Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
File: I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft (raw, json)
Hash identifier: TutP137p6p2qeKvhq1e0quB1FYwd4xwZ9NRHCO9Pn40=
Subject key identifier: 71:BE:89:7B:55:73:BA:45:65:C2:29:CF:32:6F:EB:4E:41:D1:0D:0C
Authority key identifier: 23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
Certificate issuer: /CN=238857660dc7fa60846f765b94cb69576255adb6
Certificate serial: 019A533F173FDF5E840FDE9E9B6C44C2C27A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 09:00:34 +0000
Manifest this update: Wed 05 Nov 2025 09:00:34 +0000
Manifest next update: Thu 06 Nov 2025 09:00:34 +0000
Files and hashes: 1: I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl (hash: 3GuYsrbgiULhWLvBXQKrOC3F9EXGOJUGJNH3Y/zKRSc=)
2: XHfhEGwfsHA5Cy6rVzKyCX0VS7I.roa (hash: r0CY6B9tn8PTb3kJeN+vQ/cBCfQUrTHL37aoDlJepRA=)
3: tcPEvHuX8bqS2YKyM4C5K4tHwxk.roa (hash: rKNoYxngd5L4bRt06ua2/XaA1SqXHMSPI/cKc0JvWoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:17:3f:df:5e:84:0f:de:9e:9b:6c:44:c2:c2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238857660dc7fa60846f765b94cb69576255adb6
Validity
Not Before: Nov 5 09:00:34 2025 GMT
Not After : Nov 6 09:00:34 2025 GMT
Subject: CN=71be897b5573ba4565c229cf326feb4e41d10d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c4:93:71:ec:7a:11:1b:68:3d:29:42:d6:01:
e6:f6:64:27:1b:2e:e6:8a:71:50:77:79:dc:06:30:
ff:63:5f:47:2c:73:2c:3e:88:59:3b:b5:e8:78:39:
4e:be:3a:9e:51:a5:5c:56:71:45:49:a4:a8:a0:cf:
06:dc:15:6e:ff:0f:30:d6:c0:9b:09:43:b7:04:33:
2d:1f:6d:35:6b:a9:a6:aa:93:d7:d9:b0:a5:3e:06:
d7:46:42:59:ba:d2:69:58:a8:74:fe:53:3e:28:90:
d6:b4:7b:23:ae:35:2e:5e:78:2d:72:57:be:3c:fc:
49:e0:dd:65:f5:54:08:87:26:91:02:cf:0a:cd:f4:
9e:11:ed:a8:33:9c:04:fc:4a:52:4e:6f:6f:7f:6e:
cf:90:1d:f8:4f:e8:32:04:11:52:52:e1:2f:8b:42:
35:8f:57:64:cb:7e:a7:71:fa:15:3e:82:fc:91:36:
b0:96:2c:f4:ee:f8:ca:ba:ca:3d:a5:bd:d2:5c:dd:
00:82:62:d1:3c:b0:b6:6c:d7:60:4b:5e:56:a8:dc:
f8:2f:8b:80:6f:4e:2a:67:86:82:1a:47:00:02:d4:
c5:56:53:c4:a5:b8:a0:1a:8a:ca:1f:7d:9e:3f:11:
9b:55:83:e0:53:78:ab:f8:60:1a:84:f1:d8:ec:c7:
a4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BE:89:7B:55:73:BA:45:65:C2:29:CF:32:6F:EB:4E:41:D1:0D:0C
X509v3 Authority Key Identifier:
keyid:23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:7d:60:3b:41:b3:14:15:08:bc:02:af:58:de:8a:92:e3:05:
03:d6:c4:d6:47:9d:a3:e2:af:6e:34:83:6b:1c:c0:68:e2:07:
79:ae:44:43:b6:39:b2:34:1a:a4:cf:6e:2a:9f:a3:48:48:32:
88:2d:bb:c1:83:f5:52:2e:06:70:c1:77:f8:95:44:e8:22:88:
42:a3:7c:17:20:2a:c2:1e:97:4f:54:71:0d:24:04:45:0c:f3:
77:23:17:b4:b7:9e:90:7d:9f:9a:60:ec:8d:2e:ea:81:92:b9:
8a:3c:f0:3b:3c:b2:37:54:32:c6:ab:34:a9:64:a1:3a:e6:80:
e2:20:86:0d:8a:7a:8c:4d:fe:b5:b8:c7:4a:a3:ec:ff:26:59:
64:d8:26:8c:d6:54:64:a2:33:3c:f3:ec:cc:62:01:56:c0:b6:
d0:2f:64:0a:8d:4a:a4:18:63:d7:53:28:48:e9:91:76:82:d3:
98:03:c5:c0:e0:25:28:57:69:a4:55:22:3b:c5:71:81:94:1f:
c6:6f:33:68:fc:f3:8c:75:ab:92:b9:7d:81:8d:9c:b8:99:4b:
bd:0b:95:ec:2e:15:1b:57:15:23:74:3f:9d:52:95:1b:33:68:
8b:ed:9c:d6:18:4a:f4:ef:20:06:ae:6f:c6:bd:97:ca:40:95:
43:58:f8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:13:09 2025 by rpki-client