Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
File: Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft (raw, json)
Hash identifier: 0YQbhtaabfNu/P3lfHZ+2DHFykr+tvn6f7uc5G63Cyg=
Subject key identifier: 25:42:B6:13:9C:D5:22:5F:2F:12:41:0E:C2:A5:6F:7E:56:06:26:BB
Authority key identifier: 23:2B:79:8F:F7:6E:8D:5C:EC:5B:A4:7F:7B:E7:83:29:83:DB:33:35
Certificate issuer: /CN=232b798ff76e8d5cec5ba47f7be7832983db3335
Certificate serial: 0199FBEACBF31136DB92FD8265DCEADD29C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
Manifest number: 0659
Signing time: Sun 19 Oct 2025 10:01:32 +0000
Manifest this update: Sun 19 Oct 2025 10:01:32 +0000
Manifest next update: Mon 20 Oct 2025 10:01:32 +0000
Files and hashes: 1: Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl (hash: tZYqzvV1CvONnHBqmmoK+/javpAGtoInOfM1IWi5VbE=)
2: jSw8bTH4hTcqpfa7bHW8ZyPkknU.roa (hash: ABUXiiTkIZUHgQ3xysDCG98yDMZyrM6LOi10VqvVwCc=)
3: zC-XVtksfypCOwDmUdUeVllfLQI.roa (hash: q1lLlXPM1B2OuaAxpSk6zZYVH0rc6yp93NQ9Af6bSzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:cb:f3:11:36:db:92:fd:82:65:dc:ea:dd:29:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232b798ff76e8d5cec5ba47f7be7832983db3335
Validity
Not Before: Oct 19 10:01:32 2025 GMT
Not After : Oct 20 10:01:32 2025 GMT
Subject: CN=2542b6139cd5225f2f12410ec2a56f7e560626bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4b:cc:22:cf:c5:20:33:5f:2a:b6:a0:72:c5:
ab:0d:0c:d6:70:09:dc:5f:03:c2:86:0f:42:b8:96:
f3:d1:ed:17:57:17:7c:f0:9a:b8:31:cc:0e:e8:92:
ec:2f:5c:f8:86:34:24:f4:98:fc:12:6b:dd:4e:ad:
92:86:c1:f1:0f:bf:4c:7a:39:a9:b3:43:98:34:c4:
72:b1:6c:f4:6d:3e:c0:02:6c:36:99:db:8b:3e:6c:
99:15:a2:eb:27:8b:53:53:3a:2c:2c:ab:bc:0e:67:
e6:ae:0c:1b:7d:cb:b7:33:bc:b7:94:dd:ea:07:7a:
2e:29:e1:b1:ce:01:d4:0e:84:74:1f:19:17:85:f5:
93:f6:8e:79:ec:47:47:6d:ad:5c:38:2f:26:38:af:
9b:fa:97:9c:22:60:09:55:7b:ac:c7:44:27:0f:ec:
55:ea:36:e9:06:95:c8:80:d1:4e:63:93:0c:87:f7:
49:7a:f7:e1:cc:cd:18:d5:75:af:bc:d4:ae:62:d1:
bd:39:ad:4f:0b:6c:52:da:3c:30:f3:d7:a8:e8:e0:
11:48:f3:80:f5:5f:49:b1:e6:bb:1c:a0:a1:7d:05:
84:d0:53:1a:d6:38:5c:e4:f2:c1:37:ae:89:2d:e8:
52:f8:21:42:99:82:1b:d9:cd:42:99:1f:44:94:96:
ef:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:42:B6:13:9C:D5:22:5F:2F:12:41:0E:C2:A5:6F:7E:56:06:26:BB
X509v3 Authority Key Identifier:
keyid:23:2B:79:8F:F7:6E:8D:5C:EC:5B:A4:7F:7B:E7:83:29:83:DB:33:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:2c:07:91:06:10:80:93:11:a4:0d:21:90:a3:8f:d9:75:59:
77:52:15:4b:dd:99:69:f4:5a:dc:ea:aa:06:d2:2a:33:7a:8b:
d6:fc:ad:06:46:d8:8c:73:ba:c0:df:a1:cb:bc:ac:88:90:3a:
e1:83:89:1c:7d:47:d4:59:d7:1b:72:70:42:fc:bc:cf:1d:62:
0e:b6:28:20:30:36:5b:f4:e2:4b:32:57:fe:79:c6:07:3e:b7:
80:55:0e:25:b3:02:9d:9a:ad:63:94:36:90:7a:12:a7:1f:da:
e4:6f:6a:e9:f7:a4:59:c5:1e:21:8e:c0:4a:76:98:ca:19:e2:
df:63:79:eb:26:51:88:18:e2:fd:87:8a:6b:f2:9c:2d:87:2e:
8c:fe:ad:f3:56:c2:b8:93:a6:42:c0:b4:c8:4f:57:51:1d:f4:
94:85:4f:d0:26:72:e4:10:b7:38:0d:81:6c:0a:04:f2:c1:0f:
8e:a3:d6:48:1e:d2:a7:0c:ca:8b:a3:f6:aa:d5:57:25:5c:06:
71:e2:44:da:69:c0:1b:e0:25:17:0f:c8:aa:72:05:2c:04:f5:
9a:7e:0c:b1:4e:d0:7e:65:92:e8:b1:92:1d:38:aa:50:20:d9:
14:d4:72:63:cd:fd:ce:42:25:67:e0:76:9c:93:13:e1:dd:95:
76:ff:90:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:59 2025 by rpki-client