Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.mft
File: IxNmmEaTAQHlodA48EtTTaCLonY.mft (raw, json)
Hash identifier: iYt1GOtKisXv6MMVEqq8AO6tvJnIfRM0b/zjMsKA03A=
Subject key identifier: 42:E4:BB:11:30:65:7C:AF:7B:E0:97:D8:5C:74:4F:82:F9:25:6F:CC
Authority key identifier: 23:13:66:98:46:93:01:01:E5:A1:D0:38:F0:4B:53:4D:A0:8B:A2:76
Certificate issuer: /CN=2313669846930101e5a1d038f04b534da08ba276
Certificate serial: 019A71130210193DC4D37433BE5550FC7C7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxNmmEaTAQHlodA48EtTTaCLonY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.mft
Manifest number: EE
Signing time: Tue 11 Nov 2025 04:01:02 +0000
Manifest this update: Tue 11 Nov 2025 04:01:02 +0000
Manifest next update: Wed 12 Nov 2025 04:01:02 +0000
Files and hashes: 1: IxNmmEaTAQHlodA48EtTTaCLonY.crl (hash: Q08807H4UYlJmKH8zRoTkDkpwuEeb/bALx3/hPcTFD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxNmmEaTAQHlodA48EtTTaCLonY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:02:10:19:3d:c4:d3:74:33:be:55:50:fc:7c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2313669846930101e5a1d038f04b534da08ba276
Validity
Not Before: Nov 11 04:01:02 2025 GMT
Not After : Nov 12 04:01:02 2025 GMT
Subject: CN=42e4bb1130657caf7be097d85c744f82f9256fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:75:25:68:5c:b9:80:a7:58:1d:94:c8:74:5b:
b7:b6:1f:11:e9:23:e4:dc:b6:df:39:63:5c:82:88:
80:5f:37:38:cc:13:1a:cb:fc:ea:59:be:3a:0e:2d:
26:6f:a3:ee:d4:f9:71:ad:36:a0:77:79:30:d6:64:
18:37:82:8c:4d:7b:69:57:32:6c:15:e1:8c:3e:66:
ca:9b:ae:58:7a:4f:da:67:ef:26:8a:b4:c3:3a:6d:
c0:27:7f:c1:5f:9a:b1:5c:84:75:92:17:a9:b8:34:
a6:3c:b5:8b:ce:a4:da:5d:9d:de:9e:2e:69:5d:90:
d3:f1:35:80:ab:e3:28:53:8c:e5:c2:72:27:95:ea:
f1:0b:1e:d4:66:bd:d6:1a:03:8d:e5:32:bf:0c:9a:
2c:1b:f0:c7:9d:93:b9:ce:ec:51:70:d5:49:9b:41:
3f:2e:8d:98:ea:5d:0a:47:53:cb:91:9a:b6:f8:0a:
00:ab:a5:84:28:16:cd:ac:0c:2f:e2:1e:1d:50:75:
a3:30:dc:98:5d:17:92:78:b1:38:37:29:ac:e1:84:
df:37:b8:09:2d:82:2d:20:e4:e0:34:8f:71:d5:ab:
bd:89:c3:e5:7d:be:d9:be:ef:4c:ff:0d:ed:72:de:
53:8f:aa:3e:73:86:e9:1a:d4:68:63:66:c0:2b:e1:
dc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E4:BB:11:30:65:7C:AF:7B:E0:97:D8:5C:74:4F:82:F9:25:6F:CC
X509v3 Authority Key Identifier:
keyid:23:13:66:98:46:93:01:01:E5:A1:D0:38:F0:4B:53:4D:A0:8B:A2:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxNmmEaTAQHlodA48EtTTaCLonY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:39:02:42:75:00:83:f2:7b:5a:c1:0b:31:47:23:f8:0b:b2:
1d:90:03:13:98:be:fc:a5:d4:d8:ea:ed:88:ae:69:31:99:53:
f2:6c:f5:0b:d7:0f:73:b7:6f:cb:5c:f9:2d:f6:3b:6c:80:4e:
86:f6:da:76:72:30:47:d5:2c:67:e3:75:30:a2:5f:0c:d4:96:
1b:c8:de:c4:69:ac:da:fd:52:92:3e:4f:d6:a3:04:ef:40:82:
2b:3d:05:23:64:5f:17:a5:5f:e4:83:60:db:26:db:43:56:25:
22:91:33:44:21:3c:21:d2:66:3b:68:a4:ca:a5:fc:b3:b3:f9:
92:70:9b:aa:39:1f:a9:92:f7:3b:33:ee:67:0d:73:8e:53:18:
91:79:af:5f:29:ab:b3:42:2d:bf:49:20:19:f6:98:00:26:62:
eb:76:65:85:d8:6d:ee:cb:8a:31:59:12:0c:b7:a6:b5:20:f4:
8d:c7:67:b2:3f:4a:82:99:29:fa:5a:79:22:b6:aa:9c:d4:78:
45:ec:8f:1a:df:27:40:eb:3a:99:44:94:f7:cf:6b:4f:2d:0d:
34:a6:76:9c:bd:0d:1d:f8:10:13:81:34:ad:59:4d:a3:25:59:
48:27:e8:80:32:fb:d0:bf:cd:f3:6a:98:a6:26:b1:7b:41:25:
35:b9:00:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:43 2025 by rpki-client