Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
File: iYh94B2LHL1Qt126yRM59mF6TYo.mft (raw, json)
Hash identifier: oh0lkqVke3rbXbyg2IjCnMY5ea5Jb/P5UwKtxZLnSrs=
Subject key identifier: 7F:C8:4C:BE:A7:67:A5:A9:E5:AE:71:4D:DF:3E:A4:EF:0B:27:B8:CB
Authority key identifier: 89:88:7D:E0:1D:8B:1C:BD:50:B7:5D:BA:C9:13:39:F6:61:7A:4D:8A
Certificate issuer: /CN=89887de01d8b1cbd50b75dbac91339f6617a4d8a
Certificate serial: 0199FC5881D39A4FA211392F6D0F4F13155A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
Manifest number: 15B8
Signing time: Sun 19 Oct 2025 12:01:22 +0000
Manifest this update: Sun 19 Oct 2025 12:01:22 +0000
Manifest next update: Mon 20 Oct 2025 12:01:22 +0000
Files and hashes: 1: iYh94B2LHL1Qt126yRM59mF6TYo.crl (hash: ZXIuKALJ6YgAcFI66TmKif+TU4LnGIg1Giz8mOceUk8=)
2: jAe0olQrTlqlwekCa7zU__XvOnI.roa (hash: lpxqZITJHJnTC06LkfUlinyvWGfnxykj2N1zFv1cD0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:81:d3:9a:4f:a2:11:39:2f:6d:0f:4f:13:15:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89887de01d8b1cbd50b75dbac91339f6617a4d8a
Validity
Not Before: Oct 19 12:01:22 2025 GMT
Not After : Oct 20 12:01:22 2025 GMT
Subject: CN=7fc84cbea767a5a9e5ae714ddf3ea4ef0b27b8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5f:82:d3:0f:0b:36:6e:2f:64:31:bb:91:5e:
c3:e4:75:45:9f:33:3b:df:92:f4:e6:8b:90:bc:3d:
83:bc:8f:ea:30:e8:d5:b5:1d:3a:03:12:5b:70:cc:
68:e7:c7:2c:3c:a3:5f:7a:cc:de:ce:a8:f6:42:1f:
af:3b:93:f9:35:44:d1:b2:d2:74:89:92:80:2c:bb:
eb:c1:11:bf:3d:ad:a5:62:9a:ec:cc:95:0d:31:13:
ac:c5:29:d0:3e:b8:93:12:d4:71:b5:f2:58:36:22:
29:a5:13:69:19:ed:f9:25:4f:64:0e:ea:a0:2a:10:
e5:51:7a:c0:69:19:07:13:d9:3c:f0:2d:5d:e6:bb:
e5:ea:19:51:ca:9f:b5:f3:88:53:19:2b:d3:fe:1a:
c9:e5:65:ad:d2:14:e2:f2:d6:bd:c3:fc:80:8b:17:
04:c2:ad:88:d1:04:22:57:69:7f:29:da:8c:40:30:
5a:ef:d8:bf:d8:8b:64:54:d2:d5:3f:00:dd:32:c8:
45:ae:61:bb:98:f1:69:eb:47:a8:8d:9c:fb:9e:b2:
12:66:73:5c:f9:8e:d2:55:c8:3c:dd:6b:04:34:8d:
ae:94:20:c7:3f:90:75:28:8c:14:83:17:99:d0:7e:
38:ab:ef:70:67:60:53:37:f6:fd:51:c9:68:9d:9d:
5f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C8:4C:BE:A7:67:A5:A9:E5:AE:71:4D:DF:3E:A4:EF:0B:27:B8:CB
X509v3 Authority Key Identifier:
keyid:89:88:7D:E0:1D:8B:1C:BD:50:B7:5D:BA:C9:13:39:F6:61:7A:4D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:38:86:85:43:bc:2e:67:a4:2e:42:3e:e0:6f:19:f1:46:b0:
f3:65:d5:11:69:9e:40:fc:7e:e4:e1:d8:15:30:fc:b6:4b:1f:
7d:a8:04:9c:6a:61:be:6d:e0:6b:9e:b9:b9:d4:ec:0c:16:e9:
9c:67:f9:4b:4e:d1:4b:f5:62:75:a5:1d:62:4f:98:f5:c7:83:
e9:77:08:ec:76:fe:26:cf:ae:dd:31:dc:4f:9c:4d:81:9c:ad:
6d:c9:8b:5b:f4:b6:aa:af:fe:b0:75:d9:6f:e5:b1:0d:d2:cf:
64:3b:39:70:a3:22:8c:ec:a4:fc:d1:c7:76:9f:cf:fb:66:8f:
01:b6:9d:13:39:3d:86:17:45:31:61:18:69:52:ba:2b:70:f5:
55:b9:0b:0b:a6:0e:76:ef:6f:49:50:de:f5:75:22:79:5f:92:
ed:f5:1a:f0:27:29:6a:c5:51:77:cf:42:a9:de:4f:3c:f0:1c:
27:8d:22:ef:bd:97:a6:13:79:4d:d1:cf:72:f0:87:ab:be:a1:
b5:74:74:07:79:91:0b:41:09:f9:bc:a6:95:bf:cb:53:08:99:
59:a5:39:3a:0e:a6:0c:13:97:73:92:4d:b9:eb:0e:6d:05:02:
b5:90:71:7d:52:67:5f:bf:87:ec:2f:83:9f:41:0c:3e:51:9e:
ad:f9:c1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:30 2025 by rpki-client