Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
File: i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft (raw, json)
Hash identifier: /YHJOAewFNdnbGB48g+TaEpeXgIePBJfsyOXTn6vWi0=
Subject key identifier: D5:80:6E:9D:1D:9E:60:EB:B6:A4:1B:06:50:06:E2:3D:3A:87:99:CD
Authority key identifier: 8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0
Certificate issuer: /CN=8b995951fd027fc739b04513b8f8d6bc678418c0
Certificate serial: 019A7293BE9D5990F23080F480CFE9AF00D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
Manifest number: 156C
Signing time: Tue 11 Nov 2025 11:01:16 +0000
Manifest this update: Tue 11 Nov 2025 11:01:16 +0000
Manifest next update: Wed 12 Nov 2025 11:01:16 +0000
Files and hashes: 1: i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl (hash: +vRdiBisFMDe+d4WweZSZe3pk5NQxRF2MYuXiJJ+II4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:be:9d:59:90:f2:30:80:f4:80:cf:e9:af:00:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b995951fd027fc739b04513b8f8d6bc678418c0
Validity
Not Before: Nov 11 11:01:16 2025 GMT
Not After : Nov 12 11:01:16 2025 GMT
Subject: CN=d5806e9d1d9e60ebb6a41b065006e23d3a8799cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fe:15:b6:aa:1d:d2:16:b2:b4:81:e9:9d:fc:
8d:49:be:f2:24:60:de:fe:28:26:32:6d:3b:76:ba:
4c:7a:1c:3f:04:86:0e:29:e5:57:69:68:77:d2:2e:
09:ea:0d:b4:ec:95:65:76:20:a7:67:68:ce:98:4a:
38:9b:af:1a:a0:f4:17:69:74:75:37:d7:c6:d9:d6:
f9:53:9e:b8:25:d6:89:d2:d9:1f:4c:b0:22:c2:50:
d9:bf:41:ab:6b:4f:91:09:aa:5b:e7:6d:50:82:76:
01:41:ed:88:de:46:4f:85:54:fc:15:56:9a:d1:8b:
10:6a:d3:44:50:53:37:74:1a:8f:20:70:20:50:44:
48:85:6c:6b:5e:79:36:0b:35:64:3b:04:d5:e2:07:
e8:76:78:b0:f6:97:a8:81:47:e7:5c:44:c8:a2:cd:
42:0c:e9:00:4e:2d:04:56:9a:d9:b7:4d:a0:0d:4c:
8f:cd:e9:e3:57:c5:69:97:8a:79:e8:ce:b1:b2:92:
4f:6a:9a:28:c3:00:4e:80:d5:89:9d:4e:f1:05:99:
c6:cb:98:12:be:64:f6:c2:4e:fe:a0:c7:19:2d:f5:
c5:1d:d1:71:07:70:c3:46:16:28:d0:af:58:9d:88:
ab:4f:46:d4:9b:63:98:29:b9:1a:05:7a:6f:f1:37:
12:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:80:6E:9D:1D:9E:60:EB:B6:A4:1B:06:50:06:E2:3D:3A:87:99:CD
X509v3 Authority Key Identifier:
keyid:8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e9:34:14:fd:a4:ca:41:f9:b8:d9:76:89:67:a4:05:f8:32:
ad:fd:0f:a9:8c:9e:05:15:c3:6b:31:96:7b:e2:5c:3d:4a:be:
59:94:ae:a3:9f:04:87:74:1e:c1:0a:7d:bf:2c:af:22:ef:7d:
e6:c0:f7:07:00:eb:92:e8:e6:43:3b:0f:60:5d:71:28:b9:61:
d1:12:ba:1b:ff:24:00:47:fc:5f:59:26:6f:f5:5d:d4:01:41:
22:bc:3f:de:27:88:b0:d8:41:9e:22:02:8b:14:20:e1:7a:cd:
ef:db:36:69:f4:72:bd:ca:e1:28:6b:b4:97:f4:b2:88:1d:81:
52:71:c5:b7:06:41:97:1f:c3:98:5a:db:f4:be:67:09:2f:c0:
a8:d3:fc:9a:c7:c8:86:8f:61:a3:e5:88:79:18:f9:44:e5:db:
b1:00:46:ea:23:85:3a:a0:26:42:ab:89:45:7b:d7:6b:64:77:
fa:37:2f:45:13:1f:07:92:fc:ca:27:50:b4:b6:cb:f7:0f:0b:
16:8a:39:18:92:8a:95:4d:81:a8:7e:c5:96:6d:31:01:07:80:
b8:24:5b:2b:51:eb:1a:ac:be:8b:36:a9:ec:24:6e:46:a2:28:
93:61:d8:6c:11:4b:b4:fa:07:df:09:4c:22:38:83:4f:e4:69:
d2:7b:7c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:57 2025 by rpki-client