Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
File: CI4DIScTMq_HfkyFefDlVZzAnFA.mft (raw, json)
Hash identifier: 16GfJsZV8HWWB5CjXg8nQqMkvxqvYoMgB6lfqyQCbeE=
Subject key identifier: 85:F6:43:BF:52:76:E5:A9:A8:BB:A4:A6:93:D3:B2:78:D8:1B:2D:DF
Authority key identifier: 08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
Certificate issuer: /CN=088e0321271332afc77e4c8579f0e5559cc09c50
Certificate serial: 019A714A0F9446A39D2BD586D3823B962E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
Manifest number: 13E6
Signing time: Tue 11 Nov 2025 05:01:10 +0000
Manifest this update: Tue 11 Nov 2025 05:01:10 +0000
Manifest next update: Wed 12 Nov 2025 05:01:10 +0000
Files and hashes: 1: CI4DIScTMq_HfkyFefDlVZzAnFA.crl (hash: tYtGW3eKux8IIsjZNi8n29OecjyEcNZ8NcLNcgzrG/0=)
2: ICR_37PsCBP-8LWQQc9BQZWkbu8.roa (hash: qbGaCfhiVfxLumC4av9v0LJhrwsxTdIAQc0ayhncJww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:0f:94:46:a3:9d:2b:d5:86:d3:82:3b:96:2e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088e0321271332afc77e4c8579f0e5559cc09c50
Validity
Not Before: Nov 11 05:01:10 2025 GMT
Not After : Nov 12 05:01:10 2025 GMT
Subject: CN=85f643bf5276e5a9a8bba4a693d3b278d81b2ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ad:0b:c8:f8:d8:cb:fd:b6:05:84:4e:0a:6d:
23:67:70:5c:cf:df:74:9b:8d:fd:02:b0:8f:79:1a:
1f:b3:ab:b3:95:14:04:d2:5b:d1:9e:1b:d4:61:f6:
b3:bb:f5:05:f3:39:cd:53:eb:05:e9:a1:4c:30:ff:
c0:1a:fe:16:56:42:4e:c1:10:13:72:bd:d4:21:14:
87:45:9d:dc:14:9e:75:fd:9f:f1:76:e4:08:3a:cf:
70:9a:52:bb:af:c3:e9:cc:80:a5:2d:e6:56:a0:b8:
58:98:10:bf:c3:cd:7c:df:41:66:ce:69:cc:7f:08:
ba:42:3e:4a:53:75:e2:86:46:96:09:3e:d0:54:36:
fd:48:2e:38:5c:69:2a:4c:ec:5c:37:7d:4e:02:41:
a2:b7:93:f9:58:32:fa:42:c3:9d:57:c0:e9:78:47:
04:a9:a6:dc:23:49:df:f8:cb:96:1b:3b:35:9c:f3:
57:63:de:cb:01:b7:44:18:7b:6c:80:c1:7d:bd:c8:
2d:e7:51:7c:a0:74:99:b0:52:e8:27:4f:07:4b:11:
dc:61:e5:55:c7:16:af:fc:00:03:1d:65:c2:7e:5a:
d8:43:e5:c0:bb:76:61:c1:0a:cd:36:21:a6:a4:02:
ca:b8:2b:12:52:49:dd:1a:a9:dc:95:1c:de:5d:0b:
79:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F6:43:BF:52:76:E5:A9:A8:BB:A4:A6:93:D3:B2:78:D8:1B:2D:DF
X509v3 Authority Key Identifier:
keyid:08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:81:b1:84:7e:77:9d:1b:45:07:5b:5c:a0:c0:28:fb:95:df:
03:e2:7f:71:27:0e:85:ec:94:4d:a2:a6:93:d2:e1:ae:76:0d:
4f:5d:8c:de:22:f4:bb:e0:0b:f5:e1:0c:52:3d:39:6b:50:ec:
16:68:bb:70:e7:fc:74:7a:c7:02:23:81:47:4d:73:2b:b4:02:
bc:d9:04:a2:30:36:39:36:1e:ec:2a:ce:ed:e2:a5:72:23:9f:
cf:1d:6b:f8:85:4a:65:b7:a1:63:c8:6f:33:fa:58:1d:bf:a3:
9e:0e:fe:bd:20:63:49:cc:0b:c5:93:47:a3:5e:da:b1:e9:16:
81:18:12:54:0b:4a:d2:cd:26:5d:72:57:0a:ca:fc:b0:c5:8f:
2d:fb:73:1b:55:88:cb:15:78:a4:de:3a:3d:30:30:e6:82:ff:
45:93:1b:4e:fb:a8:0a:45:0f:d0:98:d9:12:a0:a3:ae:fa:9f:
77:63:ee:5a:cf:f4:f1:f9:4b:38:c4:80:81:7c:c2:bb:f2:08:
be:a7:ac:ef:42:ad:d5:79:bd:89:70:4f:6c:8b:4d:1c:ed:48:
08:1d:96:5f:07:6e:92:6e:32:ed:ea:fb:fb:1a:72:99:00:49:
9d:e3:8d:38:32:12:01:62:db:99:a6:7e:57:8c:8d:b7:09:74:
0c:18:32:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:36 2025 by rpki-client