Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/6f590a-c1fd-4019-bbe8-87aae3575a2a/1/cIx-If6q6sViZpSXVEPndzXz_Kc.mft
File: cIx-If6q6sViZpSXVEPndzXz_Kc.mft (raw, json)
Hash identifier: ZJV3jNP/lO3bqUPhLhYZBnrDeUE3L598g56ZFTxS8uM=
Subject key identifier: 28:99:F2:04:17:9A:C6:40:E2:D7:B0:62:91:63:69:9B:DD:C8:5D:C3
Authority key identifier: 70:8C:7E:21:FE:AA:EA:C5:62:66:94:97:54:43:E7:77:35:F3:FC:A7
Certificate issuer: /CN=708c7e21feaaeac5626694975443e77735f3fca7
Certificate serial: 019A71B7CD8FFC39E0263A0AB6A9347108B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIx-If6q6sViZpSXVEPndzXz_Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/6f590a-c1fd-4019-bbe8-87aae3575a2a/1/cIx-If6q6sViZpSXVEPndzXz_Kc.mft
Manifest number: 1B
Signing time: Tue 11 Nov 2025 07:01:02 +0000
Manifest this update: Tue 11 Nov 2025 07:01:02 +0000
Manifest next update: Wed 12 Nov 2025 07:01:02 +0000
Files and hashes: 1: cIx-If6q6sViZpSXVEPndzXz_Kc.crl (hash: vP8+QN2xD+05oxNFsxLIGTNYXQCEP6+nnMzF4qHTnkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/6f590a-c1fd-4019-bbe8-87aae3575a2a/1/cIx-If6q6sViZpSXVEPndzXz_Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/6f590a-c1fd-4019-bbe8-87aae3575a2a/1/cIx-If6q6sViZpSXVEPndzXz_Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIx-If6q6sViZpSXVEPndzXz_Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:cd:8f:fc:39:e0:26:3a:0a:b6:a9:34:71:08:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708c7e21feaaeac5626694975443e77735f3fca7
Validity
Not Before: Nov 11 07:01:02 2025 GMT
Not After : Nov 12 07:01:02 2025 GMT
Subject: CN=2899f204179ac640e2d7b0629163699bddc85dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7e:c2:72:41:80:b5:6a:73:0a:02:b6:5e:1f:
ea:92:91:53:1d:88:e7:4c:be:3e:c7:12:2d:28:bb:
7e:e0:d8:0a:cf:b2:65:b5:30:36:11:87:76:60:f8:
94:6a:74:07:f0:64:6b:bb:f9:91:6b:49:45:da:e7:
80:b9:41:fe:6c:19:6a:af:8b:c7:39:43:51:c2:30:
d2:9f:85:76:40:84:10:bc:66:79:ec:74:eb:b3:ab:
3e:10:f0:37:ff:b0:1b:e4:1d:59:88:1b:ec:22:7a:
82:49:71:af:72:0d:b4:df:c1:9c:34:45:87:c3:27:
b4:33:0e:e1:ec:86:52:24:10:bc:82:b7:9b:4a:ba:
f4:d3:51:6e:6d:6a:58:0d:b4:1c:67:11:5b:67:5e:
0f:7e:2c:90:ad:2b:bb:80:cf:21:c4:8e:18:b4:49:
16:1e:96:9e:e8:60:18:b9:48:ba:cf:b4:1f:6a:17:
7e:00:43:4f:9e:d5:22:e3:c6:79:02:34:b9:3f:ca:
a2:6b:fb:d0:01:29:8f:dc:b1:17:58:1d:16:7f:0a:
43:9c:a7:56:ae:95:9d:ac:5f:24:45:8c:d1:a1:61:
11:72:6e:76:10:38:54:b6:0d:d1:a0:87:73:6f:a4:
5f:6e:77:b3:e6:9b:41:9b:73:d9:3b:fe:f7:6b:bf:
ca:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:99:F2:04:17:9A:C6:40:E2:D7:B0:62:91:63:69:9B:DD:C8:5D:C3
X509v3 Authority Key Identifier:
keyid:70:8C:7E:21:FE:AA:EA:C5:62:66:94:97:54:43:E7:77:35:F3:FC:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIx-If6q6sViZpSXVEPndzXz_Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6f590a-c1fd-4019-bbe8-87aae3575a2a/1/cIx-If6q6sViZpSXVEPndzXz_Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6f590a-c1fd-4019-bbe8-87aae3575a2a/1/cIx-If6q6sViZpSXVEPndzXz_Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a9:69:7d:7a:dc:3e:23:d4:18:3c:06:f4:67:96:52:87:34:
87:cd:78:3d:49:1a:41:78:b8:38:f6:b1:48:d9:ac:83:ef:83:
1c:9b:44:b9:87:56:d8:00:9e:7a:28:d8:b3:94:4c:8c:fd:a7:
0e:5d:1d:73:71:8b:27:47:75:62:fe:3f:83:28:46:f9:7b:c4:
1d:e7:e8:a1:57:f8:f2:24:e6:5a:25:5f:2f:d8:00:8b:cf:f8:
bd:a7:f8:35:39:38:0d:ea:01:6c:8e:cc:0a:7e:2a:a9:d5:ab:
e8:0b:d2:75:3a:da:e3:cf:50:33:b1:6c:66:df:74:1f:64:87:
1b:0f:9a:14:a4:ce:39:91:65:47:5a:9a:d2:26:9e:be:fe:04:
66:ab:bf:72:6b:f2:ca:6d:1d:55:a6:d3:46:10:33:6c:1b:b6:
95:82:5c:60:5c:e3:ec:35:d6:d1:b1:bd:ea:d5:3e:86:53:f7:
3e:d1:5b:a2:6b:e1:36:6d:a9:7b:53:51:1c:15:c7:cb:4f:e8:
33:1d:aa:2e:98:cf:c0:94:f8:28:92:f9:6c:a5:57:32:43:60:
1b:d7:7c:29:61:4c:c9:e7:99:ac:18:1e:b2:a2:e5:c6:17:e1:
c9:aa:f0:4e:0a:74:61:3e:67:7f:04:16:d0:98:80:b3:45:54:
93:1c:18:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:39 2025 by rpki-client