Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
File: b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft (raw, json)
Hash identifier: s5aGcnxAvcPohXZAbk6CH7Rkk4VTTNfgaibUQ4Tmml0=
Subject key identifier: 5F:C4:F2:66:AD:01:70:D2:15:FC:5B:50:A3:7A:DF:F2:4B:9E:BD:1F
Authority key identifier: 6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB
Certificate issuer: /CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
Certificate serial: 019A722628B1788EB5723AF4F59F1E719FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 09:01:34 +0000
Manifest this update: Tue 11 Nov 2025 09:01:34 +0000
Manifest next update: Wed 12 Nov 2025 09:01:34 +0000
Files and hashes: 1: b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl (hash: kd6mr1SHVWG/vGhr/LNrlrHUvycoPgGz0UbkAaJ/Gag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:28:b1:78:8e:b5:72:3a:f4:f5:9f:1e:71:9f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
Validity
Not Before: Nov 11 09:01:34 2025 GMT
Not After : Nov 12 09:01:34 2025 GMT
Subject: CN=5fc4f266ad0170d215fc5b50a37adff24b9ebd1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a3:ad:a4:18:25:6d:01:52:16:d9:44:59:2d:
71:af:0d:8b:e4:06:20:82:5d:34:d7:2d:e9:d8:52:
b6:f8:38:06:35:61:31:0d:87:85:3a:94:bf:75:5c:
d6:67:9a:73:e7:ab:3f:42:45:eb:c2:1e:85:98:da:
53:49:66:b7:d7:d2:d4:ab:ca:2c:f1:8a:65:d6:66:
d2:de:37:03:b1:ec:b2:6b:33:6a:d4:f1:47:f7:62:
68:3d:a0:5d:fb:fb:9b:62:7e:a9:5b:a3:51:82:db:
8e:cd:28:ea:fc:21:34:5a:8d:c5:7d:d0:85:6d:f5:
5a:11:b3:f1:24:64:0a:0d:7a:70:44:bf:cd:0b:58:
56:fc:00:1f:78:4b:c8:27:4e:66:51:72:df:dc:44:
61:98:6d:13:48:de:ec:8e:d5:2b:05:82:82:4c:be:
7d:79:23:12:24:68:dc:1d:3a:1e:cd:ea:d4:7e:6d:
e3:97:3b:b2:e6:49:d1:bd:fb:a9:6a:e7:70:41:88:
62:69:55:a5:66:b0:0e:81:c3:ec:a0:88:74:85:18:
fa:bd:c9:f5:8f:6b:1c:b1:a2:ed:b7:69:33:a3:52:
c9:05:0a:f1:39:d6:ce:be:0d:c0:c8:0c:86:60:bb:
8e:c3:1d:7e:60:9b:4a:dd:c9:54:1c:54:7d:30:1b:
1f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C4:F2:66:AD:01:70:D2:15:FC:5B:50:A3:7A:DF:F2:4B:9E:BD:1F
X509v3 Authority Key Identifier:
keyid:6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9c:6f:30:e1:b6:02:85:99:c5:ae:56:3d:0e:5e:74:84:01:
64:7c:4f:59:e7:bb:0b:41:ed:88:ec:49:a7:91:bf:de:7f:9e:
7d:b7:cc:8a:39:40:28:1a:be:bc:fa:b4:c9:69:fd:9d:7e:1e:
fa:b3:1c:5b:82:f2:ba:79:76:50:6f:7f:70:c6:a4:5a:e0:52:
b4:dc:83:fe:73:25:28:96:fc:9b:24:2c:23:b2:8e:d2:f9:2e:
d8:97:b2:ed:a9:8f:bf:b0:cc:3d:da:fa:4f:ff:f8:c9:5a:f4:
4c:52:f6:54:9b:64:28:81:a1:2c:c2:3b:4e:20:3b:d1:a8:ba:
55:e6:f1:b7:ca:c0:65:47:55:f4:a4:88:da:20:37:60:35:06:
36:b7:d5:2a:ea:64:50:fb:ae:17:ca:f7:ce:aa:1b:4f:c9:a2:
32:b5:c2:fb:22:6f:a4:84:aa:b1:21:f3:fc:5a:b3:db:68:b6:
b7:c0:61:95:99:ef:34:7e:b7:fa:60:fd:a4:2c:2c:97:45:a9:
8b:0d:2d:a8:ae:b0:d6:cd:be:5f:aa:c9:49:64:69:06:4a:b9:
ee:b5:a3:f2:29:6a:6c:54:38:e6:c0:4a:99:ee:38:ab:dc:4a:
d0:be:ca:4f:c9:15:7b:41:1d:d6:0a:94:d1:14:63:6a:77:97:
08:bc:a9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:27 2025 by rpki-client