Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
File: I8cVVBujctWQ1odn14zmmEABMFk.mft (raw, json)
Hash identifier: tVGBzb11oSQhrFy1cVen/OMULy643na7qmuOSMjMgwg=
Subject key identifier: 76:81:47:A0:85:42:EA:4F:4B:89:90:2A:77:7C:97:96:83:74:BD:5D
Authority key identifier: 23:C7:15:54:1B:A3:72:D5:90:D6:87:67:D7:8C:E6:98:40:01:30:59
Certificate issuer: /CN=23c715541ba372d590d68767d78ce69840013059
Certificate serial: 019A71B771F56540C30B1027040A614E2C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:00:38 +0000
Manifest this update: Tue 11 Nov 2025 07:00:38 +0000
Manifest next update: Wed 12 Nov 2025 07:00:38 +0000
Files and hashes: 1: I8cVVBujctWQ1odn14zmmEABMFk.crl (hash: hstsn6RWJEDhHKrF7IHke1O+s0Ssj1/QfSfYvk3aibo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:71:f5:65:40:c3:0b:10:27:04:0a:61:4e:2c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23c715541ba372d590d68767d78ce69840013059
Validity
Not Before: Nov 11 07:00:38 2025 GMT
Not After : Nov 12 07:00:38 2025 GMT
Subject: CN=768147a08542ea4f4b89902a777c97968374bd5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:25:48:ce:9c:81:1c:cf:a3:6a:65:81:a5:f5:
b1:27:bd:08:1a:25:4b:d0:db:19:10:fa:8d:65:3c:
15:c1:0d:74:fc:29:56:0d:b7:1a:94:27:a6:2a:62:
14:40:9f:a1:ea:9c:57:cf:0e:2d:68:e6:4e:90:88:
a7:a8:1f:ad:82:2b:0d:fd:db:05:f7:2a:88:da:cd:
c9:2b:a0:9d:3e:1e:28:82:de:63:df:fb:70:25:f5:
2b:5d:c1:ea:05:b3:4e:5e:a0:68:bc:96:59:26:8c:
71:bc:77:64:3b:c6:ba:ea:03:5d:27:54:df:e6:84:
08:39:2c:da:05:96:02:da:aa:ad:ab:2d:48:c3:e5:
c7:0f:a1:64:44:46:71:3e:cc:ed:aa:45:70:c5:3a:
37:6d:4e:56:ed:8f:e2:c7:fc:cc:c6:e2:91:1e:63:
6b:8c:85:f0:b3:75:de:3d:9b:c2:6c:5d:78:20:c5:
7a:3e:0a:a5:9b:71:10:e9:fa:a8:9c:a8:3d:e4:67:
89:d8:e2:07:70:f0:82:e5:d1:48:9f:f1:58:01:67:
88:da:05:58:7b:73:1d:36:ee:f5:13:d9:7f:e5:a7:
fd:32:5e:0b:a1:e9:7e:a0:80:b9:be:84:79:3e:87:
f2:8b:6c:71:91:69:11:17:1c:18:56:ac:44:c7:70:
72:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:81:47:A0:85:42:EA:4F:4B:89:90:2A:77:7C:97:96:83:74:BD:5D
X509v3 Authority Key Identifier:
keyid:23:C7:15:54:1B:A3:72:D5:90:D6:87:67:D7:8C:E6:98:40:01:30:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e0:38:21:c6:0d:ef:7e:03:29:bb:6e:61:49:3d:c5:65:aa:
bc:a1:1a:05:b0:05:ab:63:95:d3:81:65:f0:5f:17:91:6e:bd:
54:90:c1:0c:df:52:82:d8:ab:bb:36:33:ed:d0:fa:d9:12:fd:
cc:f7:28:28:c2:7d:57:dd:58:d2:85:af:a0:65:d6:89:47:c4:
13:d6:c4:ab:ad:6e:de:77:d1:32:2f:68:e2:94:f2:fb:6e:47:
c2:7c:90:7d:dc:4c:f4:b5:2c:5e:12:c3:6e:ad:33:00:d4:2d:
e0:24:b7:41:7a:22:88:bf:3c:d4:84:c1:af:1a:4e:db:83:8c:
c4:f9:9b:f3:6c:7d:ae:51:54:66:da:f1:24:e7:41:5f:5d:33:
78:82:98:db:6f:60:4b:8d:a2:1f:f8:76:8a:bc:29:0a:60:3a:
70:fd:9f:d8:8e:ed:66:bb:22:f0:d2:6c:9b:03:f2:05:f8:86:
46:14:cf:59:a3:00:ce:99:f2:33:5d:54:8a:da:32:8a:c6:11:
37:02:c9:07:45:f5:55:67:58:4e:06:84:b2:9e:a5:0d:95:11:
dd:07:0a:48:66:9c:c6:05:da:da:a2:55:22:cc:48:7f:9a:2b:
e5:11:97:8c:67:8b:94:d6:dd:19:aa:38:b9:94:da:17:61:c7:
54:57:f9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:00 2025 by rpki-client