Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
File: iPNC3REnxnrxEWqx-ZfifLTIhOg.mft (raw, json)
Hash identifier: pxh3vrjKLRKXB4QqGa2i9azNoPPWvcSxnq/Fg6l1JJw=
Subject key identifier: 6E:82:5A:55:C3:13:4F:39:1C:16:BC:00:CB:29:8D:D1:25:6C:91:98
Authority key identifier: 88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
Certificate issuer: /CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Certificate serial: 019A556415B1CD34EE5AD89093BDDD1280D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 19:00:13 +0000
Manifest this update: Wed 05 Nov 2025 19:00:13 +0000
Manifest next update: Thu 06 Nov 2025 19:00:13 +0000
Files and hashes: 1: 0tVPRt7zVqUIIvmXairhGKRXv0U.roa (hash: dhSo1lkIbUUIXrPA3/k2AFZiXI7dxBUbTf590V+gQts=)
2: iPNC3REnxnrxEWqx-ZfifLTIhOg.crl (hash: jRslls6I/H1GguiubFvmxDQWpph1T9XScJhhFeQLfJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:64:15:b1:cd:34:ee:5a:d8:90:93:bd:dd:12:80:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Validity
Not Before: Nov 5 19:00:13 2025 GMT
Not After : Nov 6 19:00:13 2025 GMT
Subject: CN=6e825a55c3134f391c16bc00cb298dd1256c9198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a9:84:da:87:58:b2:7e:0e:52:cf:fb:5b:67:
3b:a2:c8:00:d0:17:ff:29:e7:ac:9c:99:65:bc:8c:
6d:22:e6:95:3e:59:b7:1d:b6:7c:0a:bf:0d:66:ee:
f1:78:76:8c:a1:aa:ff:b2:e7:ee:61:f2:8b:96:5f:
3c:3e:a7:f5:e6:3c:01:d3:90:48:4e:9a:cf:82:5a:
77:f2:b6:f3:8b:3f:a7:87:15:b5:38:a7:37:91:af:
9f:4c:5e:79:e1:64:44:f9:fb:7a:33:08:c2:58:25:
3e:1a:c5:1c:ca:e6:aa:27:dc:15:45:10:e5:75:8b:
e1:a0:7a:60:cb:7a:dc:95:80:a4:80:35:f0:d5:9d:
43:f3:01:b3:f9:e7:c2:ab:a9:43:fd:fb:cb:d7:49:
6f:e1:c0:99:b3:3e:d2:0e:04:34:54:69:72:71:39:
f2:70:97:ee:3b:ca:88:7b:f8:f8:cd:e4:25:0e:db:
06:ed:c2:fd:c3:9f:9a:92:1d:90:4f:fa:da:96:16:
c8:a4:67:1f:c6:81:88:23:a1:e2:7a:81:48:73:2b:
3f:ae:c0:2e:7d:9f:ec:23:31:e4:21:1d:e9:54:d2:
1e:48:95:1b:84:53:dd:e4:3a:be:3f:50:0e:1e:18:
18:b0:91:2d:d6:bf:97:7e:9d:ff:62:57:5c:84:cf:
cb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:82:5A:55:C3:13:4F:39:1C:16:BC:00:CB:29:8D:D1:25:6C:91:98
X509v3 Authority Key Identifier:
keyid:88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a6:32:57:7d:75:2e:02:72:38:e2:02:32:44:30:0b:e8:f5:
0f:04:53:65:b8:22:96:58:a2:95:28:41:66:f2:d4:b2:85:2c:
a7:6d:9f:12:15:7c:dd:90:d0:9b:5e:bf:f6:25:a9:01:6b:cd:
42:f5:33:0a:4a:d0:f4:1a:82:3d:43:a8:f8:87:a8:a9:95:9b:
ac:45:4e:0b:5a:46:a0:51:9e:4d:ee:5b:69:e5:4a:b0:fc:a6:
9a:e4:0c:bb:f5:75:b2:32:7e:94:1b:37:c2:18:22:46:01:4e:
e3:09:b7:6b:bc:8b:32:00:53:f4:cf:24:3d:39:4d:11:f0:43:
ea:38:f7:14:96:a4:93:7c:02:c8:f2:21:73:5e:cd:d5:4f:39:
21:45:7f:0a:54:bd:d7:a6:aa:34:4f:1f:07:2f:99:ee:37:ea:
f6:fc:a3:d0:73:fe:27:79:b4:66:97:b9:2d:c9:f8:d1:48:aa:
e4:60:17:78:5f:78:ce:08:61:28:16:09:5c:68:bf:4e:ee:e9:
b4:ff:2f:8b:5d:8a:a9:7c:a3:55:15:db:fc:7a:fb:99:43:ae:
ec:5e:59:32:f3:7b:0d:1d:73:96:e6:12:dd:1f:90:73:76:26:
99:28:38:ef:1c:d9:7a:98:0c:b5:6b:bf:79:cf:5c:30:df:d1:
08:96:db:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:46:22 2025 by rpki-client