Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft
File: idSzdf1Mr9XfusQG3SWmHSLdNso.mft (raw, json)
Hash identifier: dHCEMEnMrM74mi3zFES08oFNsuII/q4f8VTU/+S6UEk=
Subject key identifier: 29:EB:D6:B7:A2:CB:0C:A0:F6:04:C2:61:A2:AB:65:99:41:15:29:A8
Authority key identifier: 89:D4:B3:75:FD:4C:AF:D5:DF:BA:C4:06:DD:25:A6:1D:22:DD:36:CA
Certificate issuer: /CN=89d4b375fd4cafd5dfbac406dd25a61d22dd36ca
Certificate serial: 0199FBEB5A0693BD7BE9C8D474F81323E8A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idSzdf1Mr9XfusQG3SWmHSLdNso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft
Manifest number: 125F
Signing time: Sun 19 Oct 2025 10:02:09 +0000
Manifest this update: Sun 19 Oct 2025 10:02:09 +0000
Manifest next update: Mon 20 Oct 2025 10:02:09 +0000
Files and hashes: 1: idSzdf1Mr9XfusQG3SWmHSLdNso.crl (hash: cH+VRynYzQXNhBPBdnwwbU0piL74Sf5cXEvULKiyMwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft
rsync://rpki.ripe.net/repository/DEFAULT/idSzdf1Mr9XfusQG3SWmHSLdNso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:5a:06:93:bd:7b:e9:c8:d4:74:f8:13:23:e8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d4b375fd4cafd5dfbac406dd25a61d22dd36ca
Validity
Not Before: Oct 19 10:02:09 2025 GMT
Not After : Oct 20 10:02:09 2025 GMT
Subject: CN=29ebd6b7a2cb0ca0f604c261a2ab6599411529a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1d:af:d1:e4:1f:47:b2:52:bf:68:0b:3a:fd:
28:c6:89:c2:55:00:bd:12:61:26:1d:b4:b3:66:74:
c4:37:e3:4a:41:b2:f1:d9:36:64:18:10:f8:0f:0e:
0a:40:d6:21:9a:c6:28:59:ef:8e:2c:17:1d:e1:48:
44:a6:8e:5d:9f:ae:89:5e:5f:5c:95:eb:52:3a:eb:
99:8d:02:56:49:76:42:72:77:65:1e:01:7c:8c:ee:
09:ea:43:4a:92:c8:a5:57:9a:cc:c5:9d:69:be:7b:
ec:53:74:a6:24:8a:a8:cb:5e:d8:f0:e5:2d:65:90:
86:84:13:09:4e:fe:83:f7:66:95:f5:1b:8d:21:a0:
88:a2:0b:df:d0:aa:1d:be:7d:1b:ff:10:3a:9f:c8:
2f:1a:e0:d3:a2:d8:0b:78:26:1b:5e:3e:f3:ba:16:
2c:10:8e:9c:f3:a7:58:b1:20:6f:59:82:57:08:ab:
bd:87:97:81:8d:73:01:f2:d2:17:b6:44:cb:da:d0:
74:ee:ee:8e:61:55:6e:3d:8e:6b:3e:7b:8e:4e:78:
0c:94:73:a7:05:d0:6a:8b:c4:cf:12:aa:15:ee:13:
a7:d4:af:21:26:b1:09:0c:7f:b3:2b:7e:3b:1d:b8:
79:fc:5c:8c:c4:74:58:01:5a:2d:be:0f:db:38:a9:
e0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EB:D6:B7:A2:CB:0C:A0:F6:04:C2:61:A2:AB:65:99:41:15:29:A8
X509v3 Authority Key Identifier:
keyid:89:D4:B3:75:FD:4C:AF:D5:DF:BA:C4:06:DD:25:A6:1D:22:DD:36:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idSzdf1Mr9XfusQG3SWmHSLdNso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bcad8d-8e55-4a81-b393-274251252077/1/idSzdf1Mr9XfusQG3SWmHSLdNso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:05:f7:4f:60:1d:d3:9c:23:48:ef:d9:19:3e:66:02:c7:49:
2f:c8:ca:fb:3f:60:2c:21:cc:ff:c6:83:b6:93:e2:c6:d3:25:
41:08:04:3b:49:f6:a5:ba:a1:77:f4:b6:b7:4f:5c:8a:34:d1:
36:f1:3a:f9:35:3d:11:3c:ef:07:65:6f:ef:f3:36:bc:c9:ce:
26:b6:4d:d8:33:e1:04:f8:eb:a7:14:09:da:c3:fb:5e:e8:c4:
da:c5:01:79:b4:c7:38:53:f3:a3:fd:04:30:61:0f:27:18:da:
ee:87:f8:bc:19:40:e3:25:22:8c:c1:ec:d6:83:89:dd:c0:fb:
04:c3:63:c1:ad:e3:91:c1:16:8e:f7:68:1a:b1:85:57:44:2f:
05:42:74:67:3b:25:65:09:6f:87:dd:18:e5:73:6a:83:cf:aa:
43:ca:2b:fd:af:21:69:64:c0:9a:a7:ad:d5:4a:2a:21:0f:b8:
0b:26:78:d3:94:b0:34:3e:77:f5:a9:44:76:33:29:9c:59:71:
b8:eb:ac:75:03:a8:7d:13:8a:5a:d7:8f:36:d9:99:64:9f:0f:
f7:a3:6f:d1:23:63:a6:ce:1f:34:aa:0b:39:0b:d0:a2:71:ac:
38:5a:c3:4a:86:8a:ca:fa:ab:d4:b0:41:43:e6:1a:bd:3f:dc:
c9:70:e5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:05 2025 by rpki-client