Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
File: IuSOFh5JBZI_bUqirgohUw8t4gs.mft (raw, json)
Hash identifier: mdq9bd830bLjuRjd1+kJw49YyEPNrg2vZXkXorBOMsU=
Subject key identifier: CC:FB:ED:E0:F0:3B:BA:E6:B4:01:E4:93:A9:EA:7B:BD:5B:8A:B4:1E
Authority key identifier: 22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
Certificate issuer: /CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Certificate serial: 019A71B781E0FFB87202CB2D0E068C26CF6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:00:43 +0000
Manifest this update: Tue 11 Nov 2025 07:00:43 +0000
Manifest next update: Wed 12 Nov 2025 07:00:43 +0000
Files and hashes: 1: IuSOFh5JBZI_bUqirgohUw8t4gs.crl (hash: MEkRkmZsZKutfNJhZnm4kNSJKQmE3eb1bd1XJL94ThE=)
2: OUi5qBFFBiQ3EGmTWiGmad22xM4.roa (hash: KwdKSyLAfkRw0QNUdiy6X/wiXk2JmvHy0XAz3/ojAhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:81:e0:ff:b8:72:02:cb:2d:0e:06:8c:26:cf:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Validity
Not Before: Nov 11 07:00:43 2025 GMT
Not After : Nov 12 07:00:43 2025 GMT
Subject: CN=ccfbede0f03bbae6b401e493a9ea7bbd5b8ab41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:00:dd:98:f6:58:60:bc:22:8b:c8:b9:5f:7a:
20:3f:9a:6c:5f:71:92:7a:bf:22:ad:6d:02:88:22:
f7:a5:b2:1b:4b:e3:50:5a:45:eb:d7:fe:df:ff:e3:
94:8a:07:32:59:c4:c8:c3:e5:03:df:93:73:c9:06:
a9:49:82:1d:c7:4d:35:29:69:8e:99:1f:50:33:4d:
ad:de:fd:b5:1f:19:be:96:9c:14:31:ac:af:94:49:
99:9c:24:a7:7b:0f:a2:9d:a4:1d:2f:f2:fc:a8:14:
45:14:d3:1b:5b:64:b7:9b:51:2f:b2:98:24:eb:f1:
9f:b0:78:74:5c:ea:7f:22:b6:7a:df:2e:05:81:fc:
cd:e7:7e:58:3f:06:44:2a:14:d8:ba:ad:68:21:0c:
2c:5d:9b:36:a5:29:33:89:36:8a:95:78:46:5e:7b:
0b:32:c3:a2:7b:59:43:bb:5a:d0:ae:c5:c8:44:87:
72:68:b6:cb:cf:48:dd:f5:d6:37:fa:41:5d:d9:a7:
68:d2:7b:e3:4a:86:0a:85:cb:09:5c:82:7e:c8:ca:
c3:4e:e9:a5:88:a0:82:51:39:e8:22:31:2c:78:7e:
39:08:0c:f9:39:bb:97:71:13:22:bc:de:e9:1c:3f:
24:5f:04:8c:9b:94:c3:82:59:58:55:97:e4:a0:0f:
28:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FB:ED:E0:F0:3B:BA:E6:B4:01:E4:93:A9:EA:7B:BD:5B:8A:B4:1E
X509v3 Authority Key Identifier:
keyid:22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:fe:4c:5a:90:0d:43:06:56:79:5f:73:55:23:2b:91:ab:0c:
79:7e:99:bf:46:82:fe:99:47:c8:b8:71:cb:0f:6d:e3:b1:6e:
6f:8e:ec:2b:b2:dd:d9:71:31:9b:45:a1:75:04:7b:de:5c:4c:
8d:c8:e0:8c:fd:ef:13:fe:03:06:01:07:2b:68:80:7c:f4:88:
7c:4c:3d:82:bd:4f:2d:6d:7c:05:45:0e:3a:10:05:da:10:e5:
37:e0:53:4d:ae:c3:ec:20:27:f8:e5:23:6f:d7:18:91:c5:1f:
8e:aa:56:69:0e:4a:a0:e5:b2:9e:e8:4e:bf:78:b0:ac:37:65:
13:82:d1:bc:3c:30:ed:92:44:0c:73:56:6e:a5:3f:35:6a:cb:
cb:c0:bb:7b:27:60:f1:4c:09:62:07:97:96:8f:22:cf:c9:44:
c8:fc:cb:45:fc:83:5c:a8:ee:96:cc:fa:66:fb:58:56:95:47:
8c:a9:d8:da:d0:dc:86:7c:ed:66:62:d1:23:d6:81:5d:7a:d5:
d4:bf:f9:22:d3:36:8c:c2:45:87:26:4c:c2:a3:8d:59:c1:a9:
2d:a6:4b:c9:b7:9e:c6:07:d9:73:c6:7e:28:d8:66:92:78:8c:
94:4c:85:9d:d7:cf:40:b2:48:e1:13:68:81:b8:ba:0f:7a:45:
e0:b7:1b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:18:16 2025 by rpki-client