Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft
File: ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft (raw, json)
Hash identifier: M73VUxBarW5dfOS/uO28B4XYiCAMBAthrJgAQIFseDo=
Subject key identifier: CA:24:A0:11:84:2E:A6:6E:08:66:49:C3:09:8D:F2:D1:ED:D4:4D:35
Authority key identifier: 8B:15:81:27:E9:87:FE:03:71:1B:7A:97:D4:CA:9D:FA:00:06:52:8C
Certificate issuer: /CN=8b158127e987fe03711b7a97d4ca9dfa0006528c
Certificate serial: 0199FD340506C3366C58825BD82FF34BACE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft
Manifest number: 11A1
Signing time: Sun 19 Oct 2025 16:01:08 +0000
Manifest this update: Sun 19 Oct 2025 16:01:08 +0000
Manifest next update: Mon 20 Oct 2025 16:01:08 +0000
Files and hashes: 1: ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl (hash: WPBlT4gbc+rJUMPVJT+KfbKvCxN6lEINOJ7d+63KXXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:05:06:c3:36:6c:58:82:5b:d8:2f:f3:4b:ac:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b158127e987fe03711b7a97d4ca9dfa0006528c
Validity
Not Before: Oct 19 16:01:08 2025 GMT
Not After : Oct 20 16:01:08 2025 GMT
Subject: CN=ca24a011842ea66e086649c3098df2d1edd44d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:53:66:05:19:11:55:6a:30:f4:79:cb:02:14:
63:5e:66:c7:d5:85:fd:e6:52:78:5d:08:20:90:c1:
f5:b3:f3:fb:5c:2f:bb:ac:62:7a:9a:02:7d:c2:68:
e8:6d:16:88:3b:73:2a:af:3e:cb:8e:32:1e:bc:a1:
f0:93:74:91:7b:20:49:f9:d3:c8:0d:52:7e:a3:92:
26:af:e7:7d:d0:20:73:08:0e:1c:63:20:53:c1:37:
99:c7:9a:9a:4e:16:23:85:68:a0:0c:0b:86:2a:6d:
90:f3:15:5b:e2:b2:8e:2e:d5:97:0f:0f:27:eb:d3:
94:ce:ef:07:d3:7f:0c:7a:4c:b3:62:e6:44:9a:15:
71:95:ef:7f:06:de:4b:18:66:fc:97:b8:74:b3:58:
7d:cd:36:72:e8:dd:00:a1:67:19:a0:01:1d:c3:3a:
13:78:2f:6d:e8:9e:d9:c7:0e:14:a8:f0:47:6d:a3:
b8:96:ac:19:e7:eb:a0:6e:95:93:40:a2:69:16:d1:
21:00:df:d3:d0:52:83:75:b6:72:54:20:e6:e5:52:
12:6f:8d:c3:35:d2:3b:68:a1:eb:f3:66:2a:58:e5:
eb:da:83:71:39:fd:da:84:60:d5:c0:05:65:32:99:
f4:1f:0c:30:41:23:2c:37:26:96:d3:d5:2d:9e:8a:
5e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:24:A0:11:84:2E:A6:6E:08:66:49:C3:09:8D:F2:D1:ED:D4:4D:35
X509v3 Authority Key Identifier:
keyid:8B:15:81:27:E9:87:FE:03:71:1B:7A:97:D4:CA:9D:FA:00:06:52:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a3:8c:2e:2b:3a:05:43:02:49:f3:d8:f3:cf:76:d6:85:4a:
ee:7b:37:e8:00:6b:d5:dd:01:93:90:05:d7:a9:8c:82:82:75:
ae:af:e9:74:8c:1f:5a:f9:89:91:2e:35:0b:b0:25:30:b3:a4:
d0:d0:69:37:92:b9:7d:85:14:f8:98:ca:dc:f3:c7:29:5b:ca:
08:ce:7a:7a:b4:92:56:f8:25:29:ae:9e:30:96:ce:9c:f7:6a:
d6:18:b9:a8:b3:b4:0e:c0:ff:5b:15:f8:e1:6d:93:07:92:6b:
2f:ad:8f:c1:53:2e:82:5c:cc:d2:16:db:c9:e6:b5:c5:b6:ba:
32:df:31:e5:5c:49:4d:f8:fb:6b:a9:46:38:f5:14:8a:7a:ba:
29:56:d8:eb:1b:c8:51:05:69:34:18:23:c2:53:d1:39:e9:d4:
01:3d:67:f7:bd:ed:d7:a5:16:16:a8:96:f2:81:dc:6a:bb:c3:
f5:7e:06:14:90:72:6c:e3:45:c9:fc:7b:be:f2:be:f7:c7:f1:
ef:c4:ec:10:10:13:c3:b5:64:cc:6f:c3:a2:ce:44:f4:57:5c:
97:34:b7:c2:cd:c0:a4:28:ea:d6:1c:57:0f:a2:2a:8c:ec:29:
69:f0:5d:53:c3:6d:23:42:8f:21:da:35:f6:4f:37:ad:9d:7f:
d6:35:c0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:36:00 2025 by rpki-client