Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
File: I02TlaK6I5y50njrWJty7VyWctE.mft (raw, json)
Hash identifier: ghDTTdsuSemc3YdRNaXLgH/XoFkL7QUk38thMC+laBc=
Subject key identifier: 38:00:58:69:30:21:C2:C7:47:BF:6D:AF:FE:B4:57:56:CD:31:58:26
Authority key identifier: 23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
Certificate issuer: /CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Certificate serial: 019A4FD04F1A5F6F919CD11BF9BE7712203F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
Manifest number: 1156
Signing time: Tue 04 Nov 2025 17:00:42 +0000
Manifest this update: Tue 04 Nov 2025 17:00:42 +0000
Manifest next update: Wed 05 Nov 2025 17:00:42 +0000
Files and hashes: 1: 1rz_9CUxf9DVS-YE4VuUc49q_EU.roa (hash: UNeHGEwryJnNi0oicKcUP2+AX+MdC5294S5To8LCDxA=)
2: I02TlaK6I5y50njrWJty7VyWctE.crl (hash: ika+fXeFG+8smpnpCq16uBCnAvLeTqWjaTM6jPIZw5A=)
3: JuGf7pzc4HCrM3We2--OeQqSX4U.roa (hash: H4A47OUP6tLe0HcSGtfbX99Pdjm0iQtczsTWsqdmMN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:4f:1a:5f:6f:91:9c:d1:1b:f9:be:77:12:20:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Validity
Not Before: Nov 4 17:00:42 2025 GMT
Not After : Nov 5 17:00:42 2025 GMT
Subject: CN=380058693021c2c747bf6daffeb45756cd315826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:db:cc:bb:42:5b:ea:0d:1a:0e:00:ba:15:0c:
2f:9b:83:b4:a0:32:6c:9b:8d:5f:48:c4:ac:4c:19:
3e:12:7e:60:4e:f7:e1:c1:55:ea:5a:46:51:c5:c1:
c0:f8:68:f5:3e:d0:58:72:85:28:9a:a0:04:12:67:
21:72:1b:85:3d:12:76:c4:6d:bc:f0:3a:b3:78:cb:
b9:99:33:c2:1e:3b:c7:26:7a:22:1a:83:6b:15:6e:
94:bd:d3:84:0c:a5:8b:78:b8:ef:76:11:79:bf:da:
c4:d5:c3:47:6d:7a:8a:d9:ed:77:51:19:fa:21:5d:
9a:78:a5:cd:68:d1:b3:7a:2a:04:ae:0e:69:2f:16:
2c:d5:61:72:d6:3e:cd:9d:6a:df:c6:7c:bc:75:cf:
74:e4:f9:b6:42:15:93:b1:ed:fa:99:a6:97:94:e8:
e3:38:5a:2a:d7:6a:0a:2f:8b:59:9e:d3:c0:0f:d7:
fa:7c:8a:47:02:ac:c4:ab:fe:11:19:b0:6d:ad:7d:
6b:91:b3:e4:a3:94:2d:8f:ce:77:7f:b4:df:54:1c:
eb:a2:d3:d5:3f:03:b8:30:ea:8b:40:60:59:85:56:
5a:7f:33:d5:ce:fa:54:a9:e1:a0:a6:73:fb:67:8b:
29:fc:e1:b5:ce:d5:75:4f:41:fa:2e:4e:3f:f7:ba:
13:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:00:58:69:30:21:C2:C7:47:BF:6D:AF:FE:B4:57:56:CD:31:58:26
X509v3 Authority Key Identifier:
keyid:23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ab:6a:38:b3:ab:57:9f:bc:05:85:d0:dd:cb:7a:b8:09:a9:
ca:ae:c7:c9:d1:22:2b:67:91:29:4f:41:68:c1:64:35:b9:11:
9f:f9:9e:2e:22:30:94:46:91:8c:15:18:5f:6b:4c:47:0f:7c:
aa:a5:3d:dc:45:f2:34:2a:09:f4:25:cf:99:88:bb:5c:2d:e4:
37:42:73:ed:51:76:0f:58:3e:ff:7d:95:e0:d1:a1:a4:ff:8d:
fb:cd:65:4c:62:49:0f:f1:56:6a:54:d6:d5:f5:df:41:b6:68:
14:b5:f7:0f:cd:e6:23:71:b4:89:42:55:a1:af:d7:6d:6a:cf:
d7:ae:f0:97:46:25:6d:cc:6a:4a:32:55:31:8b:1e:8b:ad:6d:
73:94:da:23:a1:c1:07:f5:d2:94:c3:94:30:7d:2d:c5:bf:74:
7e:9d:29:ce:d0:cd:c3:c4:b3:b6:12:5c:e5:88:f6:06:89:64:
6d:01:25:0e:b1:6a:7f:18:e6:5c:db:9d:cf:be:88:0d:53:9d:
9e:c3:78:ea:1b:23:44:75:10:6b:d5:a6:16:95:a8:a2:03:28:
37:b9:b8:65:2f:1f:72:2b:92:89:f8:a7:4b:8a:06:41:36:3c:
4d:03:01:71:56:c2:de:4c:c9:e5:d1:09:fe:75:2d:e9:a3:60:
8b:f8:de:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:07 2025 by rpki-client