Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
File: IQH0Od66_1iAOV148Lv62Mp2CL8.mft (raw, json)
Hash identifier: JKK3KV1Oq/e5iT+Xzr+rx1udJHNtySgXVjhEZLBM8Js=
Subject key identifier: 4C:85:B3:79:FC:6C:C5:B6:6B:57:B6:1D:3B:40:D7:C5:A7:9F:0A:AF
Authority key identifier: 21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
Certificate issuer: /CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Certificate serial: 019A5789F29EA506007E8068FCDD6BA07740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
Manifest number: 0DCE
Signing time: Thu 06 Nov 2025 05:00:49 +0000
Manifest this update: Thu 06 Nov 2025 05:00:49 +0000
Manifest next update: Fri 07 Nov 2025 05:00:49 +0000
Files and hashes: 1: IQH0Od66_1iAOV148Lv62Mp2CL8.crl (hash: q3Uud0AvpiFE6e/MdEnhbhipJOBOCexsATzBqWxodMo=)
2: maYu8dN9neYyc8DtbRu2KTpDdQk.roa (hash: H5U+8VR9PAI4QlkVpTR8DC6LqpMXq6tJVvxgrK/vIPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 03:53:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:89:f2:9e:a5:06:00:7e:80:68:fc:dd:6b:a0:77:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Validity
Not Before: Nov 6 05:00:49 2025 GMT
Not After : Nov 7 05:00:49 2025 GMT
Subject: CN=4c85b379fc6cc5b66b57b61d3b40d7c5a79f0aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f2:80:4c:d9:bd:81:ce:94:79:cf:06:19:41:
69:76:cf:46:0f:06:72:75:39:5a:53:2f:e9:ef:92:
e8:dc:d1:26:6a:58:fc:a9:1a:5d:77:75:0b:97:ed:
1f:06:c8:55:00:f9:41:2c:7f:af:81:27:07:55:b7:
12:41:ba:8f:d8:1d:61:85:13:1a:f2:89:e5:7a:32:
d6:25:2e:26:15:b9:6f:a7:9c:19:8d:b0:d6:f3:86:
5b:2d:7f:43:22:2e:ab:2d:05:84:ca:2d:a7:64:85:
8e:58:64:82:a4:91:50:b4:c3:28:a0:f9:91:84:e8:
22:b4:9a:3a:dd:87:a1:5e:b2:90:c9:aa:1c:34:84:
98:38:ae:b3:da:dd:9c:34:c4:90:3b:bb:36:b8:a0:
ad:69:88:32:4d:87:d1:56:1f:c7:fb:f1:64:50:8e:
9a:8d:15:55:ee:7a:77:63:ec:39:0f:8a:a8:99:3b:
25:31:38:c6:a7:f5:86:c4:fa:87:8b:75:84:20:5d:
d5:eb:d1:61:96:a0:15:7a:29:d2:c7:c0:2d:95:22:
7b:80:db:18:5b:45:cc:d7:04:da:47:ea:19:51:24:
ed:65:54:19:bc:41:88:43:ed:0c:b1:31:36:90:92:
ca:51:81:f5:8f:bf:11:1e:19:ea:1f:69:5c:a3:ab:
d3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:85:B3:79:FC:6C:C5:B6:6B:57:B6:1D:3B:40:D7:C5:A7:9F:0A:AF
X509v3 Authority Key Identifier:
keyid:21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:2c:f6:0e:f0:e5:66:fc:60:9f:17:55:1f:bc:e0:4c:f0:a8:
4d:f2:36:95:18:5c:89:9a:c9:1d:61:b8:c1:2a:62:07:21:c8:
86:c4:fe:85:c2:2f:3a:00:be:da:22:36:9d:9f:08:4f:c3:34:
cb:bb:66:aa:90:4c:77:99:75:87:31:b5:d7:5d:2b:0a:89:81:
4c:4f:89:ad:71:7c:72:3e:3e:e8:81:ec:59:93:f4:d3:10:71:
48:27:b8:40:9f:f6:40:a1:40:95:d5:53:71:f5:eb:ad:a2:a3:
64:1a:e8:07:6e:c1:5d:5d:ef:c0:84:9b:6c:7b:c5:10:1d:3c:
b4:d8:f1:c1:69:0e:5c:36:7c:f3:22:a6:de:26:40:a3:f0:a1:
48:ac:4b:da:98:21:52:bc:27:c9:36:c0:bc:36:90:28:e1:ad:
53:ca:4b:1f:42:15:12:3f:92:43:99:01:a3:a0:18:48:7d:0e:
83:2b:7c:8f:f3:20:f8:08:49:32:87:9a:6e:d9:8f:3f:42:c0:
39:a6:d2:8e:91:07:ef:f7:29:e9:75:b9:d9:a8:4b:1b:df:2f:
a0:23:83:64:6b:72:62:b8:f3:10:24:4f:c5:c7:b3:5a:85:b7:
91:4d:fd:a6:6f:d7:90:b7:7d:6d:18:6e:76:4c:10:8a:5f:df:
e0:5c:c4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 07:31:28 2025 by rpki-client