Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
File: iIx7lGQtLku_uVg62UH1HrjEVkA.mft (raw, json)
Hash identifier: U0zRH72IWmUIyoGbfWHKOaXfEYdowGysfTNe3qzDeHk=
Subject key identifier: 38:C8:07:EC:B6:D6:C6:3C:E2:EA:2C:DA:CA:17:82:9F:6C:AF:F4:4E
Authority key identifier: 88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40
Certificate issuer: /CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640
Certificate serial: 019A4F62C7B6265A350D6F00329F9D6EC69A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
Manifest number: 1108
Signing time: Tue 04 Nov 2025 15:01:04 +0000
Manifest this update: Tue 04 Nov 2025 15:01:04 +0000
Manifest next update: Wed 05 Nov 2025 15:01:04 +0000
Files and hashes: 1: cuExqJqxDerCAtylcJmCrVbgef4.roa (hash: 598WR0Sv6MZYZg5mTZECmrWO2D4wIr/fUZ49xt8Yu9Q=)
2: iIx7lGQtLku_uVg62UH1HrjEVkA.crl (hash: 0y0DMaBoWAGyM6g8gX0tCOZzxnjfrspV1uIdpnzKsp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:c7:b6:26:5a:35:0d:6f:00:32:9f:9d:6e:c6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640
Validity
Not Before: Nov 4 15:01:04 2025 GMT
Not After : Nov 5 15:01:04 2025 GMT
Subject: CN=38c807ecb6d6c63ce2ea2cdaca17829f6caff44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ab:63:34:17:27:eb:34:be:cd:e5:e1:23:e4:
6c:0b:5e:c2:bc:22:ea:65:e6:03:33:f2:ed:c2:10:
73:dc:31:69:4c:e1:0b:4f:91:74:a2:05:81:30:b5:
74:9f:50:4c:62:27:00:49:f6:5b:0f:0c:28:c0:56:
12:95:13:3a:f8:b8:cf:7c:d4:a0:16:00:f8:27:53:
91:4f:25:97:b0:64:10:24:e9:f8:05:b1:1e:df:78:
8f:34:d3:29:7f:07:fe:d7:ad:a2:b8:99:a8:84:15:
ae:eb:cb:87:dd:07:30:08:a2:8d:73:dd:0a:1f:9c:
b4:ce:9f:f2:ba:f0:bb:69:44:04:5d:79:1c:a8:7c:
24:c4:72:06:c9:f5:2f:bf:6f:e7:52:ad:dc:13:e4:
5c:f9:28:64:a4:9a:de:8f:3d:ba:d4:9b:40:08:22:
e7:ff:a2:ac:ff:9d:f8:95:80:23:60:7c:f7:93:79:
a4:0c:5b:10:88:f3:cb:fa:57:9f:ec:f4:23:eb:d9:
dc:60:82:4f:15:0e:7b:a4:0b:3c:71:d5:a2:0e:7b:
36:d0:f9:54:a3:df:20:11:0b:8d:70:19:08:c3:50:
86:48:75:33:60:4a:93:61:35:6b:de:bb:50:55:5d:
3d:ac:0b:9d:40:de:7e:b7:7b:96:1e:33:7a:3b:cd:
a9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C8:07:EC:B6:D6:C6:3C:E2:EA:2C:DA:CA:17:82:9F:6C:AF:F4:4E
X509v3 Authority Key Identifier:
keyid:88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:fa:35:d0:1d:bc:0d:0a:f4:fc:37:1e:11:02:45:64:ca:33:
1c:31:bb:d8:20:7d:ce:a0:08:4f:73:3d:e0:73:28:9b:94:27:
f8:f5:4a:12:6b:95:ef:1e:d2:9d:83:43:e4:69:6f:62:58:60:
84:2d:dc:b1:9b:26:6c:a5:56:ef:2a:b6:58:24:e2:7f:81:5f:
eb:23:cc:b1:16:38:27:d7:18:47:99:dd:9a:61:e4:98:da:8f:
07:77:30:1d:db:dd:74:79:c7:c9:b7:4f:84:15:3f:87:69:66:
13:4d:af:31:1d:f2:2b:31:90:b4:fe:01:39:77:ad:07:5e:92:
e5:10:90:f3:14:dd:92:f6:eb:7c:b1:f0:22:74:19:b0:30:ee:
c9:a3:4f:0a:dd:21:71:b5:16:7d:86:ad:c0:76:b5:cc:c7:4a:
4f:9f:bb:4c:fe:04:fd:db:45:dd:71:d1:3d:22:76:55:5e:69:
00:b0:17:8b:4c:43:84:07:2d:91:15:44:5a:b7:49:33:1b:88:
66:91:63:8f:7f:95:35:6a:84:91:81:da:0f:89:38:b0:28:81:
3c:77:0e:35:ba:96:a8:5e:0f:aa:74:a2:ca:7e:50:10:f2:86:
89:43:75:69:6b:55:ba:a5:ac:2d:61:cb:cd:1d:fa:f9:52:5b:
1f:c7:e8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:19:31 2025 by rpki-client