Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
File: IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft (raw, json)
Hash identifier: +bBqePJjO2NP2XPy5cKYWB7dwUF02JpGkfjztzEtBCo=
Subject key identifier: 71:C3:82:9B:00:13:58:E2:E3:83:E9:95:EC:FE:FB:DF:4B:A4:F5:3B
Authority key identifier: 21:D8:5D:23:1A:D5:4B:84:39:C2:AA:ED:91:A5:77:58:6A:C4:60:00
Certificate issuer: /CN=21d85d231ad54b8439c2aaed91a577586ac46000
Certificate serial: 0199FD33E634C8B23A84125A97E18E394A00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
Manifest number: 11E4
Signing time: Sun 19 Oct 2025 16:01:00 +0000
Manifest this update: Sun 19 Oct 2025 16:01:00 +0000
Manifest next update: Mon 20 Oct 2025 16:01:00 +0000
Files and hashes: 1: IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl (hash: W52N/LqxMBx4zbrAffYY+bF/dtWP4BXLHAgykMaMbb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:e6:34:c8:b2:3a:84:12:5a:97:e1:8e:39:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21d85d231ad54b8439c2aaed91a577586ac46000
Validity
Not Before: Oct 19 16:01:00 2025 GMT
Not After : Oct 20 16:01:00 2025 GMT
Subject: CN=71c3829b001358e2e383e995ecfefbdf4ba4f53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bc:69:e4:de:da:5b:52:a9:1c:fc:c0:de:42:
c4:79:00:1b:47:17:11:a2:94:95:2e:e8:12:11:e9:
fa:39:7c:93:65:3b:8e:87:92:ab:51:f1:ff:70:0f:
30:22:d8:14:72:f1:b6:7b:73:44:3a:8e:e0:73:3c:
24:eb:45:d9:77:fb:a6:6c:9a:dd:58:8d:d6:97:b2:
68:76:bb:89:30:74:c2:e6:70:9c:c7:ac:58:6e:6b:
52:5c:e7:61:5f:3d:3a:4b:8d:64:e9:e0:5e:fc:2f:
6b:eb:f5:a0:df:e6:1a:5f:18:d5:aa:cb:93:f6:6f:
32:4c:c2:d9:c2:a5:74:f8:66:10:4d:65:59:d9:ed:
42:f1:b5:ae:d0:81:a3:64:42:24:2f:73:17:31:7f:
4d:d5:c5:9d:2e:f5:6b:8f:87:39:d4:c7:a8:42:13:
b4:6d:7c:28:dd:32:aa:90:03:db:5f:db:42:97:48:
55:fe:fd:ff:29:fb:4b:88:2d:06:0b:08:6f:5c:fd:
14:9a:ba:6d:4e:bf:6a:1f:22:50:9b:a0:e6:f3:8b:
77:eb:7a:93:87:01:54:c1:e1:7c:d5:f9:37:0e:cd:
56:75:c8:4b:81:9b:1f:a9:67:70:97:f2:23:1e:48:
f8:c7:e1:02:eb:5f:1c:7f:85:9d:4b:72:fc:08:42:
d5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C3:82:9B:00:13:58:E2:E3:83:E9:95:EC:FE:FB:DF:4B:A4:F5:3B
X509v3 Authority Key Identifier:
keyid:21:D8:5D:23:1A:D5:4B:84:39:C2:AA:ED:91:A5:77:58:6A:C4:60:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/6a6b55-ca02-458d-8b5d-74d77302b184/1/IdhdIxrVS4Q5wqrtkaV3WGrEYAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:3a:c5:e4:c4:97:f5:a9:c8:7d:cd:9b:2a:b5:5e:52:42:a5:
3d:69:8d:63:27:c1:d8:8e:d2:e0:d7:d0:c5:80:bc:b5:a7:da:
3c:a3:f6:89:a0:08:60:ed:f9:9e:2e:fa:20:b4:99:ae:8e:7e:
e3:3c:00:4a:9f:55:e0:16:06:66:da:2f:c0:43:5d:69:01:7e:
22:ba:83:24:71:b5:80:3a:03:15:cc:f1:07:d3:d1:91:4c:fc:
3d:2d:f3:43:9f:f1:bf:73:be:9b:84:51:c6:f0:66:ab:dd:bc:
88:e3:67:8f:5c:c3:af:e4:e5:a4:6e:49:6e:d2:5a:81:43:4a:
d8:6b:64:0d:78:66:00:47:d0:b5:13:4c:77:0b:44:5c:4e:39:
28:8f:9e:3f:70:76:1f:88:f6:26:a3:b8:6c:a7:68:02:44:35:
f2:c5:29:b3:36:22:18:d1:93:a2:09:7a:9c:f7:24:8f:9e:60:
d4:4c:54:81:f6:48:b7:0b:36:36:22:32:19:ce:9e:52:51:1b:
51:0a:31:00:04:87:e1:30:55:b0:28:27:fa:4e:14:67:d6:a2:
52:c0:ce:37:87:3e:b1:6a:fb:8b:d9:ee:c5:09:e8:49:58:c6:
fe:82:2c:e9:d7:92:0d:9b:27:84:18:2d:d7:c4:da:7d:97:fc:
7a:07:b0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:40 2025 by rpki-client