Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
File: IfwUL311pxS5rMZT0LXO0zfKRJU.mft (raw, json)
Hash identifier: czzeaWUl/uj/EU+/886PBra3fdJ1YnK6n+DDcyuY8o4=
Subject key identifier: 11:B9:13:0F:1D:AC:19:59:21:5D:80:A4:B0:AB:55:78:DC:4B:23:8A
Authority key identifier: 21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95
Certificate issuer: /CN=21fc142f7d75a714b9acc653d0b5ced337ca4495
Certificate serial: 019A725C5857FBF1B76CC8FAC08F1A23ED64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 10:00:45 +0000
Manifest this update: Tue 11 Nov 2025 10:00:45 +0000
Manifest next update: Wed 12 Nov 2025 10:00:45 +0000
Files and hashes: 1: IfwUL311pxS5rMZT0LXO0zfKRJU.crl (hash: x/V8R4ncLS8L8zXJKuPN9kaAFLWXvhWBmdtxwgzaPJs=)
2: UipKreH4zZ-JKObDVFkMEdQTy8E.roa (hash: 2lFb7AbIOkpByp+mzj8V6olwzUC3cjME2INFe+siQFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:58:57:fb:f1:b7:6c:c8:fa:c0:8f:1a:23:ed:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21fc142f7d75a714b9acc653d0b5ced337ca4495
Validity
Not Before: Nov 11 10:00:45 2025 GMT
Not After : Nov 12 10:00:45 2025 GMT
Subject: CN=11b9130f1dac1959215d80a4b0ab5578dc4b238a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cb:03:fc:1c:57:aa:af:25:84:e1:6a:63:27:
3b:ec:58:eb:3e:44:bd:cd:35:71:17:e8:b8:9d:5c:
2a:85:8c:54:cc:71:86:68:38:8d:a3:5c:d2:29:24:
34:04:2a:fe:8d:68:61:2d:ac:e6:5f:0b:6f:78:b5:
7d:bf:06:ba:92:f3:4e:d9:78:6f:ce:9e:ca:5e:eb:
ae:31:af:69:29:0b:72:18:a0:60:b7:ab:18:8b:3a:
bc:79:c5:bc:50:55:cc:26:8e:d7:cf:5f:3b:24:83:
16:ea:f9:e0:60:d3:11:33:86:ae:39:08:19:58:f7:
c4:07:17:0d:05:4d:06:5c:3f:6a:8f:ef:f5:a1:da:
c8:e9:a8:4a:31:1b:0c:b0:47:46:86:72:ce:e9:ab:
8e:01:8f:7d:11:ba:29:b6:a0:35:d2:ef:ce:35:5a:
8e:cf:7f:e7:96:d9:4b:f5:8c:05:70:f6:ef:c3:f9:
7b:fb:b0:a8:5e:2d:46:3a:14:01:05:1f:75:ce:a4:
f8:f4:c6:e7:27:55:94:94:76:23:a1:82:21:9e:9b:
63:01:ab:c6:9b:2a:0b:e8:72:ec:31:fe:3e:22:b3:
ae:27:44:09:84:db:16:10:7a:f6:69:77:ee:11:9e:
d3:ba:7e:c1:16:33:83:a7:f5:24:87:68:0c:d8:be:
01:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B9:13:0F:1D:AC:19:59:21:5D:80:A4:B0:AB:55:78:DC:4B:23:8A
X509v3 Authority Key Identifier:
keyid:21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:84:9d:f0:a9:f3:18:a1:94:d7:7e:ec:41:73:e5:8b:dc:6e:
92:15:0b:11:03:83:5f:92:80:d2:64:de:5a:95:1c:a9:fa:95:
53:eb:d9:23:dc:ef:55:51:b5:4d:69:2e:5c:ca:5a:9a:d7:41:
20:8b:8e:4d:ef:5d:5d:6e:e4:2b:15:c0:5e:a2:e8:ca:bf:00:
d1:f0:dd:d1:a3:4a:f6:a6:b0:08:7c:1d:8c:3b:5c:44:0b:55:
8b:79:90:04:77:3f:59:57:58:b9:f2:f7:72:96:ae:ff:58:4a:
de:8a:79:a9:03:24:1a:ee:2e:8b:c5:d5:7a:37:bc:ed:d8:df:
b3:44:6c:dd:4f:da:dc:b6:0c:c0:76:b1:80:ac:e1:ee:e3:08:
e0:1e:55:7b:f9:08:06:c7:d3:35:99:ca:bc:e5:65:67:40:6c:
30:98:e6:91:6c:92:1a:c8:9c:53:14:e0:a5:fc:34:db:86:34:
d8:6e:b5:2d:ad:0c:65:6a:c7:3f:ba:fd:7e:50:83:fa:f2:1b:
1a:0c:4d:c2:39:c9:33:2a:c9:63:e6:0b:9a:eb:26:03:27:03:
d6:23:49:3a:d3:17:5c:52:82:29:1a:98:f1:b1:65:a2:9e:c1:
46:ce:f7:b8:a5:1a:cf:7e:ba:5c:22:8b:fb:8c:8f:71:f3:4c:
84:65:26:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:38:07 2025 by rpki-client