Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
File: Iv9bz3ObBzL7G823F-xxf28csOI.mft (raw, json)
Hash identifier: u9yeuJgVkFjExGkm8i7Il376IKzI797VC4x7wm7Vmxg=
Subject key identifier: 89:F7:51:05:B0:17:35:CB:11:75:2B:5A:D7:F0:F3:A0:91:5C:FD:A5
Authority key identifier: 22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
Certificate issuer: /CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Certificate serial: 019A503E077FF87FD550A0F8EA4C73779F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
Manifest number: 150E
Signing time: Tue 04 Nov 2025 19:00:33 +0000
Manifest this update: Tue 04 Nov 2025 19:00:33 +0000
Manifest next update: Wed 05 Nov 2025 19:00:33 +0000
Files and hashes: 1: Dbw0YKXPol3saHGjQJtz9o_YK0E.roa (hash: SxzLeQKHeNdqB63pBhgkGBN/CeBMjvrLZxTWY/WlAKg=)
2: Iv9bz3ObBzL7G823F-xxf28csOI.crl (hash: s6tEJ1hl90NrmODeGnRwdDLWiC4O9ids1SAuSX/Fkhw=)
3: UAWIgik98ovvIJWv4yjj5lBqzOo.roa (hash: jrAxhhr23FpKpzjy0AGBEFjJeK035eZKHkroGqfSgNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:07:7f:f8:7f:d5:50:a0:f8:ea:4c:73:77:9f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Validity
Not Before: Nov 4 19:00:33 2025 GMT
Not After : Nov 5 19:00:33 2025 GMT
Subject: CN=89f75105b01735cb11752b5ad7f0f3a0915cfda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a9:e7:23:dd:29:2d:19:4b:96:47:8a:4b:05:
18:63:9e:d3:f3:41:14:eb:60:90:ca:1a:9d:39:57:
0d:18:a0:c7:2c:cc:9a:0e:09:8e:60:b7:0b:05:a2:
76:c7:ca:f2:de:1e:99:30:e7:81:de:a5:a1:ae:54:
b2:45:a6:6c:d5:30:5d:25:02:7b:ad:8c:31:b7:19:
80:93:d7:35:c1:ca:9e:4c:6b:23:51:14:cd:b5:86:
e9:18:53:d6:8e:91:fe:f2:51:a9:a2:af:76:c2:12:
15:26:dd:fc:ba:60:32:1d:0c:20:0d:89:e6:3b:e0:
82:8e:fd:53:e8:d2:33:14:be:6c:92:4a:04:10:92:
f5:06:ea:4a:2e:ee:e1:c1:9c:71:1a:5c:77:5d:43:
fb:79:16:d2:92:9e:2e:2d:96:7e:1c:dc:35:f1:5e:
1e:b2:37:d1:f1:e8:3a:ca:a8:1a:0a:2f:61:3a:60:
a8:9c:fa:41:3d:60:03:71:c9:37:0d:3b:ef:4d:ad:
b4:2c:f7:e7:2b:e5:46:8c:80:5b:dd:ce:df:cf:33:
af:87:15:7f:91:eb:d1:c1:5d:b2:25:aa:56:8d:ec:
bd:bd:d9:f6:7a:5a:45:90:9b:ae:e8:e4:3c:a5:57:
1d:e7:59:34:eb:14:eb:36:2d:ff:6d:5e:54:bb:33:
bc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F7:51:05:B0:17:35:CB:11:75:2B:5A:D7:F0:F3:A0:91:5C:FD:A5
X509v3 Authority Key Identifier:
keyid:22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:98:9a:69:5a:59:3f:22:2e:de:0f:aa:e6:8a:62:dd:bb:59:
bb:0a:aa:18:e6:42:b8:13:cf:66:5d:93:dd:aa:77:a4:15:d7:
b2:58:ea:64:2e:91:df:8c:d7:ef:fe:6a:51:6b:6a:ee:05:32:
6a:56:b8:e8:1b:76:2b:41:b7:42:3f:d1:64:57:1a:a6:a8:ec:
d3:f4:82:72:0f:8b:d7:b8:7e:cb:dd:d8:c7:39:99:c0:2c:b4:
c4:f6:dd:5d:aa:11:be:8e:af:62:e3:27:ca:6e:a0:f2:af:84:
43:a4:29:46:09:b8:36:a9:75:52:d6:a1:cf:e9:fc:b2:ea:a4:
97:40:c7:88:2a:d4:02:0b:20:24:a0:e8:e0:cf:1e:52:0b:66:
0d:c1:0f:18:fd:21:84:75:94:2f:d6:fc:34:c2:3e:77:e8:fc:
96:92:b1:95:ac:52:dc:ad:e3:2e:ea:72:69:63:33:3a:ef:25:
49:53:1f:84:a3:f0:55:0c:a6:d6:f7:9c:09:e9:5d:6d:0c:16:
68:7c:c1:3e:ea:1e:c9:24:fc:df:74:b5:6a:86:37:c1:f5:b5:
ca:17:ce:83:49:95:bc:32:12:65:a9:26:92:ca:b1:f4:66:f7:
f3:da:86:81:79:4b:92:2c:1f:8e:5b:43:8b:88:d4:0b:3f:9f:
13:16:92:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:44 2025 by rpki-client