Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
File: IQdBCPDRRZtitsetsn1pNLoL56U.mft (raw, json)
Hash identifier: Tw1ASmlZ8UUi/Y7JFnCRFEeshu8w2XI17qgAjLzAt3c=
Subject key identifier: B6:55:FB:8D:B4:89:52:26:A3:AF:5E:E7:39:DB:AE:15:5C:B8:CE:FD
Authority key identifier: 21:07:41:08:F0:D1:45:9B:62:B6:C7:AD:B2:7D:69:34:BA:0B:E7:A5
Certificate issuer: /CN=21074108f0d1459b62b6c7adb27d6934ba0be7a5
Certificate serial: 0199FC8F216DB77EA9CB8ECC4163B643E8E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
Manifest number: 1670
Signing time: Sun 19 Oct 2025 13:01:02 +0000
Manifest this update: Sun 19 Oct 2025 13:01:02 +0000
Manifest next update: Mon 20 Oct 2025 13:01:02 +0000
Files and hashes: 1: IQdBCPDRRZtitsetsn1pNLoL56U.crl (hash: hpqCBJavpdTXGqNGNWGr9npTlPJvtwrmZTKRE39n7ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:21:6d:b7:7e:a9:cb:8e:cc:41:63:b6:43:e8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21074108f0d1459b62b6c7adb27d6934ba0be7a5
Validity
Not Before: Oct 19 13:01:02 2025 GMT
Not After : Oct 20 13:01:02 2025 GMT
Subject: CN=b655fb8db4895226a3af5ee739dbae155cb8cefd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5c:98:01:bc:ac:1a:05:2f:b1:29:c3:7b:de:
fd:33:39:97:92:42:fd:42:aa:e3:38:8c:4f:c1:2e:
9b:a5:11:c1:1d:f8:2e:b9:85:01:63:87:5b:35:4e:
2e:c8:7d:0e:78:ac:dc:02:25:cd:d2:46:0b:30:9e:
75:b4:30:6f:a7:25:5f:10:37:45:39:e7:83:52:1e:
56:64:2c:5a:5a:be:8d:59:24:37:69:ed:a6:b9:d8:
75:59:07:72:6b:24:a8:79:33:76:18:5d:94:51:8e:
6a:5f:ab:83:7c:e0:b4:61:0f:70:6b:e7:1b:f8:a3:
f2:18:4a:07:8f:81:52:ba:9e:8a:04:10:29:86:ea:
52:4c:8c:69:90:48:0e:03:44:7c:02:01:53:13:86:
8f:d6:87:ae:85:0f:62:ce:77:6d:a5:7e:9c:5c:7f:
16:f0:ea:e8:8c:ec:17:b3:8c:2f:25:03:dc:ab:bb:
d7:96:53:44:46:80:7d:96:3a:b9:d8:28:72:eb:24:
6e:ff:fe:9a:19:6d:bc:c2:18:66:c9:e9:f7:01:01:
2c:9f:3c:11:3c:6b:de:44:e4:44:9a:cb:6a:32:e9:
aa:c8:9f:89:85:81:c0:03:01:39:5f:ec:c2:d0:bd:
58:3a:62:b4:74:fd:fc:02:df:da:51:b6:2d:9a:4f:
56:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:55:FB:8D:B4:89:52:26:A3:AF:5E:E7:39:DB:AE:15:5C:B8:CE:FD
X509v3 Authority Key Identifier:
keyid:21:07:41:08:F0:D1:45:9B:62:B6:C7:AD:B2:7D:69:34:BA:0B:E7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ae:4c:7d:4d:09:0c:4a:de:51:74:c4:6e:64:51:67:45:c0:
e3:c1:c0:84:2e:c2:6d:52:e1:51:9c:6c:fe:e6:9b:a0:ea:d3:
f3:4b:5d:c1:d4:dc:ea:ef:44:d8:33:25:c3:c9:fa:ab:d2:0f:
e3:ac:99:f4:8b:11:e1:d7:e8:a0:25:cf:4b:8c:0e:b5:96:a7:
24:37:06:27:f2:14:e7:24:05:48:d9:3e:16:d5:18:27:6c:89:
7c:a8:c9:bb:ac:71:f0:26:38:50:71:1d:a3:e7:4c:12:e1:84:
61:0d:64:26:1f:44:59:91:9c:8f:2a:d6:7e:66:84:0d:20:b2:
87:aa:fa:21:37:82:09:45:53:bd:5a:74:50:56:8b:1c:a8:f1:
c4:7c:6b:c3:67:c6:8d:1a:bc:6e:26:0b:bb:46:6f:a0:7b:1c:
43:5a:05:6f:77:19:e1:ef:d4:bf:f4:83:f1:c0:c8:26:ba:19:
1b:f7:23:56:69:98:62:e0:18:65:2d:46:22:e1:a1:c2:8f:a6:
9c:3a:ad:43:d5:ac:1c:25:72:c1:7d:57:08:55:e6:0b:40:b0:
26:e9:56:15:72:c5:a7:62:f5:27:c9:f5:50:5a:b8:3b:88:68:
1d:0f:18:38:33:f3:59:cd:22:49:ed:73:bb:78:9e:61:fd:9a:
04:74:61:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:01 2025 by rpki-client