Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
File: iKslD4208gR6QBWFwmTzjA4ih_4.mft (raw, json)
Hash identifier: AHpAC/6DUZFF84N/oybhVBIliQQVlTDMVOhLHHVHwWw=
Subject key identifier: FD:17:BF:36:E7:BF:8E:73:21:F6:AB:1D:0B:44:00:8A:EA:32:E5:42
Authority key identifier: 88:AB:25:0F:8D:B4:F2:04:7A:40:15:85:C2:64:F3:8C:0E:22:87:FE
Certificate issuer: /CN=88ab250f8db4f2047a401585c264f38c0e2287fe
Certificate serial: 019A7293AD7741223A877817B9EF764ADA79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
Manifest number: 154C
Signing time: Tue 11 Nov 2025 11:01:12 +0000
Manifest this update: Tue 11 Nov 2025 11:01:12 +0000
Manifest next update: Wed 12 Nov 2025 11:01:12 +0000
Files and hashes: 1: iKslD4208gR6QBWFwmTzjA4ih_4.crl (hash: xJqGd9Drpgx0Km+cI9/oioCNJnPPyvMIk2xHqOEoUdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:ad:77:41:22:3a:87:78:17:b9:ef:76:4a:da:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ab250f8db4f2047a401585c264f38c0e2287fe
Validity
Not Before: Nov 11 11:01:12 2025 GMT
Not After : Nov 12 11:01:12 2025 GMT
Subject: CN=fd17bf36e7bf8e7321f6ab1d0b44008aea32e542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:eb:2f:ac:d4:b8:4d:af:0a:6e:a9:96:04:24:
0d:be:af:dc:42:10:a8:49:9a:d6:c0:d9:29:5a:d7:
c6:a2:03:37:57:02:79:5c:d5:46:de:63:29:a9:54:
5d:69:1d:b9:c4:2f:37:45:0a:98:ca:1a:32:88:d7:
0f:e6:5a:5b:14:85:94:9b:33:4b:11:57:51:d9:eb:
db:98:6c:d1:0d:0b:be:bc:ea:ea:e5:09:0b:f6:10:
75:72:fa:00:af:70:a1:3d:a7:d7:d3:35:e6:89:ed:
b6:c3:9a:46:71:54:99:e8:fb:5f:8b:d8:73:12:cc:
b3:1f:e4:0a:1b:50:94:90:aa:2b:cb:f4:b5:55:dd:
d9:7d:9c:08:b2:cb:dc:91:4c:77:5f:e0:d0:72:15:
0d:a3:37:ae:96:c9:a3:85:50:1a:21:cc:2b:f0:e4:
8d:73:de:ce:0b:97:78:e8:40:04:a8:74:92:83:88:
0e:d3:6c:e3:ed:4e:08:cd:b3:01:1b:41:31:b5:07:
96:2c:1a:40:2d:a8:5c:2d:43:1e:c3:76:35:a8:96:
40:ba:98:22:70:77:03:90:b2:af:13:f2:9a:de:87:
4e:83:73:55:1e:36:fb:ff:33:73:0d:6a:35:e2:07:
ed:84:34:0a:d7:43:21:f0:e9:13:db:06:81:80:4a:
e2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:17:BF:36:E7:BF:8E:73:21:F6:AB:1D:0B:44:00:8A:EA:32:E5:42
X509v3 Authority Key Identifier:
keyid:88:AB:25:0F:8D:B4:F2:04:7A:40:15:85:C2:64:F3:8C:0E:22:87:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b7:19:47:d2:0f:24:65:9e:c7:91:fb:74:81:a8:52:e4:37:
92:2b:d7:18:a6:3c:ef:b1:e5:cd:cc:61:ac:dc:08:41:41:3d:
33:8e:23:15:63:9c:4d:64:67:bc:e1:40:80:55:aa:25:11:e5:
81:b4:ba:75:77:b5:f2:05:ef:22:d7:06:60:7a:4f:f9:42:48:
15:d3:41:64:13:d9:e9:33:a6:f4:c2:67:6f:29:ca:d9:a0:5c:
49:3a:34:d1:c1:9a:b7:0a:c8:dc:7a:41:61:48:00:08:02:0c:
46:b0:a3:9a:0e:05:af:b5:b5:ba:62:42:57:65:b7:0d:a0:6a:
dd:9f:47:ae:d6:fc:c5:7b:d2:de:9f:e0:48:22:a5:49:f4:da:
fd:35:6e:03:35:1c:94:ab:78:35:53:7b:6e:0d:1d:79:83:ff:
16:89:63:54:07:12:86:ad:ff:d6:f3:39:0d:a3:4f:6a:e8:48:
cc:9f:8e:67:58:c8:c5:10:03:1e:25:ea:ac:d3:f2:c3:53:12:
65:26:5e:03:b6:44:eb:83:17:68:b4:af:78:84:d7:20:38:5f:
ca:9e:be:27:68:80:e8:e2:39:fb:fc:99:ec:22:ee:e7:4d:52:
8e:00:71:9c:9c:03:3d:dc:1e:f0:3a:be:34:30:e0:a7:b3:24:
13:83:ac:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:10:25 2025 by rpki-client