Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
File: Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft (raw, json)
Hash identifier: dMadOiG6tdLZyUIllTs1QmEIAICGcgtNmXTd/lIH9Ho=
Subject key identifier: C8:46:1A:F3:93:46:63:A9:83:2B:1E:0F:12:8E:CD:F9:5F:B0:FD:0B
Authority key identifier: 23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E
Certificate issuer: /CN=233adc97f9826262007f46286591830df58fc55e
Certificate serial: 019A7225E351CF0C49696276F2EB07E061FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
Manifest number: 0B4A
Signing time: Tue 11 Nov 2025 09:01:16 +0000
Manifest this update: Tue 11 Nov 2025 09:01:16 +0000
Manifest next update: Wed 12 Nov 2025 09:01:16 +0000
Files and hashes: 1: Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl (hash: dhjVwRpzYngmfDKzZvP028sjYUaE5x4+leEYorH1LZs=)
2: R7UR19A8DA5u7WHUKAJI549nkdo.roa (hash: 4PQK0W7UKUZhH5u+a1D7FV7JRsd1931HwX1XToed8Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e3:51:cf:0c:49:69:62:76:f2:eb:07:e0:61:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233adc97f9826262007f46286591830df58fc55e
Validity
Not Before: Nov 11 09:01:16 2025 GMT
Not After : Nov 12 09:01:16 2025 GMT
Subject: CN=c8461af3934663a9832b1e0f128ecdf95fb0fd0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:03:3f:84:43:ce:b7:42:95:42:71:6d:5f:d8:
0b:4b:5f:6e:72:3d:c0:8b:9c:03:7a:6f:83:83:cf:
d2:ab:d1:15:d6:b0:54:81:db:bd:ec:cb:da:87:25:
ac:13:2f:78:08:9a:38:5f:66:f9:d2:d9:a8:80:40:
06:c3:5c:06:34:d2:14:e1:87:c9:57:55:9a:d4:9d:
b3:36:5b:03:f0:bf:4f:bc:79:91:bc:c4:ef:a8:cc:
94:9f:c1:a2:3b:f5:ad:ad:c0:82:6b:93:7b:97:bd:
a4:21:2c:8e:33:24:24:94:cd:e9:1b:7c:39:bd:c1:
3f:51:97:be:08:e4:b2:55:80:a6:45:dc:b4:8d:2c:
13:1d:90:7b:43:28:eb:0b:19:05:30:5d:5e:3b:14:
96:f0:b4:b0:a5:81:a6:32:43:6a:f7:26:73:ff:d8:
b4:47:2b:af:7d:25:f6:04:81:cb:ce:05:7a:56:5d:
0b:df:82:b6:be:90:ab:3f:d5:1e:69:2f:ce:ce:e2:
5e:c3:7e:92:39:c5:dd:1f:a8:09:8f:b0:ba:aa:87:
a8:39:57:9e:ab:2f:07:01:9e:91:7d:8e:fb:d5:cd:
5c:1d:7a:54:89:98:87:39:00:f8:6a:45:5e:38:8b:
81:7e:7e:af:9a:89:c0:e0:84:1f:3d:09:ad:88:20:
68:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:46:1A:F3:93:46:63:A9:83:2B:1E:0F:12:8E:CD:F9:5F:B0:FD:0B
X509v3 Authority Key Identifier:
keyid:23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:2e:63:cf:5a:21:bb:24:63:92:5b:29:28:c6:10:b8:0a:c5:
95:d3:b9:1f:95:4c:49:83:40:e4:94:99:cc:db:61:f5:12:8a:
b4:b0:42:c3:62:94:a2:fc:c4:5a:7a:a5:9c:f1:15:d6:fe:59:
f9:b9:15:ff:17:d3:8f:3e:d8:e2:e4:9e:0f:0c:4e:3d:6b:95:
c8:39:2a:01:d5:e2:6b:32:30:66:53:78:c9:6f:bb:3c:10:e8:
82:3e:62:a6:82:58:76:e6:6d:86:db:fa:49:b1:1e:c2:60:58:
c1:cb:93:e0:b7:b9:8a:08:9d:77:fd:70:de:8f:1b:1e:ff:22:
0e:56:8f:a7:29:7c:5e:30:af:ae:c2:a5:46:5c:9b:31:df:75:
0f:7f:ed:d7:fc:6f:e6:c1:b8:3c:62:b4:3c:f8:af:d6:a3:cb:
cf:49:e5:ab:19:0f:f8:3b:62:37:09:0e:95:d8:67:f2:59:35:
e5:97:78:e3:8f:25:84:ed:0a:d4:43:91:ce:02:95:56:a3:52:
e4:16:86:93:28:df:7f:aa:60:65:1a:74:9d:4b:9f:4a:2e:34:
b9:d3:32:4b:8e:44:18:69:40:b3:aa:09:00:42:bb:cc:13:24:
94:31:bd:44:e3:47:ea:82:16:f1:8c:3a:cb:7e:7f:76:fe:5e:
72:46:20:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:19 2025 by rpki-client