Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
File: Ib-nezzXgpM-XyVURdQorfvcoOE.mft (raw, json)
Hash identifier: 16EqOoWdQzKGNsk9fX+IUDndI3pHpDCbczpOfv0nMu8=
Subject key identifier: A6:3F:F1:0E:77:81:16:39:DB:F3:4C:6B:4F:5D:20:8D:4B:58:80:AD
Authority key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
Certificate issuer: /CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Certificate serial: 019A4E864C18F30070807EA696B4B5E4F9A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 11:00:15 +0000
Manifest this update: Tue 04 Nov 2025 11:00:15 +0000
Manifest next update: Wed 05 Nov 2025 11:00:15 +0000
Files and hashes: 1: 4lN9UMCt9-jT04o2voesNzfPwGs.roa (hash: t3RT/PpcRecUqHyCeVTaRV/4YmAPhY6KAKsv8Og5F9U=)
2: ACmM5xMJG5d1YVOZ4RZKGVZYg9k.roa (hash: Fvp/3zg9VXW0brdKzJ0fdm3mkA4lR5zaksqsabjZcF4=)
3: Ib-nezzXgpM-XyVURdQorfvcoOE.crl (hash: M1poJSAaI/07p8yswT2Rz24e7cld1KK59m36ZvAtST4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:4c:18:f3:00:70:80:7e:a6:96:b4:b5:e4:f9:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Validity
Not Before: Nov 4 11:00:15 2025 GMT
Not After : Nov 5 11:00:15 2025 GMT
Subject: CN=a63ff10e77811639dbf34c6b4f5d208d4b5880ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c2:51:0c:5c:10:10:03:c1:d3:54:d0:79:26:
de:aa:ba:27:a9:94:22:8e:78:8d:5a:b2:e9:2e:2a:
ad:af:58:5f:12:f5:88:39:5a:15:c8:01:ad:fc:19:
90:ae:dd:ed:e2:93:a9:ce:7a:9a:9d:3a:dd:64:04:
5a:b9:80:ec:f5:4d:e9:df:02:70:0f:0f:bc:db:6f:
cb:c9:30:87:68:c8:97:d2:08:be:0f:d4:81:65:e5:
60:2e:1a:fc:06:24:37:99:d1:13:5b:c0:a0:72:64:
01:cb:4d:4e:58:d9:f7:f0:0e:23:d5:b9:4a:e4:3f:
3f:12:2c:7a:d6:e6:0d:c8:c6:39:be:b5:0b:6c:aa:
66:70:67:2f:87:ac:46:3c:17:74:d8:9e:bb:9f:7d:
b3:8a:45:58:ac:11:b9:e2:92:09:84:62:f1:c0:5f:
ec:50:c5:c1:8d:69:82:37:d4:81:e3:d6:dd:5d:1b:
59:34:a8:6d:63:6c:4b:d9:37:c3:82:eb:14:86:cd:
6b:fb:0a:a3:fc:e0:65:ae:d0:73:6b:43:8b:5d:f5:
d3:db:83:b4:85:0e:9d:37:98:e5:be:32:31:70:ac:
a3:8e:46:15:b0:41:c7:2d:61:7a:5b:36:e2:b5:11:
a8:73:5a:55:60:0a:4f:d6:a9:fd:b1:49:c1:18:4e:
7b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3F:F1:0E:77:81:16:39:DB:F3:4C:6B:4F:5D:20:8D:4B:58:80:AD
X509v3 Authority Key Identifier:
keyid:21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:74:be:ed:ba:da:91:d6:04:be:11:14:e2:63:6c:10:f5:bf:
d4:24:c9:31:90:0c:45:b2:16:be:99:27:7b:b1:bd:b6:5b:c7:
ce:a8:30:6a:18:df:fe:2c:71:16:e7:12:c4:f5:0d:cc:58:50:
46:33:3f:76:ab:a2:e9:c1:6a:b1:6b:fc:aa:1d:89:19:27:b8:
ec:ae:17:c5:ed:5d:02:89:39:2f:f7:25:f8:0a:b8:2c:e4:e9:
c2:d2:66:e7:62:98:e9:01:61:6b:de:d7:14:20:6c:2a:89:74:
ac:f6:88:2c:91:13:8d:63:3c:af:40:69:bc:06:d2:6d:e3:f5:
b0:b2:de:42:6a:f2:2c:1e:53:8e:7c:e7:51:4c:c5:d9:87:0e:
e0:87:c9:14:b0:61:8a:db:eb:38:49:5a:8a:e5:1b:7e:d3:ec:
c2:bb:a7:7d:bd:f9:bf:3b:04:e4:ab:06:ac:6b:62:1c:c4:1e:
33:9c:9c:d7:f5:60:12:1d:f2:db:0a:a6:e4:b3:28:18:38:dd:
38:e6:31:60:3e:7d:3f:94:67:43:b0:7e:44:83:d8:39:a1:98:
d4:a9:ea:89:85:37:8f:34:4b:ef:30:b0:fe:e6:ef:d1:97:0c:
d2:08:c9:95:09:66:02:eb:4e:9a:90:c1:11:dc:b1:82:21:59:
b5:47:57:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:46 2025 by rpki-client