Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
File: INyR5mZJTQ3FaiuB0imr1u41-Ew.mft (raw, json)
Hash identifier: Cx1FkUkQjiIoXVz2g1EAxiiY6FYo1wC0CVgDUxCuxhY=
Subject key identifier: 6C:6A:31:C9:02:42:63:68:B7:F5:EA:4D:D2:75:13:39:E7:9E:96:12
Authority key identifier: 20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
Certificate issuer: /CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Certificate serial: 019A71B907B5C7A0503F28A7548BB8097EF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 07:02:22 +0000
Manifest this update: Tue 11 Nov 2025 07:02:22 +0000
Manifest next update: Wed 12 Nov 2025 07:02:22 +0000
Files and hashes: 1: INyR5mZJTQ3FaiuB0imr1u41-Ew.crl (hash: /6EU4/cuPXYYXHSWez/vS59TAVLZXYpOliAWz5QLREU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:07:b5:c7:a0:50:3f:28:a7:54:8b:b8:09:7e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Validity
Not Before: Nov 11 07:02:22 2025 GMT
Not After : Nov 12 07:02:22 2025 GMT
Subject: CN=6c6a31c902426368b7f5ea4dd2751339e79e9612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:b6:4c:58:65:e3:ee:86:b0:fa:26:1b:13:
53:37:f1:2a:76:1f:47:a6:97:60:3d:c6:5f:ce:9e:
bf:b5:a7:f6:57:53:33:9c:c6:76:47:31:9b:15:6f:
cd:bd:c0:7f:12:6b:e9:d5:6e:e6:8a:c5:7d:96:4b:
73:fb:1f:1f:3f:e4:37:34:a6:73:a6:67:9f:28:1b:
ca:3d:7b:0d:e5:73:a1:49:f5:2d:ec:94:37:5a:b9:
05:62:19:f8:f2:70:c1:81:7f:df:c3:c7:c9:00:3a:
56:80:e1:8c:e3:f4:65:76:fb:d1:b1:c0:8e:82:3d:
02:4e:83:96:98:be:9d:3d:2e:81:ec:4c:0f:8e:f9:
8c:ec:34:1a:f3:e3:46:71:86:86:70:dc:8c:ad:72:
63:56:db:b2:ec:19:09:05:d6:fb:2b:dc:46:6d:c2:
35:43:75:1c:3f:df:e5:53:b2:44:2f:e7:d4:08:22:
20:77:d7:93:35:0f:3b:1c:25:e1:03:8f:66:c4:cb:
8e:8d:63:4d:e5:1b:01:9f:d4:6c:a8:5c:ab:bf:72:
f2:3e:9c:84:71:42:a8:43:45:44:a0:75:e9:1f:68:
5c:58:32:54:4a:86:13:4a:0e:14:74:3f:e0:43:b9:
34:44:89:11:8a:c1:e1:36:af:0f:cd:c4:c0:09:de:
9d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6A:31:C9:02:42:63:68:B7:F5:EA:4D:D2:75:13:39:E7:9E:96:12
X509v3 Authority Key Identifier:
keyid:20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:7c:37:6e:04:a9:4c:8f:ab:ba:14:9b:c3:89:3f:db:45:a8:
64:d9:27:0c:4e:7e:69:48:ec:5a:22:2f:fe:15:ff:61:57:b5:
f3:cb:92:40:74:05:92:46:9e:60:46:c9:6e:6d:a5:1f:11:b6:
27:db:bf:26:5b:15:b0:d5:14:ce:fe:1f:9b:3f:84:e7:9f:a3:
7f:fb:59:0b:f3:3b:71:eb:de:22:d6:ff:13:c6:07:7d:b2:c0:
8a:7c:f7:e3:07:62:1d:a3:9d:6f:ea:58:47:0e:b8:9a:2e:95:
d1:74:cf:89:a5:de:d7:27:ec:9e:ce:03:d4:5f:c8:18:25:68:
11:ea:83:12:b2:f6:4d:92:06:f5:b2:3a:ad:33:c5:cd:c5:0a:
7a:25:64:be:93:7f:74:ec:05:ba:2d:45:a6:e3:3f:f5:55:90:
ab:fd:56:7e:43:4d:92:47:f3:a2:7f:62:d3:30:16:84:b9:a9:
68:22:3d:e7:15:94:b0:2a:1a:68:f7:8f:6b:9b:07:24:1a:4f:
3b:8d:85:86:17:ef:75:0d:4e:7a:2b:87:ef:63:6e:e5:64:e8:
5b:72:14:47:4b:b9:3b:09:d8:5f:22:b8:20:c5:45:b3:9c:9c:
91:f2:4e:7c:d0:6b:2f:47:30:52:7b:69:2a:39:0f:c9:a4:23:
76:a8:58:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:58 2025 by rpki-client