Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
File: Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft (raw, json)
Hash identifier: ftbDnpAH6XqA5ou0TBPxYEyB7vZh4D5Eh2To/BwDAK0=
Subject key identifier: 16:CE:38:F6:32:8B:89:2B:25:24:66:8D:F9:06:A1:B6:47:AA:9D:AA
Authority key identifier: 21:CE:31:1C:8E:D6:0B:EF:1B:5E:4F:7D:3B:86:41:07:81:44:18:A3
Certificate issuer: /CN=21ce311c8ed60bef1b5e4f7d3b864107814418a3
Certificate serial: 019A711312FAF0B45E323E4A7BECBDA8BDCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
Manifest number: 0ABF
Signing time: Tue 11 Nov 2025 04:01:06 +0000
Manifest this update: Tue 11 Nov 2025 04:01:06 +0000
Manifest next update: Wed 12 Nov 2025 04:01:06 +0000
Files and hashes: 1: Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl (hash: omIGKH86Kl1hrUZ3JT9Uw+qLiQfQjMcza4Pu02Ekm1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:12:fa:f0:b4:5e:32:3e:4a:7b:ec:bd:a8:bd:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21ce311c8ed60bef1b5e4f7d3b864107814418a3
Validity
Not Before: Nov 11 04:01:06 2025 GMT
Not After : Nov 12 04:01:06 2025 GMT
Subject: CN=16ce38f6328b892b2524668df906a1b647aa9daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b5:72:9b:79:a8:26:64:19:a1:73:80:ed:1e:
75:35:c4:df:25:05:47:b1:af:91:db:b1:ef:35:16:
e9:18:e1:a1:26:d8:42:f1:b0:6f:be:05:af:2c:b2:
f0:0d:2c:c1:f8:f4:8c:a5:2f:ca:d6:09:96:33:10:
5c:39:19:07:33:e8:55:b0:0e:fd:3c:cf:bc:4a:d0:
16:c9:2c:53:7e:bb:4b:b6:6c:a0:f5:ba:13:74:2e:
4b:4e:9d:6a:f6:f5:e9:96:75:c1:3b:92:89:cf:a1:
b7:be:6d:b2:2f:e2:07:58:54:b2:3c:4c:0e:55:b2:
32:ff:29:ee:4e:ba:d0:fd:f1:23:5e:19:51:f6:45:
a1:34:e0:6e:33:71:4b:5b:c3:84:bb:51:7c:01:c7:
51:d1:ee:39:87:89:45:0e:d7:08:df:86:7d:50:8f:
14:85:9c:1b:11:d7:e2:d7:b2:72:bd:5b:f6:d6:da:
e3:5e:45:46:07:78:6a:a8:5b:76:b4:2d:25:86:18:
d0:3b:59:2c:dc:ba:3f:a0:9c:8c:0a:a2:45:7c:d6:
ef:0f:31:80:cf:31:72:7a:ca:41:15:d6:0d:2b:e2:
20:50:fb:69:46:e3:17:19:90:dc:1e:38:b7:71:66:
93:dc:f4:5f:77:c9:53:0b:83:6e:27:a8:0c:52:85:
f9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CE:38:F6:32:8B:89:2B:25:24:66:8D:F9:06:A1:B6:47:AA:9D:AA
X509v3 Authority Key Identifier:
keyid:21:CE:31:1C:8E:D6:0B:EF:1B:5E:4F:7D:3B:86:41:07:81:44:18:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e8:b1:9a:dd:37:17:31:84:5c:8e:86:c3:94:c9:5f:bd:f4:
a8:9a:71:e0:b0:1b:1d:b0:ce:9b:f6:ff:45:28:58:b3:95:7d:
ac:0b:fa:f4:06:6a:1b:a8:2d:dd:c2:f6:61:d9:75:0c:b3:c3:
a5:26:3d:bd:b5:58:86:d5:21:80:41:93:79:62:e7:11:e5:85:
99:35:8b:21:f7:c6:6b:be:f8:db:0f:20:ce:ec:61:a6:7c:95:
9b:68:86:84:e8:5d:71:bb:e6:4a:1e:66:3c:cf:60:fc:1b:da:
aa:7a:d3:3c:6e:63:f1:48:93:31:a4:d0:4b:d5:79:d5:35:aa:
c1:c5:75:83:3f:c1:b2:3c:c9:e2:a4:e8:f0:83:19:7b:81:3f:
6e:6f:e2:de:e5:ea:99:a9:d9:c1:35:50:4b:c6:6e:56:6c:de:
04:db:77:34:be:7d:47:32:46:11:38:cf:9e:ab:2b:87:a6:8b:
8a:0a:c8:9e:0f:5d:af:61:e6:98:96:d2:2b:8e:bc:3e:75:47:
58:e5:56:7c:f3:5f:94:ba:07:4f:27:59:a9:ee:a1:78:e3:5d:
54:1c:9e:21:d6:98:f3:d6:29:f6:50:52:36:30:73:31:7e:54:
e4:a8:2d:13:fb:e0:15:be:16:8f:b0:0e:d3:1b:39:0f:fb:53:
91:b8:5f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:52 2025 by rpki-client