Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
File: iSPXAiS3vTwqfOfceofJKtWv8mk.mft (raw, json)
Hash identifier: 2Tv10EDxMuL9saBL4fOhqCwxNaj/mpwqbyZhwUE5XQ4=
Subject key identifier: D3:D9:1A:92:7D:A5:50:89:D4:17:BA:DF:8A:E2:76:38:75:91:EE:07
Authority key identifier: 89:23:D7:02:24:B7:BD:3C:2A:7C:E7:DC:7A:87:C9:2A:D5:AF:F2:69
Certificate issuer: /CN=8923d70224b7bd3c2a7ce7dc7a87c92ad5aff269
Certificate serial: 019A71EE60A6C9D78057BCF2B8DDF957DE2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 08:00:38 +0000
Manifest this update: Tue 11 Nov 2025 08:00:38 +0000
Manifest next update: Wed 12 Nov 2025 08:00:38 +0000
Files and hashes: 1: iSPXAiS3vTwqfOfceofJKtWv8mk.crl (hash: V/DYrXo7PpGqj9Qdg7oop5uK061t8zzF2F81J+ZjIWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:60:a6:c9:d7:80:57:bc:f2:b8:dd:f9:57:de:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8923d70224b7bd3c2a7ce7dc7a87c92ad5aff269
Validity
Not Before: Nov 11 08:00:38 2025 GMT
Not After : Nov 12 08:00:38 2025 GMT
Subject: CN=d3d91a927da55089d417badf8ae276387591ee07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:76:97:a1:d9:af:11:ef:e9:83:60:2b:3c:0e:
9c:51:7c:f6:4e:18:74:b4:f8:49:c0:e3:fa:63:4f:
ef:83:21:d7:b0:c0:8b:7f:ea:ae:bf:cf:67:17:58:
ef:b5:ba:c9:51:91:a5:99:db:ce:c4:8b:20:44:a5:
44:4a:19:01:4b:19:03:56:2a:11:56:dc:3e:f2:5b:
12:0f:7c:7c:e7:df:38:f1:b6:8f:89:af:e9:e4:57:
7e:1a:8a:50:0a:6b:e3:7e:31:64:35:26:63:4e:5e:
14:3a:38:df:4f:4d:23:f7:c3:91:71:2a:76:6d:f5:
41:cc:cf:69:72:e6:5e:9b:75:3a:4d:1c:23:de:03:
81:e5:55:57:a4:24:10:5e:85:95:f3:0b:a4:cb:d3:
d2:39:78:5e:15:63:9b:eb:7f:e9:69:0f:0b:79:a6:
31:ec:71:2e:94:2f:b8:80:4f:15:e3:17:96:c6:e4:
13:40:c8:3b:33:c1:10:ea:bd:5a:a8:05:e9:e8:28:
4c:1b:96:59:c6:38:f3:8b:21:1d:f4:aa:37:4a:b6:
c8:94:93:9f:23:8e:24:30:a1:b2:80:be:81:88:33:
e7:0d:cd:68:ab:a9:5e:0b:bf:91:59:aa:e9:12:5b:
8d:31:62:40:a5:fc:44:57:7e:a8:9e:97:7a:60:55:
ce:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D9:1A:92:7D:A5:50:89:D4:17:BA:DF:8A:E2:76:38:75:91:EE:07
X509v3 Authority Key Identifier:
keyid:89:23:D7:02:24:B7:BD:3C:2A:7C:E7:DC:7A:87:C9:2A:D5:AF:F2:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:60:5a:d3:5b:f7:2b:f1:e9:94:7f:fc:57:1f:fd:b1:fa:92:
60:26:41:8f:30:6d:bb:b1:c0:28:66:f1:13:db:6b:b4:60:e6:
70:99:15:de:0c:ac:dc:54:95:75:fe:59:7f:c0:e1:76:1a:69:
21:1b:30:cc:7d:27:cf:3f:96:4e:99:3d:c8:10:75:ea:7e:82:
38:ef:db:d3:ff:4e:78:1f:15:10:89:73:3b:95:69:29:b9:6a:
31:d4:15:18:a5:1e:77:62:6a:e5:76:91:91:18:21:f1:39:08:
f3:b7:aa:e5:56:3a:22:da:7c:93:94:6e:b1:d0:c4:5e:ec:2a:
ed:10:6c:89:b2:9c:1d:bb:19:e0:37:db:91:08:c7:40:8d:95:
a7:0d:1d:0a:14:51:40:54:3a:cc:89:c7:c9:1d:17:b6:03:31:
8a:78:83:0c:5d:c8:27:35:3f:04:9b:35:4f:86:5f:11:fe:91:
f7:c0:bf:6b:cb:4b:9f:24:f6:e1:6b:58:11:41:a1:42:fc:2f:
e8:75:70:9f:c1:b5:95:8d:cc:41:ef:db:a8:94:d4:3d:71:6f:
6c:c0:55:5d:9e:20:97:5a:dc:15:c3:2c:e4:e1:d2:cc:50:af:
74:50:3e:c4:16:26:12:4e:4d:41:a4:76:cb:9c:0f:2d:cf:b7:
4e:0a:b1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:52 2025 by rpki-client