Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
File: iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft (raw, json)
Hash identifier: f7vf/p0j00dmQa9Q+SS/RIFaD5JWnpHeR3pC3AI/Vs4=
Subject key identifier: 17:99:EC:2D:D1:4A:C7:BD:79:B5:C9:87:52:B8:4E:1F:7D:77:8C:52
Authority key identifier: 88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
Certificate issuer: /CN=8829792e3ff21fc35827f68a78c8050015c66a72
Certificate serial: 0199FE7DD5D61B724069D95A60503373EBE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 22:01:23 +0000
Manifest this update: Sun 19 Oct 2025 22:01:23 +0000
Manifest next update: Mon 20 Oct 2025 22:01:23 +0000
Files and hashes: 1: iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl (hash: s7GThqlT87dF1vkL/D7TeEiUsM4OuRwqyFy9Ibw5UpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:d5:d6:1b:72:40:69:d9:5a:60:50:33:73:eb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8829792e3ff21fc35827f68a78c8050015c66a72
Validity
Not Before: Oct 19 22:01:23 2025 GMT
Not After : Oct 20 22:01:23 2025 GMT
Subject: CN=1799ec2dd14ac7bd79b5c98752b84e1f7d778c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:22:f9:75:2e:a3:8a:36:4e:98:77:9b:2c:1d:
d5:70:8e:af:c5:a7:d8:2b:0c:8b:8d:c4:66:b6:04:
0a:2b:e4:c8:04:75:06:46:af:6f:23:8d:c4:75:e0:
19:a5:b4:f1:e6:4e:5f:85:28:e4:2b:a9:ee:f8:45:
e0:ee:2e:87:06:7c:9c:44:08:37:f1:b8:2d:45:66:
64:96:22:19:7a:d7:25:40:b2:d4:99:10:9c:f3:eb:
25:a2:f3:65:b1:65:5c:54:94:4c:2d:66:e5:6f:9f:
48:1f:03:f1:30:40:57:5d:1e:c6:00:d1:ad:e3:63:
5a:2c:70:8f:0a:e5:4f:5e:df:ac:80:05:c2:45:e7:
ca:49:22:fc:e3:cb:50:ae:43:f0:f3:57:a6:9e:44:
b1:cd:0b:d3:44:eb:37:5d:d0:2e:60:0b:67:32:d0:
f2:fd:4d:c7:a7:27:da:a4:ff:ae:2f:70:93:0a:2e:
f0:39:af:0d:aa:f4:5f:e1:aa:9e:f4:88:92:55:eb:
9f:d8:a4:2a:b7:10:3e:b0:f4:4b:06:13:4b:e0:43:
cd:1c:82:21:03:bc:2e:3a:ae:32:e0:42:64:9e:c6:
4d:ab:ca:ac:eb:ed:fe:7a:3e:85:3a:d2:28:67:44:
04:12:2c:25:d5:0e:ae:05:e1:ff:ba:d4:b5:b6:21:
db:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:99:EC:2D:D1:4A:C7:BD:79:B5:C9:87:52:B8:4E:1F:7D:77:8C:52
X509v3 Authority Key Identifier:
keyid:88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b1:5c:1c:3c:c9:55:ea:5d:c2:86:6f:40:f4:2a:ae:29:f3:
e8:a0:b2:04:57:42:67:0a:de:b6:9a:69:8a:37:51:54:2e:f4:
84:45:91:c4:e4:75:c2:f9:c5:08:3f:a8:c4:5c:b8:9d:c7:dc:
29:b4:5a:8b:2e:73:64:40:8d:55:fb:3b:eb:b7:33:df:25:d5:
de:16:46:18:fc:bb:d9:7e:61:2f:25:d2:68:df:43:c4:ff:c8:
81:07:56:06:6b:bd:ba:ec:90:d7:0c:45:50:37:9b:73:35:bb:
88:66:e0:79:70:88:c2:fa:ef:06:7c:0b:f5:87:51:98:f7:31:
a7:1b:0d:e0:7b:c8:15:51:c1:fa:f4:fb:4b:37:90:d7:ea:fb:
08:5c:63:75:4e:27:e9:17:d9:1b:2a:b5:ee:f8:a3:51:51:46:
1c:86:88:9a:f3:ac:f3:90:cc:65:7e:69:a1:41:88:e2:6a:af:
89:b0:c7:71:fa:45:39:3e:94:cc:d9:38:93:66:5a:99:58:44:
0c:f2:3d:bf:ca:80:8c:ff:ba:17:c3:28:37:0b:d4:02:26:3e:
94:53:94:56:fc:6e:ac:72:bf:1a:8d:21:ff:e9:f3:61:6b:9b:
45:44:bc:42:4d:57:16:0c:3a:b9:7b:99:50:6f:b4:38:be:48:
59:ab:fd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:24:22 2025 by rpki-client