Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
File: izHINiDus1ExJXtb-vqrOTRSyJE.mft (raw, json)
Hash identifier: LYrIpzihiBcu7+qQjjWgWzRQh6s2q//8Ec9dLvfj8H8=
Subject key identifier: 90:75:8C:05:2A:4F:7B:4E:15:0B:07:0C:2F:9F:1C:C0:26:10:78:88
Authority key identifier: 8B:31:C8:36:20:EE:B3:51:31:25:7B:5B:FA:FA:AB:39:34:52:C8:91
Certificate issuer: /CN=8b31c83620eeb35131257b5bfafaab393452c891
Certificate serial: 019A7112DB40BEEAC7E640660EBBD2C70D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izHINiDus1ExJXtb-vqrOTRSyJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 04:00:52 +0000
Manifest this update: Tue 11 Nov 2025 04:00:52 +0000
Manifest next update: Wed 12 Nov 2025 04:00:52 +0000
Files and hashes: 1: izHINiDus1ExJXtb-vqrOTRSyJE.crl (hash: rDgytYTSg22oaqJh/K9iJMM+XVUOWs3NlFTdkvLL6b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/izHINiDus1ExJXtb-vqrOTRSyJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:db:40:be:ea:c7:e6:40:66:0e:bb:d2:c7:0d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b31c83620eeb35131257b5bfafaab393452c891
Validity
Not Before: Nov 11 04:00:52 2025 GMT
Not After : Nov 12 04:00:52 2025 GMT
Subject: CN=90758c052a4f7b4e150b070c2f9f1cc026107888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f6:4b:1e:83:0d:44:a1:c5:01:07:dd:b9:2a:
23:a5:96:17:55:c3:50:33:c2:4e:58:b1:00:19:9e:
b3:f5:64:19:60:9f:9b:4f:f3:63:3f:3a:42:9b:7a:
fd:87:1c:72:55:14:21:32:6f:a2:f7:85:37:bd:d1:
32:25:12:16:82:9c:34:a8:02:7f:43:23:8c:63:95:
9b:7a:67:12:85:62:07:94:1a:82:b6:3a:b8:73:3f:
90:e5:23:03:54:66:c1:cd:d9:34:16:fd:09:77:26:
9c:93:05:6b:32:0d:3e:22:ba:10:b4:cb:2d:32:d6:
41:19:6f:c9:6f:83:2c:73:5b:c0:12:b0:6c:68:c1:
c4:b9:cd:d1:f0:8a:00:15:62:39:89:33:0d:5c:cb:
7b:24:b5:9e:e6:af:00:d6:fd:92:a3:62:0b:09:16:
ec:8f:5e:15:9f:15:51:52:a2:f5:a3:45:0d:df:55:
a8:f3:3d:f8:ee:9c:5d:b8:f5:90:d0:93:1d:20:21:
01:cd:c3:c8:81:a9:03:d5:02:63:62:27:4d:d4:f0:
54:75:85:38:99:ba:d7:30:e6:00:3b:ad:fb:db:53:
84:64:bb:dd:af:57:77:48:d6:42:1c:05:9c:d1:77:
31:16:d4:2c:5c:a0:a8:33:02:21:db:3e:2f:17:26:
6b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:75:8C:05:2A:4F:7B:4E:15:0B:07:0C:2F:9F:1C:C0:26:10:78:88
X509v3 Authority Key Identifier:
keyid:8B:31:C8:36:20:EE:B3:51:31:25:7B:5B:FA:FA:AB:39:34:52:C8:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izHINiDus1ExJXtb-vqrOTRSyJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7c:05:92:05:dd:81:ee:3a:fc:28:5b:ad:5b:9a:18:51:c2:
96:b0:a8:2d:74:02:31:25:f0:e0:16:c4:60:66:ce:59:11:f5:
6f:17:05:34:43:09:9f:80:8a:89:b3:ee:4d:81:52:a9:40:eb:
6b:7a:43:e2:04:30:71:ee:4d:92:13:42:81:1c:2e:80:4d:cc:
f0:37:46:73:58:f7:79:ec:b5:27:6b:f1:74:fc:db:40:8a:d0:
f0:f6:f2:e3:ad:eb:df:c5:2f:92:61:43:be:c7:4f:a4:4e:c8:
52:de:08:6a:55:87:2d:2f:a4:91:f5:7a:85:7a:aa:99:1f:76:
22:d0:19:4d:67:ae:51:c1:8e:15:0a:4d:9d:c0:f0:53:60:0a:
25:b7:ed:f7:b7:7f:9a:1f:66:0b:ed:c8:83:d5:2e:53:67:32:
20:55:d5:df:23:b5:43:e5:bf:3e:65:b9:c6:1b:6f:04:96:6e:
e3:5e:3e:67:75:77:9d:ab:75:79:6b:7d:f0:db:38:e3:49:97:
c5:4e:75:f4:85:29:ff:8d:80:dd:6f:39:cb:f2:7e:35:34:3a:
6a:04:6f:4b:09:30:b4:36:4a:50:cf:70:3f:d7:97:bf:03:c0:
63:b4:42:ba:09:0f:be:1a:b1:bc:98:4c:0d:73:fb:20:53:16:
1c:aa:0f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:10 2025 by rpki-client