Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
File: iXA6mCNRKxjRduNi6gI8qCR4TSI.mft (raw, json)
Hash identifier: uthQchWZ5e+4qaq/3Fgy/hmmtGN5S7LDejxQme1r+BE=
Subject key identifier: 34:06:BF:23:15:2A:99:A2:1F:6F:A0:F3:77:1B:81:F9:75:4A:E5:CE
Authority key identifier: 89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
Certificate issuer: /CN=89703a9823512b18d176e362ea023ca824784d22
Certificate serial: 0199FC8F9A27B3803BC99857ED65279F2D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 13:01:33 +0000
Manifest this update: Sun 19 Oct 2025 13:01:33 +0000
Manifest next update: Mon 20 Oct 2025 13:01:33 +0000
Files and hashes: 1: iXA6mCNRKxjRduNi6gI8qCR4TSI.crl (hash: 9GTT5BmzILq2J5+QOqG8v/BaH1eTil7aeyg07ZX+wPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:9a:27:b3:80:3b:c9:98:57:ed:65:27:9f:2d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89703a9823512b18d176e362ea023ca824784d22
Validity
Not Before: Oct 19 13:01:33 2025 GMT
Not After : Oct 20 13:01:33 2025 GMT
Subject: CN=3406bf23152a99a21f6fa0f3771b81f9754ae5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1b:01:f7:57:1b:17:20:f0:71:bf:93:6a:bf:
19:1c:13:a9:5e:93:d8:31:bc:ec:89:60:f0:53:66:
60:1e:70:aa:77:be:64:9b:58:e3:c2:dc:e9:7e:27:
3a:7c:f1:fb:58:47:51:16:f7:6d:54:9f:7a:f7:fc:
a2:9f:33:37:db:f2:36:27:2e:fa:60:06:bc:a5:48:
af:2f:1c:33:99:07:c8:05:dd:94:fa:f9:83:41:52:
45:b1:d6:5e:59:eb:3a:26:3b:0e:63:71:8e:ab:2d:
60:fb:9d:82:5d:63:fe:53:e3:1f:cb:93:25:92:42:
7c:05:e2:7c:7d:01:54:95:49:49:50:05:fa:c2:9a:
f6:43:9d:ff:69:eb:b1:b5:44:8f:ff:dd:d3:0d:69:
5c:36:11:20:5c:56:03:4e:fc:6d:a9:15:58:57:d3:
52:14:76:72:e4:53:29:23:87:dd:ce:3d:19:ed:2b:
fc:78:a3:64:d8:a4:87:1f:d2:9e:6b:2d:eb:6a:e5:
27:4c:93:2c:32:93:92:f3:f9:88:35:fd:de:e4:49:
0c:7d:c1:94:13:f8:02:60:5a:2d:12:69:2d:18:d7:
ba:fb:bb:e7:30:1d:3c:d9:bf:c8:fe:cb:13:80:d6:
c0:8f:8b:d2:21:c0:8d:94:ae:37:43:26:50:48:91:
0e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:06:BF:23:15:2A:99:A2:1F:6F:A0:F3:77:1B:81:F9:75:4A:E5:CE
X509v3 Authority Key Identifier:
keyid:89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e4:c7:1d:0d:19:37:b1:62:27:5a:34:91:45:cd:1a:1e:5e:
8d:43:96:a4:02:b2:47:9f:62:c4:12:d7:db:17:3e:c0:35:96:
34:3c:6a:eb:50:92:3a:56:00:3a:00:6c:db:0a:69:f9:98:f2:
