Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
File: i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft (raw, json)
Hash identifier: B0Qm6DFh8E0x4p/LGPhJETxTCehyhXSOHba+DAoQIw0=
Subject key identifier: EE:15:7A:26:A1:E6:5D:8D:71:20:64:BE:4E:5C:74:64:43:C3:B9:24
Authority key identifier: 8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
Certificate issuer: /CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Certificate serial: 019A4EF5BE92069204CA05DFB6731FEEA6AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:01:59 +0000
Manifest this update: Tue 04 Nov 2025 13:01:59 +0000
Manifest next update: Wed 05 Nov 2025 13:01:59 +0000
Files and hashes: 1: FE1p8xqk22ZLL8TtVpBgIJ5HCYk.roa (hash: EEjSbBj9sFsFeIYvGJ66Mb2B5f9wjNh8P6NHIHv03o4=)
2: Nj_g5XagzgChnaGJmyAjIxliPxQ.roa (hash: 2T2yAo36kvnreO/zfmG7HDMPjTZHcC33NYqG6yteeqQ=)
3: i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl (hash: 17LpmxS16vj82k3dM3P/sR0Li13NqBDZ+pFUYtI0aBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:be:92:06:92:04:ca:05:df:b6:73:1f:ee:a6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Validity
Not Before: Nov 4 13:01:59 2025 GMT
Not After : Nov 5 13:01:59 2025 GMT
Subject: CN=ee157a26a1e65d8d712064be4e5c746443c3b924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:80:21:4e:ea:62:ed:28:96:59:75:dc:47:d2:
7f:85:28:27:dd:d0:c4:23:b8:67:2e:a0:7f:a3:d0:
a4:81:b0:e3:8e:96:1d:f4:a3:6a:ab:79:b4:f0:15:
f4:80:0d:04:e6:ea:62:2d:b4:02:9e:00:de:58:16:
0d:4b:16:72:0d:50:fd:c0:fa:6c:ad:dc:ba:0b:df:
d1:cb:c4:ec:f2:a4:74:73:cd:29:a7:4d:48:2d:07:
da:94:e0:df:c9:38:b2:e4:8f:1b:50:0e:5c:a1:70:
65:f6:30:4a:72:21:23:d8:8f:71:6e:e1:de:67:3c:
63:cf:46:7c:44:ad:e9:a9:a5:e4:e5:8c:b1:cc:d5:
b1:e3:6f:de:13:9b:59:18:e8:2d:34:11:63:7e:ab:
33:54:1b:49:63:f3:80:34:c5:3d:08:fb:f3:8d:c4:
43:34:1d:8d:51:26:63:e1:13:3d:08:c7:7e:12:2b:
e0:6d:e2:c5:5e:9b:a7:e2:63:5b:62:08:26:7b:2d:
52:81:76:d9:38:bf:79:bf:49:63:6b:55:5b:db:03:
16:37:98:17:6a:58:db:c5:9d:23:eb:f2:3d:dd:75:
87:f0:fb:81:37:d9:19:95:62:25:0c:83:f0:d8:80:
bf:1d:0f:93:db:a5:5a:d1:b4:96:13:7d:1b:b4:a8:
94:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:15:7A:26:A1:E6:5D:8D:71:20:64:BE:4E:5C:74:64:43:C3:B9:24
X509v3 Authority Key Identifier:
keyid:8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:4f:0b:df:a0:16:d4:af:a4:4b:ac:62:41:13:e7:0c:53:37:
a6:94:75:41:58:df:a9:4d:ae:23:3f:64:5e:a3:5c:8e:61:52:
bc:0d:04:b5:30:00:d5:43:e1:ff:f5:09:df:90:a5:73:a2:28:
46:76:a1:d9:ef:86:a0:65:f2:a2:5d:47:97:5a:c6:39:1a:6c:
10:24:65:a3:d5:82:39:ae:dc:9f:da:88:33:59:1d:e0:8d:d8:
25:d3:e8:1d:26:81:27:1c:93:d7:39:d8:17:e9:2b:9b:d9:7d:
67:54:9d:f7:1c:8d:48:d6:4d:28:c0:36:57:3b:3b:90:ea:81:
f3:34:42:c4:bc:6e:bb:0c:c0:e4:ce:50:c7:3b:63:88:1d:11:
ec:a9:07:e9:70:45:0b:8e:f5:fe:75:1b:ac:59:46:5f:52:bf:
c6:fa:82:a6:14:80:25:94:8b:7b:88:52:43:87:2f:cf:7b:dc:
97:2d:32:e6:4c:bf:93:6f:7b:5f:ce:a4:e1:bb:5d:1a:67:a9:
e6:79:e8:88:7f:7a:c4:3f:a4:5e:eb:cb:62:58:b2:c4:71:31:
27:d9:db:35:9c:67:5d:59:0f:ac:2a:05:c7:7f:c7:72:cf:f0:
38:57:88:f7:e9:8e:53:9c:f4:70:ce:ce:c4:c9:d9:a5:d3:0c:
a1:67:e1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:32:38 2025 by rpki-client