Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
File: Iet_m1iVK56Ar897vboysmo00KE.mft (raw, json)
Hash identifier: SU5yPz133RIzU3R46rQOW/nbrF9lL8Lqmse1rXg97/s=
Subject key identifier: 50:94:3A:76:2E:8C:05:6F:4F:B5:24:45:BF:72:D0:C7:84:66:46:DD
Authority key identifier: 21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1
Certificate issuer: /CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1
Certificate serial: 019A72934D856303C0B545E8C95A230F9F94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
Manifest number: 13F3
Signing time: Tue 11 Nov 2025 11:00:47 +0000
Manifest this update: Tue 11 Nov 2025 11:00:47 +0000
Manifest next update: Wed 12 Nov 2025 11:00:47 +0000
Files and hashes: 1: Iet_m1iVK56Ar897vboysmo00KE.crl (hash: oBlMm1ujl7xzZatone52H1JsKuvWlPLRVwyF03PDawE=)
2: awEUUsb69K1CqabOYZXpO61MCTg.roa (hash: 9PPvHVQ3Mjg4T1Rer/rBY6hN8ex1RSBq3SwkRV1OUrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:4d:85:63:03:c0:b5:45:e8:c9:5a:23:0f:9f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1
Validity
Not Before: Nov 11 11:00:47 2025 GMT
Not After : Nov 12 11:00:47 2025 GMT
Subject: CN=50943a762e8c056f4fb52445bf72d0c7846646dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f4:81:1b:f1:42:db:dc:84:16:25:55:57:22:
68:4b:cd:71:68:fb:85:3d:dc:c7:66:71:24:21:3b:
9c:d2:59:b1:90:7d:cf:ee:0d:c4:ad:f9:08:02:04:
42:c7:9f:08:0c:6f:d0:59:5e:58:e8:06:cf:ba:34:
30:44:6f:2e:4a:2f:8d:c5:d4:90:3e:7e:79:74:64:
a6:48:a9:a7:02:60:8e:19:a4:06:4f:4e:80:26:9d:
e1:96:11:de:eb:bb:c5:34:dd:6f:fa:d9:42:18:52:
ae:31:ae:91:86:0c:0a:b5:cc:81:f1:07:49:61:ba:
63:35:0a:7f:7d:01:5b:bd:52:a2:b0:3c:8d:f6:c5:
1f:44:ee:17:7c:dc:65:a0:b0:d8:9d:15:b0:f8:10:
ae:3a:f7:50:28:c3:82:e7:a9:a2:e8:1a:47:54:36:
81:7a:bb:9f:7c:9c:86:db:32:a5:65:e6:d3:a5:77:
e5:2e:c1:7f:ec:b5:fa:9d:76:f4:26:32:ed:e6:0e:
da:73:73:8b:c6:03:3a:15:62:64:ec:78:f8:17:e6:
87:db:2f:f2:d1:07:47:9c:45:21:b8:73:2b:92:34:
d3:3d:a6:e2:77:72:d4:c4:15:59:5b:6e:23:52:59:
90:37:e5:41:56:0b:3d:9c:28:69:31:f6:21:ad:c5:
d1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:94:3A:76:2E:8C:05:6F:4F:B5:24:45:BF:72:D0:C7:84:66:46:DD
X509v3 Authority Key Identifier:
keyid:21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:3a:d4:56:29:ef:97:31:58:fc:dd:db:12:05:a5:51:d2:f3:
7f:1f:d1:04:0c:67:99:03:30:9c:6f:5b:d9:ce:2c:cd:17:41:
48:5a:85:3f:49:77:82:46:f7:b1:67:30:2a:d6:57:af:c6:ef:
05:af:3e:d0:14:1c:3b:45:83:13:af:d2:7b:6d:58:10:f0:01:
af:2c:c2:48:55:37:3a:e3:c1:98:6c:1f:56:be:a0:3e:40:88:
79:67:a2:93:fb:68:dc:21:0c:09:f1:de:52:78:cc:51:b8:04:
c5:c5:2c:e8:93:86:2e:53:87:cf:07:fd:c3:a3:10:8b:fe:c5:
d0:86:44:75:9b:a9:55:bb:02:82:51:06:a7:52:2d:9d:c6:72:
b5:f1:55:f2:5c:95:92:2d:e9:1e:a6:ff:9d:89:0b:32:08:d7:
84:53:62:ee:a2:fb:fa:21:2c:8c:5c:1e:a7:3b:f4:0c:cb:d2:
6b:2e:57:b7:62:74:0b:16:a2:e2:32:b6:97:ef:04:cb:e9:3f:
70:a9:7e:e6:95:f1:a0:cd:34:b6:a9:98:94:52:5d:8b:80:2d:
54:e4:ce:b6:8a:3e:c2:ad:54:0c:7e:8c:26:df:10:d3:7e:ec:
eb:dc:18:9d:48:36:1a:3d:d9:95:6a:4a:f4:a4:4b:a6:5a:6b:
23:98:9d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:19 2025 by rpki-client