Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/irxd5yn5l1idW-dpw3gkL3VFu4o.mft
File: irxd5yn5l1idW-dpw3gkL3VFu4o.mft (raw, json)
Hash identifier: VBGyAg7U+tnLZfZA0k6L+SgX2Otd47GQPbSdNoO1HGw=
Subject key identifier: 29:D4:49:50:8A:1C:87:A8:2E:B1:7B:86:9D:CE:68:57:21:00:92:49
Authority key identifier: 8A:BC:5D:E7:29:F9:97:58:9D:5B:E7:69:C3:78:24:2F:75:45:BB:8A
Certificate issuer: /CN=8abc5de729f997589d5be769c378242f7545bb8a
Certificate serial: 0199FBEA8A64DC70B8E39123B180A8EA7B57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irxd5yn5l1idW-dpw3gkL3VFu4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/irxd5yn5l1idW-dpw3gkL3VFu4o.mft
Manifest number: 20
Signing time: Sun 19 Oct 2025 10:01:15 +0000
Manifest this update: Sun 19 Oct 2025 10:01:15 +0000
Manifest next update: Mon 20 Oct 2025 10:01:15 +0000
Files and hashes: 1: irxd5yn5l1idW-dpw3gkL3VFu4o.crl (hash: S+6pMvhlqS6u+tN6/enMpnL/5y02sN6M7GxmKEVuDD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/irxd5yn5l1idW-dpw3gkL3VFu4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/irxd5yn5l1idW-dpw3gkL3VFu4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/irxd5yn5l1idW-dpw3gkL3VFu4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:8a:64:dc:70:b8:e3:91:23:b1:80:a8:ea:7b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8abc5de729f997589d5be769c378242f7545bb8a
Validity
Not Before: Oct 19 10:01:15 2025 GMT
Not After : Oct 20 10:01:15 2025 GMT
Subject: CN=29d449508a1c87a82eb17b869dce685721009249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1f:ab:de:a4:10:da:bf:fc:51:80:7d:c3:71:
45:d7:c4:ce:1b:07:a8:1b:ca:3a:96:d7:8a:fd:35:
6e:dd:84:76:2a:55:6e:72:e9:bc:3b:4a:4d:d0:0f:
af:46:5d:9e:84:60:6b:75:a3:ea:ef:67:c6:4f:63:
0a:5b:5d:a5:ac:c1:db:6c:98:a0:1f:b2:a2:06:f5:
b7:3c:a3:e6:10:a8:fd:71:8b:71:77:ec:e8:97:3a:
8d:d8:5d:57:da:b4:ec:58:1d:db:99:d7:de:9e:24:
0e:24:08:1d:21:29:5d:d1:01:4e:80:06:4f:a3:22:
ba:e1:30:93:cd:97:aa:67:93:3e:21:be:d5:d5:c3:
a7:a0:3a:00:5a:c0:d8:71:b8:cb:ff:37:7e:0d:4b:
9b:8b:e9:87:72:b6:96:26:3d:83:ef:ab:1f:a9:01:
25:52:23:d3:4a:e4:2b:35:86:63:e9:0b:73:b5:3f:
96:35:88:3f:1f:ba:15:62:e7:fd:ce:68:3e:9c:76:
5d:2f:8b:c5:ca:95:55:e3:b0:f9:ba:c1:b0:5c:f7:
20:70:d6:e9:60:b4:f0:f0:b0:5e:ea:d1:3c:07:ef:
d2:20:04:ef:62:3d:bd:52:e3:8c:85:fb:fc:a3:f6:
2a:f1:e7:eb:c7:71:a7:5b:bd:45:eb:2d:a4:7c:ad:
be:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D4:49:50:8A:1C:87:A8:2E:B1:7B:86:9D:CE:68:57:21:00:92:49
X509v3 Authority Key Identifier:
keyid:8A:BC:5D:E7:29:F9:97:58:9D:5B:E7:69:C3:78:24:2F:75:45:BB:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irxd5yn5l1idW-dpw3gkL3VFu4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/irxd5yn5l1idW-dpw3gkL3VFu4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bd655f-e07f-40cb-a007-7ed3b9185990/1/irxd5yn5l1idW-dpw3gkL3VFu4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4a:6d:50:3f:ad:c9:f4:70:af:30:41:c4:5f:ac:45:d4:36:
4a:ac:af:6b:b0:ac:60:0d:12:d1:88:cb:25:a4:02:63:13:1b:
e8:c3:9d:7a:20:7f:34:49:63:c4:de:7a:1f:ee:db:10:22:79:
ec:f1:21:a6:65:89:e9:ac:56:66:f6:f1:70:4e:8d:1f:53:b1:
49:e8:b0:cc:eb:02:6b:8a:6e:99:d7:1f:58:88:56:4e:2a:4b:
9a:44:d6:be:5f:bd:94:f5:28:2f:54:b8:e4:d0:59:07:bc:24:
04:bb:5d:b1:13:0e:91:a9:35:b8:31:ee:ed:6a:98:be:4d:5c:
60:32:36:84:36:00:2a:d9:32:a1:ee:ad:3e:ce:84:f0:74:35:
ec:2f:48:9b:06:80:d5:2e:de:a1:30:8c:1e:e0:93:3a:bf:b6:
f3:46:ee:a2:64:c5:8e:68:14:51:b6:a4:12:ad:c5:28:0b:14:
68:9c:2c:b3:26:95:78:a1:eb:73:2a:e3:45:27:f6:19:75:c2:
87:60:fa:59:94:66:86:52:af:70:e8:4e:d1:06:f3:ad:6d:a7:
42:e9:fd:0a:dc:ad:7a:33:ed:b1:f2:76:f1:2f:e8:6c:59:cb:
81:0d:ac:78:4c:c7:ac:c7:42:5f:a9:8f:46:b0:a0:ea:c1:0a:
db:52:d3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:18 2025 by rpki-client