:63:1a:dc:fb:f5:be:3d:14:
b4:ea:a1:32:59:37:87:ec:42:d2:1c:4f:70:4e:57:
84:91:12:b2:0b:38:c2:01:c1:60:8e:f0:d5:43:1f:
88:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:66:6D:84:89:E2:42:32:D2:C3:B3:3D:9A:81:E6:B7:37:C6:4C:8D
X509v3 Authority Key Identifier:
keyid:23:6D:8F:E3:78:02:91:4A:C1:9B:FD:38:60:60:30:E3:E4:3E:28:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I22P43gCkUrBm_04YGAw4-Q-KPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/2555ef-0274-4b95-82d4-d731bd1908e3/1/I22P43gCkUrBm_04YGAw4-Q-KPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/2555ef-0274-4b95-82d4-d731bd1908e3/1/I22P43gCkUrBm_04YGAw4-Q-KPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:ca:04:e9:d8:61:e7:08:69:98:27:41:78:40:cd:9a:6c:2d:
99:a8:6a:14:66:23:33:2c:ca:88:52:3b:ad:a4:66:76:fd:43:
8e:84:10:80:31:f8:42:f1:f6:dc:c3:ae:f8:c3:2e:d0:2d:81:
04:4d:4c:c0:12:34:b4:39:20:35:54:25:bc:14:ff:ef:5f:c0:
bd:51:a4:da:a0:55:7b:28:f4:d2:05:a4:c0:24:7c:9f:1b:6c:
08:87:1e:4d:52:e4:c1:06:a5:ec:47:25:82:17:9f:90:c8:9b:
10:39:82:1f:e9:1f:d5:21:07:f2:ec:12:81:ee:00:2d:62:9a:
01:df:23:7a:77:11:00:d1:18:c4:da:3b:23:7f:69:96:ca:c4:
84:7a:91:8f:8f:69:77:0b:04:44:d6:ce:59:ff:99:4f:f2:a1:
85:b8:a4:17:75:8b:3f:5c:a1:39:e2:a5:c2:0e:19:ed:18:be:
b2:b2:0a:9d:46:ed:79:35:03:86:15:c6:2b:b1:6a:05:c5:6e:
dc:c7:b0:40:1b:e1:13:62:e0:a1:36:15:6d:06:ee:6d:c7:83:
13:22:bf:45:bd:84:12:bf:34:81:0d:f2:b1:3f:22:e9:07:53:
b0:da:45:a5:d8:62:4d:56:89:5a:1c:e1:61:51:7b:f6:b4:94:
b0:07:32:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:57 2025 by rpki-client