Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
File: Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft (raw, json)
Hash identifier: HXzdcbd6SB3xZWC9qUBLUrcbTHorqmevlnmI+Ms3WnU=
Subject key identifier: A1:2F:07:B5:02:6C:FF:67:E1:7A:1D:BB:06:0E:0F:3B:C2:F0:D7:2A
Authority key identifier: 21:AC:38:FE:81:05:FB:59:A2:CD:25:7F:51:9F:85:85:95:84:03:01
Certificate issuer: /CN=21ac38fe8105fb59a2cd257f519f858595840301
Certificate serial: 019A7225A6643661725EFB7C6E5A8E0858F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
Manifest number: 06BB
Signing time: Tue 11 Nov 2025 09:01:01 +0000
Manifest this update: Tue 11 Nov 2025 09:01:01 +0000
Manifest next update: Wed 12 Nov 2025 09:01:01 +0000
Files and hashes: 1: Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl (hash: 29m6DJNfmV0MmWkPD/nCFVTZYBuX6KAXKH2lLg2c2Ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a6:64:36:61:72:5e:fb:7c:6e:5a:8e:08:58:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21ac38fe8105fb59a2cd257f519f858595840301
Validity
Not Before: Nov 11 09:01:01 2025 GMT
Not After : Nov 12 09:01:01 2025 GMT
Subject: CN=a12f07b5026cff67e17a1dbb060e0f3bc2f0d72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c8:0e:07:77:62:3a:5d:35:6f:2c:26:44:47:
19:ba:f3:df:52:05:0e:73:d8:eb:a1:57:77:d8:5b:
53:93:59:dc:28:2f:19:82:ae:bb:38:00:af:0f:51:
6f:41:c8:59:ba:ef:9a:55:7e:64:f1:48:7a:a2:af:
70:89:a8:49:dd:47:98:39:b7:bd:e5:29:36:fb:cf:
6a:62:ae:ae:b0:77:33:0a:55:2d:22:45:a2:55:7b:
99:bf:d9:cb:ef:ac:db:50:5d:49:75:46:78:70:2c:
85:06:a7:76:f7:5f:ca:1e:ab:cb:c0:60:0f:f9:3b:
12:05:22:b5:64:26:54:f0:1f:b6:6b:65:67:ba:ba:
27:4e:70:b1:f1:b7:d4:80:c8:cc:4f:d1:ec:6a:47:
7b:6d:31:20:0e:6d:c4:1a:d2:33:87:f9:01:d0:0d:
49:41:09:cb:2d:29:1a:d2:3b:cb:f7:16:3f:28:a1:
75:95:1d:ca:27:b2:60:6c:3a:e3:50:d9:ab:01:d0:
e8:d7:97:3b:fd:d1:2a:87:d9:45:cb:fc:7c:2b:b8:
08:b2:95:26:53:38:2f:1b:cd:3f:2d:1c:8a:07:bc:
93:71:5f:51:2f:af:c5:ca:74:a3:8d:7b:9c:8f:33:
44:f8:c4:bf:49:ce:d0:ce:3c:75:b7:67:19:68:fd:
cd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2F:07:B5:02:6C:FF:67:E1:7A:1D:BB:06:0E:0F:3B:C2:F0:D7:2A
X509v3 Authority Key Identifier:
keyid:21:AC:38:FE:81:05:FB:59:A2:CD:25:7F:51:9F:85:85:95:84:03:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f5:b5:38:89:32:15:98:7a:b0:65:a5:1f:87:6a:5b:c6:76:
1b:a5:63:05:80:f9:ca:af:01:dd:9c:25:af:06:e5:ce:93:b3:
2e:d0:1f:63:5e:07:a0:50:4b:71:75:bb:69:0f:c3:3e:f1:8e:
c0:df:22:0b:7a:00:ef:8c:b9:b1:44:22:01:fb:fb:c0:61:9e:
dc:db:56:46:e9:2a:2e:fa:6a:de:3e:50:d3:9c:52:c3:79:e0:
79:56:c4:84:69:04:a1:4d:cf:6d:17:f2:30:19:28:6c:1d:37:
97:d5:2c:4e:e3:19:91:1d:af:85:6a:45:70:6e:20:00:25:13:
ca:11:16:b8:b4:0f:43:cd:f6:71:57:18:7b:97:d8:e2:3a:ce:
b7:ff:e1:5b:0b:c2:bc:e4:a6:80:dd:f0:dc:07:1c:c5:35:28:
10:e9:e3:e8:5c:6d:01:90:34:2f:53:17:3d:f1:5d:ab:81:51:
9f:f5:d7:be:63:4a:71:4d:fe:f5:ab:df:33:f3:51:83:cb:3e:
d5:0e:4a:cd:71:15:1d:3b:08:84:19:39:60:41:5c:ff:4e:63:
47:f8:fa:79:3a:6d:71:ed:98:ff:d1:a5:f9:16:df:ef:a4:ec:
69:e8:66:6f:d5:09:55:5b:d4:f5:d6:4f:97:8a:a9:4c:ad:12:
eb:7c:32:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:48 2025 by rpki-client