Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
File: IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft (raw, json)
Hash identifier: fVUrhj0Z2p01QRlbGTRZ5CXP7LuS1plWd21PDXIFAvg=
Subject key identifier: FB:F1:97:63:47:AE:A7:09:D7:85:03:14:CC:D9:70:55:2C:FD:53:8A
Authority key identifier: 21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88
Certificate issuer: /CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
Certificate serial: 019A71B7A278EB842161BC0A62FC5C1C90FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
Manifest number: 0568
Signing time: Tue 11 Nov 2025 07:00:51 +0000
Manifest this update: Tue 11 Nov 2025 07:00:51 +0000
Manifest next update: Wed 12 Nov 2025 07:00:51 +0000
Files and hashes: 1: IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl (hash: nwhSmFkOLO9iDYi1+8gtZBT1nYA5ufP4MUBQMVHdRlE=)
2: _zFGaif6ktuPRSZOOpcbI9GW7qg.roa (hash: 9+34ErT+7YS3/gqguf6KZOausCEOcTWh/OEHzcUf2rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a2:78:eb:84:21:61:bc:0a:62:fc:5c:1c:90:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
Validity
Not Before: Nov 11 07:00:51 2025 GMT
Not After : Nov 12 07:00:51 2025 GMT
Subject: CN=fbf1976347aea709d7850314ccd970552cfd538a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f7:d9:14:05:c9:42:f8:b3:e4:33:24:09:09:
50:c4:26:18:a2:43:3e:68:76:72:f2:72:12:36:21:
d6:8b:b1:d1:5f:a0:9b:0a:2d:0b:34:31:6f:67:d5:
00:50:5a:b2:d5:59:06:56:02:35:f2:e5:ac:ea:22:
c7:a3:00:d9:cd:f1:b2:f4:fa:ef:cb:70:b4:e0:6b:
e2:d8:96:38:d6:c1:2d:d5:63:1a:d3:b7:e6:dd:dd:
1a:dc:29:04:af:96:61:bb:71:c1:f6:48:3f:cc:50:
32:8b:ab:72:b4:d8:0a:03:52:36:c8:b0:2a:66:67:
0c:04:c3:75:1a:bd:3d:3b:37:7b:75:26:2a:cf:a6:
66:dc:ce:25:af:a8:1e:01:9e:71:53:24:89:7f:5f:
c0:ef:cf:6b:63:cd:81:c1:7c:8f:6b:0e:40:da:e3:
fc:b3:64:73:0f:83:89:e8:05:52:b9:3d:f5:7e:76:
fa:92:af:dc:a7:55:8e:0f:67:02:12:c2:ac:9d:ad:
e6:d2:b6:ff:81:be:84:da:cf:8f:39:b4:1e:35:f8:
a5:ba:00:99:18:2f:f5:27:d3:4e:04:14:c5:2d:cd:
62:ab:c5:52:5c:78:50:65:46:08:33:7f:3e:3f:e9:
96:86:ed:f8:a3:01:9b:dd:08:3f:72:ef:79:60:f7:
c9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F1:97:63:47:AE:A7:09:D7:85:03:14:CC:D9:70:55:2C:FD:53:8A
X509v3 Authority Key Identifier:
keyid:21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8a:e5:bb:37:d5:b7:25:c2:cf:d1:cd:5d:76:a7:a6:68:b7:
24:81:0f:77:13:b5:d5:66:82:76:84:b3:2d:69:bb:81:e6:26:
35:13:b7:ea:c3:f1:29:3a:e4:f5:34:21:b1:24:b9:d2:df:3b:
12:0e:66:7f:83:0c:e3:ea:d0:7a:00:71:91:a3:8c:75:49:17:
58:61:56:84:b1:0a:3a:4c:42:5e:88:51:cc:bc:4e:5d:3b:83:
c6:f0:94:db:45:38:06:62:c6:a3:e9:a0:85:cc:ed:1a:cf:d7:
9c:cf:a3:f8:bc:f6:a4:0f:4c:ad:6e:ad:ac:74:bb:2c:fe:3f:
3b:04:88:c4:32:4b:ed:d6:4a:6a:2b:cd:4d:65:6a:54:41:b1:
29:69:ad:85:a2:29:6d:14:a5:61:92:c6:97:a3:09:e9:6f:ba:
ac:fd:e2:d9:3e:f3:82:31:3b:d3:b8:ad:8d:10:fb:77:db:c6:
d6:03:f5:fc:ce:49:0d:3e:a2:a5:b8:58:8f:37:0d:c9:6e:76:
d7:08:6d:10:97:6b:66:a2:43:99:81:b7:d3:d3:fe:81:38:9f:
ca:b0:4c:3e:30:5d:20:c6:c4:16:6a:37:17:b5:fe:f7:a5:48:
2f:1d:f8:ed:76:dd:c6:19:2b:81:10:f9:58:74:03:de:ce:f2:
df:68:91:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:02 2025 by rpki-client