Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
File: I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft (raw, json)
Hash identifier: lxd3IMFIk2LB7eUqU4S/LkzmufFc2C2e1FfOseaa+WY=
Subject key identifier: 4C:EE:E0:AC:A0:81:DD:22:80:99:9B:4E:3F:B5:18:E0:B9:84:27:06
Authority key identifier: 23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A
Certificate issuer: /CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a
Certificate serial: 019A571BF0D3777B6EFE7A254E624DE86F18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
Manifest number: 040A
Signing time: Thu 06 Nov 2025 03:00:39 +0000
Manifest this update: Thu 06 Nov 2025 03:00:39 +0000
Manifest next update: Fri 07 Nov 2025 03:00:39 +0000
Files and hashes: 1: I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl (hash: 40fCQp4U6B3gAqR8b0NPCJ7JnuY6qaZ+uk5aLqZ7C+o=)
2: j4EIa7tKAt7zUJqXstTzU7rzvAM.roa (hash: KBhYqMx9SY3f4s8BMjZo/0KJeCGNnKyC4D8ert+K2y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:1b:f0:d3:77:7b:6e:fe:7a:25:4e:62:4d:e8:6f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a
Validity
Not Before: Nov 6 03:00:39 2025 GMT
Not After : Nov 7 03:00:39 2025 GMT
Subject: CN=4ceee0aca081dd2280999b4e3fb518e0b9842706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:49:fb:47:43:a2:be:c4:03:c7:21:c8:d9:0e:
ee:a9:1a:d9:7c:61:4d:90:a9:78:b0:e6:97:ae:48:
aa:53:87:ea:5d:65:7c:6d:59:0c:6e:10:d2:b2:6f:
44:ca:0e:ac:ed:f8:c9:94:76:ad:8e:85:55:5e:bb:
52:a1:28:e9:fa:b1:09:67:47:98:94:f6:0e:06:2d:
1c:07:69:1d:f9:08:de:51:ca:b4:26:f5:43:cc:86:
68:00:04:bb:d2:83:1f:2c:bd:39:96:52:8d:58:88:
68:76:95:f5:a8:9e:4c:b9:d6:2b:c2:a1:c9:aa:56:
cf:c8:eb:da:3a:57:e8:30:da:8e:6d:ac:21:9f:a4:
4a:f2:5e:9d:4f:c5:7f:28:0a:e2:a6:69:24:8a:35:
4e:8d:70:6b:a7:7c:f5:a8:a0:0d:02:63:6f:05:ed:
83:f6:75:4f:b8:88:45:0b:54:ea:3a:37:df:2f:07:
ef:37:81:dc:45:5a:63:75:07:35:c3:6d:5e:bf:38:
15:d8:e7:6a:74:c9:dd:d1:90:29:61:54:8f:59:4d:
37:6c:3a:3b:4a:b9:e1:17:a8:43:24:c7:d8:9b:09:
ee:75:cd:90:06:d6:65:aa:31:b0:b6:4a:ee:87:12:
69:0e:76:43:54:af:f3:29:08:0f:dd:13:5a:89:1c:
c8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EE:E0:AC:A0:81:DD:22:80:99:9B:4E:3F:B5:18:E0:B9:84:27:06
X509v3 Authority Key Identifier:
keyid:23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:eb:bb:2e:ab:13:83:0b:63:cc:8b:17:e6:de:30:cb:a3:ca:
4d:60:39:07:ac:02:d1:81:02:75:68:7b:49:2e:ba:25:d2:05:
b5:f3:2c:c2:fc:3a:65:a4:c2:2f:50:29:8e:89:d9:24:aa:b4:
e1:59:21:f7:90:20:ac:74:f4:d2:e5:26:09:4c:3a:b7:7c:9a:
fe:7e:e3:b1:29:67:70:14:c5:09:ac:53:77:a3:d6:25:b3:f4:
fd:bf:34:55:5f:fb:22:ed:df:92:0f:1c:7c:68:3e:30:05:ac:
4d:1a:88:6f:47:2c:14:5a:94:00:c0:c1:71:16:36:60:5a:e5:
df:3d:b1:1f:07:84:28:61:29:28:9c:fb:02:aa:3b:28:02:7f:
82:a0:de:ac:fb:53:19:86:50:5e:e6:c3:41:42:ea:30:07:d1:
c0:cf:04:c4:9e:d7:64:66:6b:42:5a:70:2b:16:7b:ca:b5:31:
14:7c:a3:ef:52:24:2b:3f:c6:60:e4:69:79:4c:ef:c7:ff:fc:
ad:9a:77:3a:ce:9c:6d:41:c7:f1:28:7c:e2:b0:b6:19:02:91:
48:4e:41:c6:c6:17:13:f2:8e:12:5f:77:3b:cf:7b:76:51:61:
0d:d0:9e:82:ed:a1:1c:55:1d:b3:ff:7e:a7:c6:db:55:9c:eb:
95:4b:6e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:08:51 2025 by rpki-client