Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
File: iXA6mCNRKxjRduNi6gI8qCR4TSI.mft (raw, json)
Hash identifier: EMHHmcqMoGHrelq3PPCEbDhPinuhfqU2f8zU+Ls+dYg=
Subject key identifier: 7D:27:27:88:D3:71:B7:5D:71:04:C1:58:B8:C4:A3:A2:09:D1:FF:8C
Authority key identifier: 89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
Certificate issuer: /CN=89703a9823512b18d176e362ea023ca824784d22
Certificate serial: 019A725CB81FCB4FD702CD9D9EA3B5CDA44C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 10:01:10 +0000
Manifest this update: Tue 11 Nov 2025 10:01:10 +0000
Manifest next update: Wed 12 Nov 2025 10:01:10 +0000
Files and hashes: 1: iXA6mCNRKxjRduNi6gI8qCR4TSI.crl (hash: eEjHslbUoP5gWTwVTNr+ZvwbVKt/KleEIP9cfYKJp1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:b8:1f:cb:4f:d7:02:cd:9d:9e:a3:b5:cd:a4:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89703a9823512b18d176e362ea023ca824784d22
Validity
Not Before: Nov 11 10:01:10 2025 GMT
Not After : Nov 12 10:01:10 2025 GMT
Subject: CN=7d272788d371b75d7104c158b8c4a3a209d1ff8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:45:1f:06:6d:33:1f:a4:1d:61:9d:3b:9e:26:
38:7a:ce:fd:b4:43:b7:2c:f2:68:dc:93:e2:a2:0d:
36:c7:2b:58:e3:f5:b9:66:8e:80:d8:e4:a9:00:75:
83:e5:8a:5f:d8:72:80:77:b1:d4:cb:4b:0e:60:6e:
38:47:a6:01:eb:1e:2f:28:d5:55:a9:b9:d3:2a:94:
0c:83:e4:bc:47:12:c8:45:ca:d7:92:f3:02:ee:42:
22:69:bc:e7:dc:10:74:28:61:d8:19:c4:e4:a8:d8:
b3:66:8a:03:d9:14:ce:89:e0:3f:db:13:8c:1f:60:
9d:bb:9e:5e:0a:39:d8:f0:3d:6f:88:99:a5:06:87:
40:3d:e9:b6:34:19:a2:8c:b6:d6:38:ee:22:57:4c:
31:cd:2e:6d:49:1e:2a:21:2e:e6:3a:cc:ee:06:91:
f5:7f:01:bd:4d:07:fe:80:0c:0c:8e:4c:9e:28:1c:
47:96:49:dd:b9:bf:3d:19:f9:63:89:a3:59:24:76:
03:fc:2d:78:33:e9:e1:3e:d8:be:24:76:39:f8:34:
ca:73:1f:1e:ef:99:b3:26:78:60:be:bc:76:06:0b:
ae:d1:c2:04:92:33:0d:c3:9d:ff:37:1e:c5:22:18:
85:28:99:df:54:ae:64:3d:d0:0f:20:8a:f5:d8:ea:
2b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:27:27:88:D3:71:B7:5D:71:04:C1:58:B8:C4:A3:A2:09:D1:FF:8C
X509v3 Authority Key Identifier:
keyid:89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c3:31:f4:eb:ca:9d:43:84:0d:95:6c:51:d6:65:e4:2f:f2:
af:da:63:9f:0f:8f:b9:2c:e5:26:3e:14:8b:f3:55:57:62:eb:
08:70:b7:21:ae:95:8f:76:82:3c:cb:45:64:29:ad:26:9e:dc:
22:3e:0d:a1:b8:19:1d:13:e6:2b:0f:a1:5e:e6:b9:cb:63:e7:
55:95:87:85:81:ad:f8:25:39:28:f9:ee:f9:d7:14:ba:70:5a:
f9:92:b4:2d:9d:74:8c:a9:9c:a6:4b:8e:3a:de:ec:65:6c:d9:
7f:d4:a6:be:69:b0:d2:7f:25:55:52:b7:bd:ef:99:a0:76:67:
99:2d:ce:d1:c1:b9:7f:9a:cf:2f:1a:f0:52:41:3a:53:fa:26:
fe:cb:33:50:f1:81:99:48:d7:1e:1e:f6:64:f0:d6:f8:98:01:
9c:1d:a4:5c:f4:e5:49:c5:45:bf:e5:7e:7e:01:74:a6:0c:90:
ad:54:a4:f8:e7:88:b3:88:f5:65:8b:94:27:d0:dc:77:c3:cd:
80:fe:0b:e9:ec:3a:86:b8:ec:f5:03:ce:cf:d5:f8:3d:11:89:
19:3a:4f:97:86:f8:53:52:2a:78:54:48:fe:dc:48:57:a2:92:
ce:e4:d4:ad:c3:3d:14:95:06:31:46:f0:b6:f8:12:72:da:8c:
fc:ff:8f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:10 2025 by rpki-client