Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
File: I0tEmJRYnRb2dr_ygqvtqlbMe40.mft (raw, json)
Hash identifier: vdu/iRZIIew7suft7WcnED5gjBxOhBGrNd8UUUu3Hs4=
Subject key identifier: 65:F1:DE:05:3B:60:3D:F0:A1:3C:6D:5E:B9:20:E0:E2:51:8E:FC:C0
Authority key identifier: 23:4B:44:98:94:58:9D:16:F6:76:BF:F2:82:AB:ED:AA:56:CC:7B:8D
Certificate issuer: /CN=234b449894589d16f676bff282abedaa56cc7b8d
Certificate serial: 019A4F61FFE98671A5B081890CF55C7492E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
Manifest number: 0749
Signing time: Tue 04 Nov 2025 15:00:13 +0000
Manifest this update: Tue 04 Nov 2025 15:00:13 +0000
Manifest next update: Wed 05 Nov 2025 15:00:13 +0000
Files and hashes: 1: EBtcNhOJ92IGPVl-KdrFygnNVn4.roa (hash: Ykla49kgLw0fjmlAc5cpzOXx1fYgIVxrEDqc3yCSjAA=)
2: I0tEmJRYnRb2dr_ygqvtqlbMe40.crl (hash: H2t70W9E3uYYJMb6hT2XTbUZ/l9lDg4Xh3mEs5UfaDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:ff:e9:86:71:a5:b0:81:89:0c:f5:5c:74:92:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b449894589d16f676bff282abedaa56cc7b8d
Validity
Not Before: Nov 4 15:00:13 2025 GMT
Not After : Nov 5 15:00:13 2025 GMT
Subject: CN=65f1de053b603df0a13c6d5eb920e0e2518efcc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:58:28:f3:47:fe:d3:de:08:d9:b5:ab:55:8e:
3c:db:d1:6d:90:c7:8e:63:45:ab:7a:e5:7d:1b:31:
fd:95:82:52:0a:c0:3c:e9:0c:6d:14:7a:2a:ea:b1:
1b:5b:24:d1:10:aa:6f:23:da:3b:87:fc:ae:3f:33:
5a:45:19:a9:c6:8c:bc:be:95:1e:8a:74:a1:b8:83:
5e:a7:c8:0f:bd:2f:47:a4:51:4d:e7:9a:b9:fd:f1:
fe:82:b1:98:31:5c:8f:63:d6:16:b0:ea:cd:ea:46:
24:93:45:64:20:32:a1:b7:0d:12:6b:0d:af:8a:1d:
06:34:0c:d2:07:a4:fe:72:67:6c:16:e0:bb:30:ed:
d5:b6:e0:5f:79:cc:f0:6b:10:c7:58:61:7b:5e:25:
3e:3a:bf:fb:58:b4:97:79:a0:f9:1a:3d:32:cb:51:
59:c7:30:11:7e:a2:19:2c:8e:b3:2b:f4:0c:6c:3a:
74:8b:b0:8c:c8:be:19:9c:89:83:58:6e:58:0d:fe:
d8:3a:d5:bd:33:56:25:62:d4:37:ef:ef:da:df:d6:
7b:e5:f5:dc:f5:09:8f:47:bd:55:b0:08:eb:c6:e0:
f9:11:51:ba:db:85:33:ae:07:66:d3:20:30:16:5a:
b1:0b:8e:56:9b:94:86:91:de:9f:bb:1f:f1:70:38:
75:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F1:DE:05:3B:60:3D:F0:A1:3C:6D:5E:B9:20:E0:E2:51:8E:FC:C0
X509v3 Authority Key Identifier:
keyid:23:4B:44:98:94:58:9D:16:F6:76:BF:F2:82:AB:ED:AA:56:CC:7B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e1:4f:93:98:b7:82:d3:ff:34:fb:c8:03:9e:a5:9f:05:9f:
4a:fe:f0:dc:cf:1f:76:60:f5:3f:4f:3a:83:e5:01:5c:2e:aa:
9e:07:de:cd:65:7f:6f:c9:e4:a6:be:ee:d9:a5:61:51:5a:16:
2e:0e:d8:8f:73:5b:04:a2:91:c2:0e:64:89:b7:05:97:9f:64:
b1:3c:1b:58:c6:0f:78:92:2c:64:21:a6:02:44:22:dd:f1:cb:
44:e9:bc:53:0f:4c:7c:ce:dd:1d:d3:c5:5a:89:6b:8b:53:83:
9b:15:8d:2d:bd:f4:35:f3:c0:d3:6e:fe:94:88:6a:9f:b0:2b:
5d:01:a7:bd:a7:97:dc:b8:c7:38:4d:c7:dc:5d:6b:4c:69:b3:
96:85:20:04:42:0b:19:2e:c6:97:c3:0c:62:fe:3b:6f:37:b2:
21:df:dc:db:06:b8:6e:97:1a:99:65:90:8f:bd:4c:7c:1e:b6:
b9:fc:9d:dd:b9:67:d3:c2:6d:56:f7:33:23:7e:e7:fd:9d:8e:
ce:e9:0b:9d:c2:80:10:9f:10:ee:0a:63:1a:a3:7c:6f:29:05:
41:a8:ee:a4:89:c3:47:87:05:18:61:d3:ad:33:34:a2:7f:ce:
ac:5f:ce:44:3f:85:32:8d:0c:56:11:b0:a3:bb:f5:75:3c:67:
3d:f4:d7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:30 2025 by rpki-client