Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
File: iIFmRjoaMByltuuYvd0H45cJGYY.mft (raw, json)
Hash identifier: SoK8qwHowob53tavylB2E1F8tQf3yNL3NGr0/4bc0zA=
Subject key identifier: 35:E6:98:4E:C9:00:74:D0:BE:BD:A4:B2:F9:48:B2:23:72:54:D6:3E
Authority key identifier: 88:81:66:46:3A:1A:30:1C:A5:B6:EB:98:BD:DD:07:E3:97:09:19:86
Certificate issuer: /CN=888166463a1a301ca5b6eb98bddd07e397091986
Certificate serial: 0199FD6B13F40C7250B735E62856A5D5A789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
Manifest number: 11BC
Signing time: Sun 19 Oct 2025 17:01:16 +0000
Manifest this update: Sun 19 Oct 2025 17:01:16 +0000
Manifest next update: Mon 20 Oct 2025 17:01:16 +0000
Files and hashes: 1: iIFmRjoaMByltuuYvd0H45cJGYY.crl (hash: qYXOJLhHN6e2+qJ6k00umg6XHXanSq0348xFdJRy4/g=)
2: rw7mvGsBN1ywLg0aU0WOnuWPa30.roa (hash: Kkop8VBeWFXHnSavZNOMJQZHo1FfDtxgbSsG84Nc5jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:13:f4:0c:72:50:b7:35:e6:28:56:a5:d5:a7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=888166463a1a301ca5b6eb98bddd07e397091986
Validity
Not Before: Oct 19 17:01:16 2025 GMT
Not After : Oct 20 17:01:16 2025 GMT
Subject: CN=35e6984ec90074d0bebda4b2f948b2237254d63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:ae:3d:8e:e8:00:dc:9f:c5:58:dd:a5:24:
aa:5c:2a:b1:c7:fc:91:f4:24:c0:c3:2a:7e:70:34:
f5:59:3c:a1:21:2b:40:ba:c3:60:ac:21:88:e8:3b:
ce:fc:f6:7a:36:39:15:bc:e6:fe:ee:28:ed:e2:3f:
0a:60:b1:2a:81:d6:33:76:a2:7b:1f:2a:ca:1c:70:
9a:58:05:b2:7d:1e:ad:92:27:ab:e5:6b:cd:ab:03:
37:fb:20:a5:40:58:a5:f7:2d:b9:96:e2:8c:e5:6a:
b1:de:6d:11:84:28:54:75:ae:e7:4a:36:1c:a2:b2:
31:76:6d:13:73:e6:9c:18:cc:91:32:f1:44:54:df:
85:27:d1:e7:c7:63:8d:95:93:b7:51:39:fb:58:3d:
9b:ec:dd:47:c5:9f:eb:bb:3e:55:13:64:43:bb:7a:
ca:0d:5d:6b:30:2b:f4:6c:7f:86:21:26:f8:d3:96:
44:d9:7d:59:6e:04:2b:52:80:dc:f6:72:7b:44:f2:
fa:84:ab:9e:76:dc:70:d6:50:9f:72:9d:60:54:17:
c3:05:5e:ba:65:85:d0:da:fb:d7:89:2d:1c:95:be:
f6:3d:46:3d:b6:13:7d:7d:3c:f1:9f:d7:25:9d:e0:
7b:4d:eb:6b:33:3c:b0:3e:55:c1:95:86:94:4e:06:
c5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E6:98:4E:C9:00:74:D0:BE:BD:A4:B2:F9:48:B2:23:72:54:D6:3E
X509v3 Authority Key Identifier:
keyid:88:81:66:46:3A:1A:30:1C:A5:B6:EB:98:BD:DD:07:E3:97:09:19:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:ab:3f:80:71:2f:83:d7:c0:53:f1:90:37:c8:e6:a9:cf:b4:
af:40:2f:9d:74:37:14:da:ce:d1:8d:9c:1a:eb:47:f2:5d:7c:
b1:fe:6a:d1:a7:b9:f5:1e:d9:29:21:e5:0b:5a:d0:b6:9c:9f:
cc:53:02:08:19:d2:6a:cd:03:4a:67:67:cc:46:fb:c1:65:cc:
00:6e:40:13:c8:5f:d0:16:ac:0f:67:44:1a:43:5b:86:4f:3c:
2d:fc:3c:15:f8:63:57:40:eb:a2:55:9f:39:e7:9f:b1:cf:20:
67:0a:51:66:83:01:5b:6d:25:6f:73:de:8a:17:0e:20:fa:66:
a4:71:ba:5b:0a:aa:dc:8c:6e:19:06:ea:46:2a:fd:ef:32:82:
85:c7:1a:11:51:3c:33:49:e6:48:16:63:89:5f:d8:87:6b:31:
5d:36:ae:ac:04:ad:1a:f6:d3:ab:c1:56:d3:d7:6a:be:88:6a:
05:35:b7:b7:6f:02:80:ab:64:48:d5:82:9e:55:80:62:8b:db:
1e:ef:80:25:38:83:ef:23:b9:c5:87:24:7f:d2:5a:54:b2:af:
db:c4:1f:24:34:e7:b3:2b:91:b8:96:4f:d6:72:40:17:4f:32:
64:24:36:6b:44:01:63:18:a3:4f:06:3d:73:db:71:04:1c:8b:
9d:29:51:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:27:57 2025 by rpki-client