
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
File: iSPXAiS3vTwqfOfceofJKtWv8mk.mft (raw, json)
Hash identifier: hhlokobj8w6NMfLcXi3UageHWNzM0PN8ZQhA62QJJM0=
Subject key identifier: 8F:69:9F:03:C3:B0:02:55:0F:4F:08:18:56:46:80:FC:5D:9C:46:A5
Authority key identifier: 89:23:D7:02:24:B7:BD:3C:2A:7C:E7:DC:7A:87:C9:2A:D5:AF:F2:69
Certificate issuer: /CN=8923d70224b7bd3c2a7ce7dc7a87c92ad5aff269
Certificate serial: 0199FC2164749B66809BED3149D80F50DFBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 11:01:10 +0000
Manifest this update: Sun 19 Oct 2025 11:01:10 +0000
Manifest next update: Mon 20 Oct 2025 11:01:10 +0000
Files and hashes: 1: iSPXAiS3vTwqfOfceofJKtWv8mk.crl (hash: z5+KU3/Q8Q9Ptva9EWxSP3VicJp2ij/T+fhDItWa7yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:64:74:9b:66:80:9b:ed:31:49:d8:0f:50:df:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8923d70224b7bd3c2a7ce7dc7a87c92ad5aff269
Validity
Not Before: Oct 19 11:01:10 2025 GMT
Not After : Oct 20 11:01:10 2025 GMT
Subject: CN=8f699f03c3b002550f4f0818564680fc5d9c46a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:de:ec:1c:a7:75:bf:0e:cf:3c:7f:e7:a3:
0e:ce:f7:34:cd:1b:7a:fa:87:40:33:d6:f3:80:27:
81:1c:0a:34:28:f9:90:de:38:5c:20:84:00:a7:c7:
2d:4b:ff:39:1d:41:c2:5e:aa:09:6a:60:35:02:1a:
b3:f9:d5:73:d9:0a:2a:89:6c:64:91:c9:96:00:d0:
c0:89:70:66:91:5f:17:b9:40:47:66:5a:36:d1:ca:
0c:95:41:52:45:3c:85:07:9a:06:5e:6e:96:7c:70:
15:95:15:92:6d:bc:47:25:9f:24:46:88:df:e1:9c:
8a:51:19:a9:97:9b:2b:bb:e6:d7:5b:6d:88:f6:74:
59:cd:5f:7d:28:41:3d:80:34:56:f7:b6:fd:ee:4e:
5b:52:5d:e4:1a:93:ae:89:e0:9d:b6:f6:51:6f:8b:
d4:6f:d0:05:b1:38:c3:6f:ac:de:d1:50:6e:dd:f7:
2e:9f:b9:b2:65:52:43:78:30:09:da:26:dd:fb:d5:
94:d3:88:7d:db:6b:4a:42:89:00:4b:5e:7e:ec:b7:
26:97:25:6b:83:f9:ea:c5:5d:c9:de:6e:01:aa:e7:
2c:52:7b:a8:25:6d:36:b7:77:46:41:d4:ae:03:06:
a4:17:cc:63:50:74:8f:9d:67:71:7b:e1:6e:da:ce:
06:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:69:9F:03:C3:B0:02:55:0F:4F:08:18:56:46:80:FC:5D:9C:46:A5
X509v3 Authority Key Identifier:
keyid:89:23:D7:02:24:B7:BD:3C:2A:7C:E7:DC:7A:87:C9:2A:D5:AF:F2:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c6:6d:91:3c:34:33:e9:fc:c2:7d:79:ac:bc:9a:f7:82:ba:
ba:d0:0c:02:8a:67:cf:3a:e5:44:97:e9:08:93:51:58:f6:58:
90:88:0d:ff:16:e3:62:35:91:a9:76:13:c5:97:0d:88:57:ed:
aa:91:f4:34:b0:bd:55:57:c6:2c:73:4f:ee:aa:1c:e1:d1:af:
7d:db:44:59:cc:60:fa:be:37:3b:bb:5c:07:77:2d:23:bc:2b:
ab:26:45:49:52:c8:a4:4d:ae:64:e1:17:af:6a:17:6b:63:6d:
f6:21:aa:06:74:17:10:cc:2f:50:7c:b1:23:09:d6:b7:2a:68:
18:59:8f:66:0e:0b:ac:99:c9:b7:cb:f7:60:b7:7e:7c:c4:a6:
51:4f:89:06:ae:34:2d:ff:2a:d9:4f:4e:0b:1d:dd:3b:e0:9a:
23:e5:31:28:31:50:ef:54:ed:7b:fb:03:19:8b:a1:e6:aa:e7:
8f:c3:99:ce:b3:5a:50:27:55:ab:39:55:65:d4:1e:b4:ff:72:
7f:e9:a2:d9:43:18:de:8c:33:b6:c4:68:ea:1c:30:31:9b:b4:
50:66:80:70:e7:d6:0a:7e:23:9b:8b:fd:80:6a:78:2f:5e:12:
08:5f:20:ec:08:a1:f8:60:d5:40:d1:fa:78:37:7e:ef:b2:88:
e3:97:cd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:34:04 2025 by rpki-client