Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
File: X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft (raw, json)
Hash identifier: 6SPrUfDIai3RUjrIGSRi8efFwrhlbVwSGad4BJI88GQ=
Subject key identifier: 40:9A:A4:EB:55:C0:25:DD:5A:34:7F:1A:A1:E8:A2:8A:13:05:75:1A
Authority key identifier: 5F:E0:BE:20:E0:2F:FC:73:54:D5:B2:D3:3E:0F:E7:71:51:9A:FD:1F
Certificate issuer: /CN=5fe0be20e02ffc7354d5b2d33e0fe771519afd1f
Certificate serial: 0199FBEB92A95C4EB39EF39236C6006E4F57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
Manifest number: 078E
Signing time: Sun 19 Oct 2025 10:02:23 +0000
Manifest this update: Sun 19 Oct 2025 10:02:23 +0000
Manifest next update: Mon 20 Oct 2025 10:02:23 +0000
Files and hashes: 1: X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl (hash: N5mx9fyVoHqxF1okogZVNTAk7EXTIkdrWuB8BhiWXJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:92:a9:5c:4e:b3:9e:f3:92:36:c6:00:6e:4f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe0be20e02ffc7354d5b2d33e0fe771519afd1f
Validity
Not Before: Oct 19 10:02:23 2025 GMT
Not After : Oct 20 10:02:23 2025 GMT
Subject: CN=409aa4eb55c025dd5a347f1aa1e8a28a1305751a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:61:b8:ce:5d:87:36:71:9a:03:4b:c3:9e:b2:
92:80:c8:9d:95:d2:dd:99:9b:cc:6e:7f:60:a8:6b:
b1:3f:61:5b:8d:55:28:53:8c:41:b9:3f:ef:e3:f4:
bf:b6:87:09:7c:6e:4c:e6:c4:2d:ce:c9:18:a6:52:
4e:04:57:74:17:84:d9:59:12:47:b1:74:7d:f0:f8:
a0:b9:52:4c:92:e1:b2:94:e2:e8:da:3e:ed:2d:a6:
49:da:62:02:85:9e:09:ef:dc:99:e9:d4:2c:02:eb:
66:c4:b3:93:d1:82:d4:f9:3e:16:6e:ea:9a:eb:36:
33:fa:0b:db:71:81:d2:da:f4:c7:b0:79:dc:8e:0a:
e4:bd:fd:dd:62:d0:ee:c7:84:15:4d:ed:71:ef:4a:
7e:b1:17:85:ab:58:0a:3a:95:9a:1f:83:7c:e6:9b:
ac:53:f2:37:46:e0:9d:d5:7e:dc:b5:9f:e8:da:51:
51:c1:22:8c:db:81:26:e5:f9:62:7a:4a:cd:cc:f8:
30:62:52:79:37:c5:0c:89:c8:89:25:2d:5e:d5:94:
78:9d:0f:47:59:35:ed:88:73:7e:c3:bb:31:e3:af:
76:05:61:5e:56:54:56:58:44:1d:6d:cd:bf:fa:8d:
f3:5c:e7:c8:e7:40:a1:47:3c:1f:da:e2:96:d4:6b:
cd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9A:A4:EB:55:C0:25:DD:5A:34:7F:1A:A1:E8:A2:8A:13:05:75:1A
X509v3 Authority Key Identifier:
keyid:5F:E0:BE:20:E0:2F:FC:73:54:D5:B2:D3:3E:0F:E7:71:51:9A:FD:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:98:8b:30:8e:48:ef:46:76:76:cd:91:da:ef:ea:28:94:e1:
63:db:94:30:27:84:2a:79:72:95:3c:82:f5:07:99:91:1a:21:
ae:09:38:e6:03:ba:33:05:a3:eb:40:6f:e2:44:db:95:9d:b2:
56:36:26:b4:e6:42:de:90:7d:9a:96:d0:84:59:32:93:5f:0b:
97:1e:f3:26:90:e3:d9:39:8a:41:2f:d9:ab:90:df:16:4a:f4:
d6:01:5d:b7:36:1d:06:8d:23:8e:ca:33:52:8a:94:0e:0e:5c:
35:9e:57:f7:46:90:4f:e5:6e:23:bb:27:89:84:b8:ca:a6:10:
c7:43:21:d7:45:4b:e4:6c:ff:64:94:25:71:81:41:26:fc:8b:
18:58:2b:a7:df:0b:e2:ed:6f:7f:96:34:06:7b:1d:b4:f1:8b:
4d:2e:71:d0:96:76:35:c2:2d:a2:45:ce:2e:96:df:3a:98:fb:
9d:32:3b:db:c8:6a:57:80:20:59:8d:d3:7b:94:b6:ea:4c:82:
4c:95:10:50:96:29:44:64:4f:f1:01:b1:02:e1:bc:ab:6d:cb:
75:65:f4:8f:1f:f5:36:c6:45:ea:20:28:1e:e0:2d:d5:89:84:
9c:d1:27:2d:47:1d:f6:58:ad:a3:c2:4f:bf:44:57:e7:35:b6:
53:36:d2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:06 2025 by rpki-client