Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
File: iMaZNJivBRiWLl9I1chG3BddGIQ.mft (raw, json)
Hash identifier: 8yheCzgOKNYq2itOV9vZ4Jgx1Nj51zKeCIZxve7WzYw=
Subject key identifier: 5C:02:0B:25:2B:15:C1:D3:C5:28:61:41:39:69:43:26:6D:4F:B5:72
Authority key identifier: 88:C6:99:34:98:AF:05:18:96:2E:5F:48:D5:C8:46:DC:17:5D:18:84
Certificate issuer: /CN=88c6993498af0518962e5f48d5c846dc175d1884
Certificate serial: 0199FC5875FC2EED2DE1532BDEBF4FEDA092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMaZNJivBRiWLl9I1chG3BddGIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 12:01:19 +0000
Manifest this update: Sun 19 Oct 2025 12:01:19 +0000
Manifest next update: Mon 20 Oct 2025 12:01:19 +0000
Files and hashes: 1: iMaZNJivBRiWLl9I1chG3BddGIQ.crl (hash: TR1NRw31xfkGmpKDull6Vh45PlovEz6DtaCv5su+cZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMaZNJivBRiWLl9I1chG3BddGIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:75:fc:2e:ed:2d:e1:53:2b:de:bf:4f:ed:a0:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c6993498af0518962e5f48d5c846dc175d1884
Validity
Not Before: Oct 19 12:01:19 2025 GMT
Not After : Oct 20 12:01:19 2025 GMT
Subject: CN=5c020b252b15c1d3c5286141396943266d4fb572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c3:3a:44:7a:4f:73:52:9e:42:fd:45:eb:62:
3c:73:56:ec:82:d6:0f:6d:c0:84:03:3b:2e:58:7a:
10:89:dc:62:3e:5e:f7:f1:5d:1d:08:d2:26:7e:ec:
1c:7c:bf:bd:c2:42:70:73:4d:0f:05:a1:cf:05:82:
1b:8f:79:6d:63:0d:7c:c0:48:76:4e:9c:4a:bc:7c:
0c:7e:f3:31:e0:cf:d2:13:d4:0f:a1:87:68:ef:45:
f7:ef:9c:95:40:ca:93:90:8d:84:43:46:e3:f3:96:
ca:16:d1:df:7b:1e:eb:b2:02:a1:6a:2f:6a:c4:17:
9a:8e:33:e8:48:c0:d2:af:3b:fe:d1:4b:cd:c1:74:
66:a2:34:47:b5:87:18:cf:09:2e:3a:4f:87:fb:58:
a8:b8:88:ad:12:f1:c1:cc:df:ea:03:f8:de:20:c0:
71:40:fa:a4:cc:c7:3c:b6:04:39:d2:38:3d:eb:c7:
a1:9a:3d:24:e3:6b:24:08:a8:27:b7:ef:7c:14:b8:
17:96:4f:d7:3d:11:42:28:de:ee:bd:34:2c:f1:37:
c1:10:f5:7f:7d:16:60:96:96:e0:99:24:96:20:a1:
ad:a6:42:69:d8:32:20:5a:7a:e8:26:cd:b3:d2:62:
ca:8a:6e:6b:78:4f:14:c4:d8:6a:09:ca:ce:05:11:
8a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:02:0B:25:2B:15:C1:D3:C5:28:61:41:39:69:43:26:6D:4F:B5:72
X509v3 Authority Key Identifier:
keyid:88:C6:99:34:98:AF:05:18:96:2E:5F:48:D5:C8:46:DC:17:5D:18:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMaZNJivBRiWLl9I1chG3BddGIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/81b00a-f68d-44f4-8825-982736b45bdf/1/iMaZNJivBRiWLl9I1chG3BddGIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:10:d9:99:4b:14:2e:76:da:39:27:8d:bc:d0:35:f5:15:cd:
d3:7a:87:ac:78:6e:e4:ee:d1:fe:9a:27:c4:c4:6e:9c:ee:23:
2d:68:49:ff:a9:10:56:d3:b6:37:5a:89:73:24:d6:3a:41:2a:
db:45:24:3e:65:40:db:70:67:8f:6c:f7:29:18:1e:6d:9b:e3:
25:80:17:8f:55:86:ec:62:73:6f:ff:98:16:8a:4f:78:1f:53:
b0:9b:4f:21:8c:e0:50:55:ce:78:19:94:c9:6f:27:b6:ec:20:
a5:8c:9c:5d:33:df:52:ba:53:99:5a:87:c9:86:4a:fc:c7:15:
d5:38:df:ab:b5:6f:45:80:bc:6c:3a:21:86:0b:42:be:65:2f:
1e:1e:29:8f:3b:0a:eb:fc:fc:b5:77:03:24:20:d2:f1:9a:0b:
37:90:91:06:b3:8f:2b:02:7b:72:50:9a:7c:f5:41:40:ff:41:
bc:f8:80:05:1b:88:27:fe:13:10:7c:0a:86:47:6d:bb:2c:85:
9c:b9:4d:bb:7e:f1:f4:17:39:ff:3f:2d:19:b2:17:30:af:d9:
39:cf:23:70:32:9d:5c:44:6f:cb:2a:2e:a6:18:1d:ce:44:e7:
b0:c1:f3:c6:02:02:d8:6f:0f:d8:8e:ef:d1:4e:e6:54:9e:f4:
bb:21:cf:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:41 2025 by rpki-client