Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
File: IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft (raw, json)
Hash identifier: mksUP8vmgCcDZ4rkLkcqLrUJTLALTmBna6FUeuvQhiQ=
Subject key identifier: 9E:C9:A8:7B:1A:0A:6E:E0:84:FA:91:A3:24:96:55:4D:41:AA:79:47
Authority key identifier: 20:7E:90:D6:2D:E2:C7:27:CD:45:39:A2:F0:70:C4:E9:1D:F3:2B:B4
Certificate issuer: /CN=207e90d62de2c727cd4539a2f070c4e91df32bb4
Certificate serial: 019A50E41468C5A2717732677A99238A31E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
Manifest number: 0352
Signing time: Tue 04 Nov 2025 22:01:55 +0000
Manifest this update: Tue 04 Nov 2025 22:01:55 +0000
Manifest next update: Wed 05 Nov 2025 22:01:55 +0000
Files and hashes: 1: IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl (hash: gGo2YLSVhyz6RVEeT8+G5uEcm9gXnK0MNX7KNNLiylE=)
2: QpNcCoA4Z5ottRskUsrVfwUI5R4.roa (hash: 3Ookyfb7wHO7/58EMfYEHBR9Z8xGK4lUfT1UByxh2SI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:14:68:c5:a2:71:77:32:67:7a:99:23:8a:31:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=207e90d62de2c727cd4539a2f070c4e91df32bb4
Validity
Not Before: Nov 4 22:01:55 2025 GMT
Not After : Nov 5 22:01:55 2025 GMT
Subject: CN=9ec9a87b1a0a6ee084fa91a32496554d41aa7947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:40:a4:ca:cc:e2:f8:b9:79:0c:81:96:64:f8:
54:99:3f:25:f8:76:10:19:50:d9:c3:76:c1:02:42:
d6:99:7f:2c:cb:d5:d8:7b:00:45:76:57:39:4f:3f:
c6:d0:bf:e6:20:5e:53:67:1b:27:7c:71:00:8e:da:
7a:46:9d:26:fd:81:c9:e1:64:24:83:4a:23:69:92:
5a:f3:02:5b:1b:08:ae:dd:fc:fd:c4:d3:78:57:56:
f1:95:b0:15:7c:dd:e3:65:a3:90:b6:e6:26:72:1b:
99:b9:d0:62:66:0f:a0:72:f8:d7:17:74:51:c8:6c:
93:b9:ef:e5:89:4d:c0:d1:73:8e:0e:e8:14:79:ce:
06:58:20:ae:f1:48:e8:ad:6e:77:ce:32:ed:9c:e5:
de:4b:db:c0:c6:1f:a8:63:8a:b9:c2:00:cd:8c:60:
f3:97:82:2c:ff:f8:c1:4a:c1:1f:cc:ec:c0:31:b3:
4b:24:cc:b9:ea:fe:9f:1c:e0:7a:91:6a:fc:6b:04:
62:53:f9:9a:e4:f9:e6:de:8e:3a:ad:ec:49:30:84:
96:99:cf:47:9e:1d:96:ef:95:55:0d:20:94:70:60:
c4:49:cc:65:0c:b5:75:4b:e1:31:35:23:bb:98:6a:
47:b4:44:82:6b:85:ae:ed:e0:ec:62:6b:b3:c3:9a:
39:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C9:A8:7B:1A:0A:6E:E0:84:FA:91:A3:24:96:55:4D:41:AA:79:47
X509v3 Authority Key Identifier:
keyid:20:7E:90:D6:2D:E2:C7:27:CD:45:39:A2:F0:70:C4:E9:1D:F3:2B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:7a:fc:7d:4d:11:7b:3d:15:a7:29:5a:e0:de:f6:24:0a:6d:
91:a5:b6:2f:64:8b:13:15:57:30:2c:ba:10:b1:77:4d:80:4d:
f5:96:f2:1a:d4:ce:0e:a3:2d:65:6a:e4:02:e4:a6:0b:88:55:
a1:90:c7:e9:a6:0e:47:bf:7f:4b:ef:a9:1c:e7:4b:e5:74:11:
20:6c:f1:69:43:b2:f5:3c:35:37:f9:46:45:8a:9b:a0:f1:71:
03:af:99:2d:5f:ef:5d:50:82:2f:9b:ff:47:6d:2b:96:a4:2f:
e9:69:a5:ec:8a:6e:66:c4:3a:2b:94:58:90:de:73:35:bc:a4:
18:56:cd:40:86:3e:f9:93:12:00:f9:48:0f:22:55:73:9f:c3:
24:0b:50:bd:52:49:83:91:f8:9e:39:43:f9:3c:c6:e5:4b:1a:
9d:32:89:88:4d:a9:0b:47:83:db:fb:46:0d:05:de:59:d1:a8:
56:c4:a8:5d:37:ca:74:4e:07:21:de:30:40:68:84:89:9d:51:
79:d9:6b:68:27:28:73:d3:a7:e1:9d:4b:db:c4:ea:84:f5:14:
1d:9c:e2:34:5f:4c:e9:61:1e:10:2d:63:49:f6:07:ae:63:31:
8a:3e:49:1d:47:78:4c:cb:94:8a:bc:68:09:fc:56:fe:6b:12:
ae:50:e1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:23:48 2025 by rpki-client