Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
File: IIsiFwCygfgj4yKjIiGoZ-WweaY.mft (raw, json)
Hash identifier: zdDILcwxESOIZtt81xd9r3WW9X55LxgoW9ecOVBg8mE=
Subject key identifier: DB:EA:3B:7D:7E:96:35:61:82:94:FD:83:2C:34:90:6E:C0:49:77:76
Authority key identifier: 20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
Certificate issuer: /CN=208b221700b281f823e322a32221a867e5b079a6
Certificate serial: 019A71B9791BA17C04AEEB32BAF6F0A631B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:02:51 +0000
Manifest this update: Tue 11 Nov 2025 07:02:51 +0000
Manifest next update: Wed 12 Nov 2025 07:02:51 +0000
Files and hashes: 1: IIsiFwCygfgj4yKjIiGoZ-WweaY.crl (hash: TfXoKBfhxaN6A1iyk1JQGfKr0S6e4YjJm30HMqHqJ3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:79:1b:a1:7c:04:ae:eb:32:ba:f6:f0:a6:31:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208b221700b281f823e322a32221a867e5b079a6
Validity
Not Before: Nov 11 07:02:51 2025 GMT
Not After : Nov 12 07:02:51 2025 GMT
Subject: CN=dbea3b7d7e9635618294fd832c34906ec0497776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:60:11:b3:86:ae:39:01:62:d2:36:30:97:8f:
74:92:4f:06:94:e0:68:c6:73:61:5b:55:69:4d:53:
b7:9a:40:ae:d5:b5:8e:b0:72:ad:a7:2b:6b:c4:f6:
06:a4:41:49:36:14:03:ce:0d:59:9a:c3:89:4c:f3:
d0:75:0c:64:de:c6:ad:4e:7e:88:7a:d1:01:24:1e:
84:0f:b0:5c:41:5e:f0:30:30:c8:88:fb:bf:9f:de:
41:c5:fc:95:0b:f4:d7:8a:87:fd:41:f9:12:f6:6f:
6b:57:ce:eb:5b:15:a9:f6:e0:1f:7e:da:11:31:46:
58:9c:96:dc:d1:09:1c:8b:88:f5:29:d4:7e:de:cf:
75:c9:70:91:af:b4:6a:26:81:28:9b:9a:4e:20:bb:
4e:d9:d8:f0:a3:7c:b4:63:75:ec:c7:fc:66:a9:92:
c2:10:c2:ab:5c:a6:c7:fd:c6:45:6b:9f:57:1e:6e:
95:36:2a:d1:97:98:aa:0d:f3:6f:de:04:d2:1f:03:
0e:69:f3:8e:d7:1d:e0:16:a4:d1:f3:d7:5e:a6:9f:
51:22:98:8c:0b:fd:3b:2a:76:ef:e7:5b:75:34:ca:
55:0d:1a:b7:1d:ac:c6:1f:9a:98:25:db:67:2f:e1:
16:09:86:e9:dd:8d:4c:d8:a2:cb:8c:e4:b4:c6:81:
54:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:EA:3B:7D:7E:96:35:61:82:94:FD:83:2C:34:90:6E:C0:49:77:76
X509v3 Authority Key Identifier:
keyid:20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e0:f8:6f:2d:80:22:e7:ed:28:1a:88:e9:b7:ae:66:d5:cb:
78:ef:f4:3f:c9:79:69:cd:e5:61:0c:2d:e1:07:ac:9d:69:3f:
5a:66:03:91:0c:56:6f:f7:35:54:1d:10:53:9b:67:9a:4a:f6:
d8:3f:b3:d1:8b:59:e7:44:ca:5e:5f:c1:8d:d3:6f:5f:46:7e:
3e:6f:78:c5:cb:1c:62:a7:13:7f:17:3f:4d:b6:ed:e6:6c:6d:
d7:a1:7f:d4:fe:fc:d9:8e:43:28:3a:c0:06:90:81:a7:cd:53:
dd:bc:22:82:2b:98:5c:e6:92:32:d3:fc:96:8b:2b:f7:07:ad:
44:9f:43:2f:60:89:ea:cf:c9:98:2c:ab:f8:93:cb:97:4b:af:
c9:38:41:54:30:44:16:a5:69:13:af:04:4c:74:3e:1d:99:6f:
45:a9:cf:e2:db:50:47:f0:ed:88:86:6c:26:7c:37:d5:be:8e:
da:c3:89:7d:92:14:6a:1d:e3:da:c8:e6:e8:13:b2:10:0f:aa:
fb:62:d3:08:f0:ae:0d:87:17:54:72:05:d1:a8:59:dc:3a:7b:
21:9f:b8:18:26:c5:40:23:49:57:2e:59:bf:79:b9:b9:f4:b3:
06:8d:b3:f9:88:c8:b8:2a:ac:80:d9:02:32:ad:63:f2:48:98:
41:cb:8f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:31 2025 by rpki-client