Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
File: ije4wOFZfNHaZcmgf6wFrNhEzGo.mft (raw, json)
Hash identifier: 6yXj1OraWeoRYaNHjEu2DnECW9PvV7Wr5V5wJN5bH1o=
Subject key identifier: DA:39:59:B3:C1:71:94:05:44:28:77:F0:5F:62:54:87:C3:79:2D:70
Authority key identifier: 8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A
Certificate issuer: /CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a
Certificate serial: 019A71B8BCC23B809D57D7A8E5B596271B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
Manifest number: 120B
Signing time: Tue 11 Nov 2025 07:02:03 +0000
Manifest this update: Tue 11 Nov 2025 07:02:03 +0000
Manifest next update: Wed 12 Nov 2025 07:02:03 +0000
Files and hashes: 1: ije4wOFZfNHaZcmgf6wFrNhEzGo.crl (hash: qsMhyhZGTdQRLgdB0kUlF+CusxaV5hFyTplr1AtPPs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:bc:c2:3b:80:9d:57:d7:a8:e5:b5:96:27:1b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a
Validity
Not Before: Nov 11 07:02:03 2025 GMT
Not After : Nov 12 07:02:03 2025 GMT
Subject: CN=da3959b3c1719405442877f05f625487c3792d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:0b:c4:31:c4:24:3b:b8:c1:78:63:2e:e3:
64:fc:35:a8:30:0b:ab:77:03:5e:e7:fb:4d:0d:55:
b5:76:0f:f1:9c:23:45:6b:5a:66:1e:e5:da:be:1e:
44:1d:73:98:46:17:76:2d:4b:7d:e7:38:09:60:3b:
8e:e7:e8:72:0c:9c:89:8b:90:67:10:6d:56:c1:8c:
ef:54:a7:8c:60:c7:8e:45:ec:9c:88:78:bf:33:00:
f3:28:23:6e:98:ad:4d:a4:21:fb:fc:35:e0:99:3e:
84:5e:4d:ee:5c:e1:ae:37:c7:b7:39:6e:cc:0f:89:
8d:3e:99:a7:af:af:f8:01:ce:a0:29:91:85:95:84:
0b:b9:f8:c6:f5:1e:2b:bc:69:b7:e3:df:2b:98:d3:
8e:20:0a:e2:62:4e:f8:b6:cb:18:74:1d:7c:98:74:
b8:25:d2:73:aa:8e:fb:97:4e:5b:93:68:06:f0:2b:
9d:32:35:60:a1:51:9c:3e:80:b4:10:6e:8f:9b:c0:
3f:b5:35:a7:07:15:62:68:f8:ef:b3:6b:ba:ca:08:
c2:42:b0:94:e1:5e:81:a3:82:6a:92:49:c8:c9:af:
fa:e8:21:10:29:ec:e1:fe:f6:94:4a:92:9a:83:93:
9b:ea:28:54:6a:9f:22:27:52:a1:ec:fa:7c:08:dc:
44:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:39:59:B3:C1:71:94:05:44:28:77:F0:5F:62:54:87:C3:79:2D:70
X509v3 Authority Key Identifier:
keyid:8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:80:c1:fe:d8:9c:d0:2b:87:5b:3b:d0:f9:90:65:dc:47:3e:
20:ce:0d:1f:0c:3c:01:3c:dd:3a:f2:0e:72:e1:bb:56:22:f1:
b6:be:8c:ba:d1:6c:32:25:8f:9c:5e:6f:72:d7:0e:40:20:19:
8c:49:20:ba:c6:61:77:c9:a0:1b:41:33:3d:a8:4e:d9:8f:2f:
37:c8:1d:26:69:3a:9e:92:3f:b4:75:d3:d2:d1:f9:8d:a1:6b:
b9:d9:a9:eb:e0:ad:18:9c:67:3b:14:d2:e4:4e:00:5e:b7:ba:
b6:0f:c0:3d:85:fa:96:3d:1d:de:26:46:35:0c:2b:ee:e2:d9:
d6:85:b3:20:0f:b5:9c:ca:c8:bf:e7:53:a5:da:d6:c2:dc:a7:
77:b4:ac:42:68:ca:56:f0:00:80:80:3b:78:fb:3e:4e:f1:d3:
a8:b9:80:a7:62:1c:8b:6c:73:f0:26:fe:29:42:c1:ec:74:34:
63:f1:2a:a0:0d:6c:61:f9:ba:7d:8b:84:3d:4e:b1:4c:ef:c0:
f9:eb:a4:bc:d1:6e:cd:60:61:3f:a9:03:1d:8d:14:9c:c9:3d:
57:f1:1c:af:03:f4:54:91:09:b6:68:f7:d4:1a:14:28:e6:94:
28:6a:ba:53:bf:7a:f3:a4:84:ff:f8:84:89:09:2e:2f:4a:29:
6c:9a:1e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:19 2025 by rpki-client