Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
File: IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft (raw, json)
Hash identifier: JKbkI0oYCo6POiut9VKH1LTWOc+m09gRWNky4Bf0Y5Q=
Subject key identifier: 83:0B:F5:F9:94:9F:F0:DE:1F:F4:45:03:9F:91:6C:7A:0C:F1:64:38
Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
Certificate issuer: /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Certificate serial: 0199FD6AE80E877BC5EBC0C9714987A37FB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
Manifest number: 06B4
Signing time: Sun 19 Oct 2025 17:01:05 +0000
Manifest this update: Sun 19 Oct 2025 17:01:05 +0000
Manifest next update: Mon 20 Oct 2025 17:01:05 +0000
Files and hashes: 1: IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl (hash: XhmX5tXzJRwJdlxlSrsdIxM1Yqwyf7iCND0csmJAGDo=)
2: P4joPrMbyyf9eJU97dD_0zc8DJY.roa (hash: gl6GZ/HrB5BKfA9rjfcCYlZhjRwEwX8+Blcs80phGI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:e8:0e:87:7b:c5:eb:c0:c9:71:49:87:a3:7f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Validity
Not Before: Oct 19 17:01:05 2025 GMT
Not After : Oct 20 17:01:05 2025 GMT
Subject: CN=830bf5f9949ff0de1ff445039f916c7a0cf16438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:92:99:4a:a0:1a:6f:d2:23:27:d8:e6:3a:f4:
aa:3b:17:63:3f:be:8a:c3:72:d4:f4:37:a9:7a:e1:
c1:38:2b:07:c8:95:1f:bd:16:2b:5e:65:49:0b:6a:
50:49:9d:e0:29:3d:b2:9c:78:5a:1c:89:e1:71:9b:
55:65:9e:c0:93:f7:d1:be:6e:d4:05:33:39:59:46:
35:97:47:68:0a:71:c9:97:dc:03:b5:09:31:4c:f7:
9e:74:f4:52:6c:bc:dd:96:8e:89:ac:13:89:45:96:
ec:10:ff:ca:a9:14:ab:8f:68:22:f0:bd:3a:08:d9:
bf:78:f7:0a:7c:d5:63:0b:18:25:ca:95:d9:33:af:
64:b1:ca:5b:e8:91:d2:5c:80:5f:55:ff:9f:45:6a:
dc:7c:05:fb:44:c9:af:5c:a3:a0:ee:8e:a3:84:60:
b2:a0:58:78:c5:ff:e7:0c:f8:27:90:ed:3b:cb:c2:
f3:30:ed:9e:4e:23:74:2c:58:0f:52:8d:40:7e:1c:
5e:da:9d:82:ac:c2:44:b2:db:9f:1f:42:bf:3c:16:
c9:c1:e6:a2:e3:f8:ae:9d:c6:1d:b9:3a:28:1c:1c:
1c:87:63:78:db:22:bf:11:fb:52:46:61:1f:d0:cc:
13:49:e0:01:1c:98:37:c9:9f:1b:52:f9:c0:80:bc:
4c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0B:F5:F9:94:9F:F0:DE:1F:F4:45:03:9F:91:6C:7A:0C:F1:64:38
X509v3 Authority Key Identifier:
keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ff:22:d4:d4:1d:94:c1:fa:86:bf:43:c9:fb:0d:3e:66:bc:
91:ca:da:ad:c9:a2:17:b9:4c:fd:2a:fa:70:b2:97:e6:24:7f:
8f:2a:88:24:23:b1:1c:a7:e4:04:74:2d:f3:bc:bd:7a:dc:48:
00:37:8b:88:ff:a5:23:e3:18:36:df:e4:ba:b0:99:e8:cb:28:
02:b4:ce:65:e4:90:5e:54:8d:ee:96:ae:f8:16:4d:f9:82:2a:
70:1a:30:ef:f0:84:aa:92:18:ad:c8:5f:fb:d9:ba:8a:bc:1a:
04:51:91:2f:2d:f7:74:f8:51:21:1c:81:a6:1a:21:36:c4:22:
37:61:cc:9a:30:ae:4e:e2:aa:fd:83:2e:6c:4f:72:ec:ab:cf:
99:fe:4d:a1:91:9c:36:38:c9:82:c3:67:9f:f0:0a:d6:ae:cd:
4a:5e:2a:f9:e0:47:7a:b3:3b:cc:b9:3f:a3:b7:49:43:8a:b7:
d0:00:8a:84:9e:ed:4a:b4:b4:fa:97:2b:34:ff:d5:ce:5d:d0:
ca:6e:38:64:0d:16:43:76:69:48:ea:99:bf:51:0b:b8:9d:4a:
f9:ed:ba:c0:64:10:97:74:d4:04:9c:c9:9e:e4:d9:50:d9:d9:
6a:b1:00:6a:b7:1f:17:39:87:80:2f:a0:67:2d:f8:21:2a:d5:
62:b3:bd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:37:48 2025 by rpki-client