Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
File: ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft (raw, json)
Hash identifier: Bs77YJi1LmmGLXUT5vRQ9oepp2Z7oaTsb86QSulZBJI=
Subject key identifier: 90:BF:93:72:34:9E:B8:97:90:E7:CD:9F:F7:8C:6C:37:DD:89:C8:96
Authority key identifier: 89:F1:85:8C:D3:7F:B3:8B:2A:CF:A5:CB:4E:F4:3E:3C:30:8D:3D:61
Certificate issuer: /CN=89f1858cd37fb38b2acfa5cb4ef43e3c308d3d61
Certificate serial: 019A7112D6094097FC6B8607112F426564F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 04:00:51 +0000
Manifest this update: Tue 11 Nov 2025 04:00:51 +0000
Manifest next update: Wed 12 Nov 2025 04:00:51 +0000
Files and hashes: 1: ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl (hash: pmNaK+eJth2wX/ZcUMx/PK6nmwyirIRJMIoI+1c0EtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:d6:09:40:97:fc:6b:86:07:11:2f:42:65:64:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f1858cd37fb38b2acfa5cb4ef43e3c308d3d61
Validity
Not Before: Nov 11 04:00:51 2025 GMT
Not After : Nov 12 04:00:51 2025 GMT
Subject: CN=90bf9372349eb89790e7cd9ff78c6c37dd89c896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:6d:cf:86:58:f3:6f:94:6b:71:91:82:be:c2:
0d:8b:e6:ab:20:79:83:7e:e8:40:da:99:f6:8d:0a:
23:6d:f8:4c:a5:be:ca:57:a4:5c:91:ad:f3:6b:36:
9d:21:4a:9d:91:f0:e6:f6:89:33:49:a2:17:52:47:
31:07:9d:10:f4:b0:4f:6e:b6:bb:25:1f:cc:11:41:
df:cb:f6:12:7f:77:a1:34:51:d4:ef:a7:52:53:10:
66:63:f2:25:4d:2d:b9:f3:68:3b:ac:c3:1b:88:96:
e6:6e:74:45:74:f3:c5:08:b3:ba:5d:b3:f4:65:24:
58:8d:93:67:fe:59:f9:07:41:ee:2c:31:55:63:83:
33:1e:50:45:80:63:2f:5b:71:0f:6c:47:6c:4c:04:
c1:9b:89:5d:fe:7d:3f:4e:a8:55:16:fd:37:8e:a2:
3c:96:02:c8:54:b6:2c:f5:ca:92:c5:e0:a4:19:76:
4f:8d:1c:47:1d:51:80:6b:c8:4d:c6:03:42:ff:fe:
88:0e:1d:31:ef:93:71:15:6d:e8:a3:4e:2c:1e:2b:
6a:b7:e3:e8:c9:f6:36:82:55:2d:bf:b0:30:15:b0:
e3:28:19:d8:3b:52:38:a7:0b:8b:ef:d8:fc:f0:95:
be:22:25:69:79:43:c8:97:fe:9c:7a:ae:d2:41:2f:
1b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BF:93:72:34:9E:B8:97:90:E7:CD:9F:F7:8C:6C:37:DD:89:C8:96
X509v3 Authority Key Identifier:
keyid:89:F1:85:8C:D3:7F:B3:8B:2A:CF:A5:CB:4E:F4:3E:3C:30:8D:3D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:54:1e:a2:f7:4b:51:2c:24:12:9e:c9:3b:9c:05:c7:19:c4:
91:0a:1e:56:84:da:9c:9e:33:cd:18:e3:e6:fd:72:99:8a:ab:
fd:41:ef:b2:9f:31:75:c4:7b:d8:0d:e6:c5:d6:15:c3:c9:48:
89:27:92:44:98:05:ff:cd:5d:b5:4c:27:14:77:86:fe:68:82:
99:ca:04:8b:57:76:61:ab:61:8f:4a:28:ba:12:a3:a3:89:9e:
bc:28:66:30:68:5b:04:ac:42:0c:5f:a3:c8:c8:db:ea:eb:85:
b5:1c:1a:98:76:72:82:84:a2:06:6d:5a:df:2d:83:ad:44:57:
dd:9f:93:48:0c:fd:55:fd:51:71:1d:ec:be:bd:eb:8f:7f:40:
6b:a9:0d:9a:05:94:b3:35:84:e0:19:85:fb:50:e8:ff:35:28:
34:f3:4e:3b:e9:05:ad:ac:13:e3:d7:f8:37:a9:44:5d:50:46:
bf:ca:7d:a8:20:a9:b9:48:5d:07:22:85:c6:1d:07:3e:30:00:
65:27:0f:1e:be:1c:f7:77:cc:dd:bd:67:a3:76:1d:c2:67:ef:
e8:17:02:57:0d:98:a5:89:1b:0f:3a:c8:f9:3e:a5:32:32:e6:
2c:a3:16:fa:07:b9:3b:86:40:b8:1a:bd:65:a4:ef:5b:79:2e:
81:15:eb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:50 2025 by rpki-client