Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
File: 0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft (raw, json)
Hash identifier: ew4E5CmFjTmiPvpgaj7CpLFcIHCog5/nK7aH6j9kWtI=
Subject key identifier: 27:DF:76:94:0D:AA:F0:9E:40:9A:B5:80:58:99:96:4B:DF:3E:8A:1C
Authority key identifier: D2:26:1D:EE:6D:54:DD:53:6E:F7:00:F2:D9:D8:19:7C:86:09:39:66
Certificate issuer: /CN=d2261dee6d54dd536ef700f2d9d8197c86093966
Certificate serial: 0199FFC7FCDDF24DC0E117B3E1610185363E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
Manifest number: 1673
Signing time: Mon 20 Oct 2025 04:02:00 +0000
Manifest this update: Mon 20 Oct 2025 04:02:00 +0000
Manifest next update: Tue 21 Oct 2025 04:02:00 +0000
Files and hashes: 1: 0iYd7m1U3VNu9wDy2dgZfIYJOWY.crl (hash: WJV8bUP8TRiv5//Utb7AV9NdenGfMg3p4u+bWvgPBtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:fc:dd:f2:4d:c0:e1:17:b3:e1:61:01:85:36:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2261dee6d54dd536ef700f2d9d8197c86093966
Validity
Not Before: Oct 20 04:02:00 2025 GMT
Not After : Oct 21 04:02:00 2025 GMT
Subject: CN=27df76940daaf09e409ab5805899964bdf3e8a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:69:d6:d6:83:4b:64:70:95:20:aa:10:53:64:
4e:03:0e:99:f8:05:26:1f:73:c0:72:f1:e4:a6:a3:
78:46:79:b2:d4:cd:90:f1:65:14:c2:ee:ff:24:4e:
23:bc:d2:6b:94:ad:6c:a3:22:c5:7f:fd:e8:f1:1c:
5a:b1:8c:50:11:26:9f:c5:8c:6d:aa:c1:f4:7c:ba:
fb:4c:1c:b5:3b:a8:0b:2c:e6:56:09:6e:db:d7:e9:
1a:bf:f3:bf:0e:c9:0a:65:43:e6:ba:45:db:78:51:
b5:d3:55:5a:fd:24:45:41:7b:7f:86:7f:ab:38:32:
69:75:6e:1d:87:ad:09:f4:37:02:7d:30:a7:3a:af:
b8:5f:7a:e5:89:ec:26:60:08:51:89:36:26:4f:f1:
c3:3e:23:c8:ed:2a:d7:88:63:38:45:d3:e5:b5:ad:
0e:89:95:32:e1:ce:6c:52:f9:8f:2c:a6:dd:fd:1d:
55:10:15:ae:c0:48:9d:6d:ca:5c:77:c9:44:0e:b1:
d6:08:5c:44:22:92:38:ec:cd:7b:e9:18:ab:84:a5:
a8:74:a0:80:a2:b3:fb:1a:0a:2b:e6:8f:1a:c3:ff:
1a:cf:59:fe:79:95:b8:c6:40:f3:41:7a:ca:d8:db:
2e:73:a3:c5:a8:d2:67:92:7b:7e:8e:9d:68:72:6d:
83:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:DF:76:94:0D:AA:F0:9E:40:9A:B5:80:58:99:96:4B:DF:3E:8A:1C
X509v3 Authority Key Identifier:
keyid:D2:26:1D:EE:6D:54:DD:53:6E:F7:00:F2:D9:D8:19:7C:86:09:39:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:4e:97:96:4f:3f:f1:f5:29:87:b3:f6:b3:dc:f3:bc:21:09:
76:13:61:ba:ad:ab:60:54:6c:f1:23:b6:13:35:dd:13:4f:02:
da:37:09:c3:28:0c:00:76:0f:70:68:55:de:50:57:c3:05:2d:
79:28:50:35:0d:a0:c0:55:d4:2f:3e:7c:6e:ce:e5:11:45:94:
58:d2:ee:92:de:64:f7:ea:d6:2c:5f:e8:b1:74:93:a8:4e:01:
23:ba:9f:7e:bb:f1:c4:26:15:99:1a:fb:62:72:76:f7:d6:c8:
8d:72:4c:5f:b2:6c:da:a3:9a:bc:db:d7:19:62:ce:5b:d7:1c:
f9:e1:96:d2:8c:9c:8f:67:60:d6:81:20:51:61:5b:48:a4:b2:
9d:f7:29:ea:6e:14:ac:2d:93:fd:4d:e8:cc:d0:0d:b7:63:b3:
94:3e:72:d3:48:93:ed:6b:b9:a0:de:4c:33:a4:22:21:aa:e8:
5e:ac:6e:4d:ce:a5:29:d3:54:8a:20:98:fa:47:b9:da:d7:fa:
82:b3:ef:53:3f:1e:41:69:7d:04:d7:47:a0:6b:fc:d0:42:fc:
a1:3d:c6:c2:73:e4:8e:55:ed:b1:17:b8:c2:73:bf:1d:f4:52:
85:1a:52:8d:42:15:3e:75:74:4e:84:5f:5e:2a:4c:c0:53:46:
ba:c1:23:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:46:26 2025 by rpki-client