Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
File: IoNxG9erE9o9EfJbtXpPSDwfmaw.mft (raw, json)
Hash identifier: OTgHeFoW6IjDQm8ePr6Pfc6VDXYhQT9qOfsw008Kmnk=
Subject key identifier: CB:4F:D6:97:1F:8D:6E:FD:9B:82:3E:52:3D:6A:0F:1E:AA:D4:1D:A1
Authority key identifier: 22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
Certificate issuer: /CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Certificate serial: 019A4F2AF4132D580AD748E090718E437457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 14:00:06 +0000
Manifest this update: Tue 04 Nov 2025 14:00:06 +0000
Manifest next update: Wed 05 Nov 2025 14:00:06 +0000
Files and hashes: 1: IoNxG9erE9o9EfJbtXpPSDwfmaw.crl (hash: /5DigN5HdPu6yIlZf8IY89PGOmISP8jlP+LQ7vOCs+c=)
2: UsxT3pcVojJYP9Cu4db5XHBOA_A.roa (hash: IuC4o8xqUNTxh+TkbcEBFveFUP/SyyaXqWJ5U0z84Vw=)
3: uCJs3VfOd9XlMzz8RlxYwm6JR8g.roa (hash: aQ8GGeLzceXoLXJ/X0KURkE7J4DP5Ck+ioxtdgiJTwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2a:f4:13:2d:58:0a:d7:48:e0:90:71:8e:43:74:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Validity
Not Before: Nov 4 14:00:06 2025 GMT
Not After : Nov 5 14:00:06 2025 GMT
Subject: CN=cb4fd6971f8d6efd9b823e523d6a0f1eaad41da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7a:9d:49:5c:25:92:f1:f0:2c:cd:c6:a6:64:
77:2a:bc:36:ba:32:83:c5:4c:e8:50:33:6a:0b:94:
e1:73:10:62:d9:8d:90:8a:b4:a7:33:06:aa:87:91:
cc:4a:f2:44:38:67:34:b7:6f:a9:ff:fd:e9:8b:a6:
41:7a:7d:a6:a7:f0:fa:d5:01:09:17:59:7c:f8:b2:
34:13:15:78:04:6f:80:33:7f:d5:61:f2:c8:c0:7f:
21:65:fc:6b:47:b2:7b:55:c2:ee:0d:11:eb:34:a2:
b4:57:48:78:ab:6f:96:33:1a:03:f1:1a:f4:d4:d8:
e5:78:8a:e0:5e:f5:7b:11:09:a5:4b:76:9b:dc:cd:
87:46:06:3c:e5:ab:0c:01:0f:70:e3:4c:b0:11:eb:
af:3e:c6:0f:bd:c4:d8:1e:92:b4:27:0d:0d:ad:bb:
55:60:50:38:3a:57:88:b2:0b:d8:ef:06:63:8f:64:
ff:80:ad:74:64:8c:fa:59:da:28:38:84:05:54:4a:
cf:0e:22:2b:da:d1:4d:9c:a5:83:4c:ff:af:87:fe:
38:c7:45:5b:17:0c:29:9d:e0:36:d6:25:e0:5c:d0:
86:9b:19:cc:ff:92:32:d9:ef:77:44:d8:5e:d9:3e:
24:bb:ad:a4:3e:77:3e:ba:f6:d0:50:00:ae:06:2b:
e6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4F:D6:97:1F:8D:6E:FD:9B:82:3E:52:3D:6A:0F:1E:AA:D4:1D:A1
X509v3 Authority Key Identifier:
keyid:22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:de:67:bf:d5:57:b2:5a:cb:8c:b0:82:c5:ca:65:6a:4f:f4:
24:1b:b5:44:3e:0a:07:f8:3d:22:c3:13:1d:eb:38:16:77:ed:
08:a0:0a:57:bc:82:d2:fd:da:02:9f:07:89:66:9a:9a:f9:12:
34:88:57:ba:50:30:10:e1:17:c9:a5:7a:a6:d5:4a:af:fb:52:
c6:06:90:26:e2:3f:13:95:c6:0a:30:66:e1:16:60:38:cb:e2:
e9:72:25:c1:3d:42:04:4f:a1:35:9e:f9:ba:cf:60:9a:0e:d4:
be:07:8c:06:8c:f7:e0:f0:e5:4e:ca:f7:82:6c:c6:43:9d:19:
77:02:a1:4d:cf:ec:65:52:ec:90:ff:64:10:1d:77:c4:20:4c:
58:4d:db:8e:8a:cb:34:34:68:5a:4b:fa:46:8f:83:a3:bb:00:
e5:7a:65:bc:19:a2:ed:4b:89:4d:66:85:8b:6b:15:06:c5:11:
f1:52:14:81:a4:db:2a:c4:66:28:31:17:49:93:e0:58:95:46:
1a:ae:6a:91:c1:95:f3:06:fb:99:6a:d5:d8:d0:ad:48:ca:4a:
f4:b0:c9:30:e7:73:80:8e:b6:39:a1:04:c6:ad:cb:49:14:50:
fa:18:fe:43:81:78:83:cc:8b:47:70:c1:46:a1:98:9a:ec:da:
d5:96:0e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:43:50 2025 by rpki-client