43:99:e4:b5:f4:08:59:94:1f:59:cf:96:53:b7:4c:5c:f2:a6:
85:82:47:10:72:68:f8:47:88:a9:42:2e:9c:92:30:4b:ec:12:
ae:68:da:2b:4d:06:7e:1d:27:2d:4b:f5:86:97:4b:10:78:fb:
ba:63:ea:f4:01:08:8b:bf:0d:11:85:17:9e:25:6a:1b:88:53:
fa:21:f1:d9:12:70:ea:ed:16:54:e4:3c:1e:a7:4f:1c:5e:03:
48:0b:cd:07:bf:70:c2:f4:87:d9:ec:19:b5:77:aa:f6:3f:40:
c1:e7:79:67:cc:b2:a8:05:d7:bb:ca:34:df:26:a1:18:b4:a9:
3e:25:2e:3d:e0:ea:79:ab:72:ea:25:39:4f:47:8e:ae:8e:db:
74:91:be:04:14:0c:51:a5:20:d8:9a:8f:bf:2f:64:ff:ea:08:
2d:01:5c:35:23:88:67:30:d8:9b:1a:58:cc:23:10:af:f9:e8:
ec:3a:2e:10:59:a9:33:d4:66:cd:92:74:75:80:fd:a9:e1:27:
d2:e7:d9:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j5ons4A7yZhX7WUnny1KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NzAzYTk4MjM1MTJiMThkMTc2ZTM2MmVhMDIzY2E4MjQ3
ODRkMjIwHhcNMjUxMDE5MTMwMTMzWhcNMjUxMDIwMTMwMTMzWjAzMTEwLwYDVQQD
EygzNDA2YmYyMzE1MmE5OWEyMWY2ZmEwZjM3NzFiODFmOTc1NGFlNWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBsB91cbFyDwcb+Tar8ZHBOpXpPY
MbzsiWDwU2ZgHnCqd75km1jjwtzpfic6fPH7WEdRFvdtVJ969/yinzM32/I2Jy76
YAa8pUivLxwzmQfIBd2U+vmDQVJFsdZeWes6JjsOY3GOqy1g+52CXWP+U+Mfy5Ml
kkJ8BeJ8fQFUlUlJUAX6wpr2Q53/aeuxtUSP/93TDWlcNhEgXFYDTvxtqRVYV9NS
FHZy5FMpI4fdzj0Z7Sv8eKNk2KSHH9Keay3rauUnTJMsMpOS8/mINf3e5EkMfcGU
E/gCYFotEmktGNe6+7vnMB082b/I/ssTgNbAj4vSIcCNlK43QyZQSJEOuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQGvyMVKpmiH2+g83cbgfl1SuXOMB8GA1UdIwQY
MBaAFIlwOpgjUSsY0XbjYuoCPKgkeE0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVhBNm1DTlJLeGpSZHVOaTZnSThxQ1I0VFNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC82ODFlMWUtN2YzZi00ZWE4LWFmMzAt
NTIyNjkwYmU1NDhkLzEvaVhBNm1DTlJLeGpSZHVOaTZnSThxQ1I0VFNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC82ODFlMWUtN2YzZi00ZWE4LWFmMzAtNTIyNjkwYmU1NDhk
LzEvaVhBNm1DTlJLeGpSZHVOaTZnSThxQ1I0VFNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOTHHQ0Z
N7FiJ1o0kUXNGh5ejUOWpAKyR59ixBLX2xc+wDWWNDxq61CSOlYAOgBs2wpp+Zjy
Q5nktfQIWZQfWc+WU7dMXPKmhYJHEHJo+EeIqUIunJIwS+wSrmjaK00Gfh0nLUv1
hpdLEHj7umPq9AEIi78NEYUXniVqG4hT+iHx2RJw6u0WVOQ8HqdPHF4DSAvNB79w
wvSH2ewZtXeq9j9Awed5Z8yyqAXXu8o03yahGLSpPiUuPeDqeaty6iU5T0eOro7b
dJG+BBQMUaUg2JqPvy9k/+oILQFcNSOIZzDYmxpYzCMQr/no7DouEFmpM9RmzZJ0
dYD9qeEn0ufZAg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:18 2025 by rpki-client