
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
File: IrPk850cPBTYMWBr_KFmbd6b7WI.mft (raw, json)
Hash identifier: qA8PYEJwODSXjDQv2h0vefzJIzlcST9Hpmt2vwRIir4=
Subject key identifier: 23:89:96:71:6B:21:EE:0A:CC:02:2A:5E:DF:69:11:4D:29:18:11:B2
Authority key identifier: 22:B3:E4:F3:9D:1C:3C:14:D8:31:60:6B:FC:A1:66:6D:DE:9B:ED:62
Certificate issuer: /CN=22b3e4f39d1c3c14d831606bfca1666dde9bed62
Certificate serial: 0199FEB477307F1B6952FD1B5B7214456A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
Manifest number: 111E
Signing time: Sun 19 Oct 2025 23:01:03 +0000
Manifest this update: Sun 19 Oct 2025 23:01:03 +0000
Manifest next update: Mon 20 Oct 2025 23:01:03 +0000
Files and hashes: 1: IrPk850cPBTYMWBr_KFmbd6b7WI.crl (hash: /FWhOMUF+xZA0ez0XNBTh8qZ64cuXdIy3Fam28qtBEU=)
2: eUQnxtW594Ad6vU9njmKr7uq7YI.roa (hash: 1w4c53hZ6iVZ5hhHMJGwGhh/v6xJyfrfdyok+gD0KR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:77:30:7f:1b:69:52:fd:1b:5b:72:14:45:6a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b3e4f39d1c3c14d831606bfca1666dde9bed62
Validity
Not Before: Oct 19 23:01:03 2025 GMT
Not After : Oct 20 23:01:03 2025 GMT
Subject: CN=238996716b21ee0acc022a5edf69114d291811b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b8:9c:66:c1:29:44:08:94:21:18:f6:19:1e:
95:cb:15:a3:b2:e4:1d:34:83:03:b1:9e:b9:0e:35:
60:04:ac:a4:33:46:60:38:d5:4b:9f:fb:98:88:ec:
2b:6e:90:b8:ee:b1:14:06:2f:8a:12:b6:8c:49:be:
8b:68:16:eb:75:e9:e9:75:48:8b:08:33:20:95:d7:
47:10:8a:18:c7:f7:5a:6a:17:47:48:6d:70:bf:68:
6f:f9:15:f6:96:de:d5:0b:6b:a1:49:e9:45:05:fb:
4b:e1:86:24:1e:4b:79:3a:45:f6:f3:5b:b0:ec:f7:
e9:ce:20:65:5e:f6:a1:e0:2a:06:13:4b:8d:f2:aa:
a3:f3:26:b7:9c:46:bc:95:10:f3:a6:15:f0:2d:40:
a5:d3:87:a3:a0:76:1e:0f:62:58:5b:84:cb:4a:92:
8d:de:f6:3e:c2:a2:3c:c2:50:50:8b:ba:a8:a5:78:
69:ca:97:fd:20:c3:1d:4e:71:87:21:7e:29:46:93:
8f:bb:e0:a2:70:53:9b:72:72:c9:6b:97:84:45:2b:
df:aa:ba:03:6a:4b:1d:71:91:d0:2d:38:49:d5:11:
0b:01:3e:82:a7:dd:2c:a2:4f:2c:1f:d3:20:c8:df:
0a:46:06:85:d1:52:63:8b:18:e5:cc:f6:21:45:ad:
7c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:89:96:71:6B:21:EE:0A:CC:02:2A:5E:DF:69:11:4D:29:18:11:B2
X509v3 Authority Key Identifier:
keyid:22:B3:E4:F3:9D:1C:3C:14:D8:31:60:6B:FC:A1:66:6D:DE:9B:ED:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d5:3d:26:01:da:21:bb:e6:ec:16:0c:32:ab:ae:5a:d3:c3:
99:ba:eb:91:db:1e:ac:07:52:2e:f4:17:e8:cf:29:d8:c5:92:
ea:96:be:d1:ae:f7:bb:79:d7:ba:ee:3f:f4:81:d8:1b:4a:61:
b3:48:00:45:b3:06:8b:9e:82:4c:8f:dd:fb:71:cd:fe:2b:8e:
b4:ac:ba:2f:3b:b3:d5:df:86:30:23:74:4b:64:29:a7:0f:61:
49:12:91:ae:54:e3:1a:b8:c3:c4:89:11:40:be:83:30:6d:1c:
49:dc:44:51:9e:37:18:56:47:fd:bf:6c:21:ff:ac:70:51:da:
6f:2e:e2:3e:bc:16:45:d2:7d:d0:b2:12:85:43:fa:98:d7:f8:
a9:74:4c:c3:25:d8:86:4a:0d:c3:3a:f3:12:a6:4b:6b:71:ff:
81:8a:7f:42:7e:dd:cd:ec:3e:c6:ba:f8:67:bb:27:d9:c6:ff:
58:6c:14:6a:c8:bd:62:d6:9b:43:f4:41:32:26:87:73:45:20:
53:11:80:6f:be:c7:a5:ca:02:3b:c7:b2:1e:fd:85:35:1b:ee:
5f:95:41:79:2d:39:25:92:82:0c:0a:c5:34:38:8f:58:67:43:
a5:76:85:f3:03:cc:8a:01:c4:df:ae:22:15:fd:57:f9:38:95:
0a:75:0a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:16:07 2025 by rpki-client