Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
File: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft (raw, json)
Hash identifier: 5zvSzmOl/8bDMDRGGeZ2tpZ+VuySUbu+7gYjXvuAOPM=
Subject key identifier: AB:D0:C3:C1:1B:83:88:29:88:88:09:D1:49:24:B3:6D:73:78:F8:EB
Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
Certificate issuer: /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Certificate serial: 019A4E86C13F13107554260EBD0DED7E1413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
Manifest number: 0EBC
Signing time: Tue 04 Nov 2025 11:00:45 +0000
Manifest this update: Tue 04 Nov 2025 11:00:45 +0000
Manifest next update: Wed 05 Nov 2025 11:00:45 +0000
Files and hashes: 1: RZ_4-lCargPhDnsOSk7--hEov_g.roa (hash: gD59YlfjEOMaA7jKCDG57LDieQBZUtUGKFnW719fGG8=)
2: abKcOp3qmm4ybUnw1tBA-G8yOrc.roa (hash: /klckxmc/giyHaniwWbEf+LlQIwRtUPvFDW14KDXips=)
3: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl (hash: Y9KKFBqc060GyEnguMhb3UmeYZsKE61hJf+hFhQtF7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:c1:3f:13:10:75:54:26:0e:bd:0d:ed:7e:14:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Validity
Not Before: Nov 4 11:00:45 2025 GMT
Not After : Nov 5 11:00:45 2025 GMT
Subject: CN=abd0c3c11b838829888809d14924b36d7378f8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bb:38:b9:95:3a:cf:c3:fe:92:a2:ad:45:f0:
7f:a9:b7:58:93:63:37:f0:01:01:ef:71:67:e1:89:
b7:24:37:6b:5d:53:42:5a:12:10:c4:5f:80:48:e8:
ca:dc:22:f9:e0:40:8f:ea:4d:7a:60:75:7b:db:c4:
87:87:ee:22:82:b3:c0:27:da:d7:82:8c:d3:c2:37:
73:f5:b7:87:3b:2c:67:d1:51:c9:45:84:92:8f:79:
1e:2d:f7:1f:e4:ca:b8:71:3e:80:ed:08:dc:bc:ff:
a8:c7:5c:c5:f4:b2:41:80:b3:bd:ba:ef:0f:c7:c3:
13:fc:10:88:21:c3:80:4b:a0:cd:16:74:28:67:ab:
93:73:dc:80:dd:42:d8:16:52:a2:ec:16:92:ec:48:
3f:c6:38:2f:bc:0a:90:4a:5a:29:4f:86:a3:ed:2b:
df:13:80:a7:fc:21:d7:60:36:4a:e2:c0:58:8f:42:
a3:6e:06:22:17:e6:ad:53:e0:78:28:6d:7b:ad:4e:
f9:e8:db:fc:c4:64:9c:3d:97:0d:20:53:f7:9c:a1:
d9:c0:52:5b:c3:4b:85:4b:ee:1f:3c:33:70:25:5a:
f4:39:87:13:df:c9:25:e9:0e:0a:67:32:94:91:00:
2d:20:2b:f2:d7:1a:a8:fe:3c:08:3e:1c:d3:10:a3:
20:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D0:C3:C1:1B:83:88:29:88:88:09:D1:49:24:B3:6D:73:78:F8:EB
X509v3 Authority Key Identifier:
keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9a:b4:4d:d3:37:5f:8b:a8:86:79:21:fb:b2:48:4c:98:06:
17:f7:37:ff:bf:b2:87:6b:ae:23:ea:75:98:f1:82:3b:ff:b3:
c1:2f:a1:05:cf:92:d1:66:23:89:a1:85:76:bf:88:99:b8:0c:
76:ed:c1:f8:e4:3f:4b:5e:89:a3:f8:a2:77:fd:fc:7d:de:9e:
63:4a:58:a1:12:18:44:cd:46:de:cf:4a:b9:d2:06:b6:67:c4:
15:94:16:27:da:e3:e8:56:44:6c:48:a8:80:95:e2:57:ea:36:
d2:4c:2e:c6:8c:31:d8:11:a5:6c:80:6e:b8:f0:b3:31:c2:6d:
07:5a:e0:6d:50:11:fc:1e:78:09:ae:28:f5:d4:a7:b1:08:a0:
01:bb:99:61:fd:1a:a9:92:3d:d0:f9:5a:6b:1d:97:0c:6e:6a:
38:41:99:3f:19:a1:18:04:61:30:e8:03:86:6a:bf:5c:97:8f:
64:ea:cb:22:2d:59:98:c4:26:db:73:90:96:d0:ff:05:90:f3:
b9:90:9c:29:e1:8a:76:bc:1b:10:83:08:db:21:d1:93:47:b1:
5e:d5:54:c0:fa:26:0d:3a:0b:8b:d5:d3:13:bb:ce:97:5c:d2:
93:93:70:cc:58:be:a1:3a:b7:de:95:77:e0:ed:1a:da:06:e3:
3d:d8:12:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:04 2025 by rpki-client