Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
File: I2YsmpgK11hGUKuqNUW56pHT414.mft (raw, json)
Hash identifier: h/SsfImj/SaAS+1lS0n4OtmltRh9Ud8mM4VvIiS9l+w=
Subject key identifier: 55:73:CA:32:6A:8C:47:53:F5:17:F4:F5:18:DA:3E:2A:7A:09:86:89
Authority key identifier: 23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
Certificate issuer: /CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Certificate serial: 019A5299E95F95689306E2E2211C768A7523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 06:00:09 +0000
Manifest this update: Wed 05 Nov 2025 06:00:09 +0000
Manifest next update: Thu 06 Nov 2025 06:00:09 +0000
Files and hashes: 1: C3a8w3EA0yZf6c0xKrOAJTxFR18.roa (hash: LNpEHJw7nSfysWTvnjy399UaYBj+VVtM2qrA/gSp1Ss=)
2: I2YsmpgK11hGUKuqNUW56pHT414.crl (hash: dIpQD2fVSPvLmzL9MPqFPlHSmDNjC0+4aBuyXwTojmU=)
3: SVlLEhHqyoa8VmAwyeAz-eO7tmk.roa (hash: 3GqZDoa/8luHJb3c9fM/8sF9/CWphehWtTWgxsoVdy8=)
4: m-Ncfpuw9lyFAGvhN6SO1U82ZPI.roa (hash: /M7ImEM1ZD0v5nu/Nb9bLOvnyebMcwld8IBc6QoNAjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:99:e9:5f:95:68:93:06:e2:e2:21:1c:76:8a:75:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Validity
Not Before: Nov 5 06:00:09 2025 GMT
Not After : Nov 6 06:00:09 2025 GMT
Subject: CN=5573ca326a8c4753f517f4f518da3e2a7a098689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7b:88:ec:10:15:f3:b6:db:1b:e7:40:e7:6b:
2a:f6:bf:cc:c2:39:d7:80:9f:79:4f:35:d4:44:1e:
e4:80:7b:31:d9:19:56:9e:aa:80:20:05:b8:4e:bc:
e4:46:a6:d4:ea:ec:50:43:00:a8:1e:7b:38:81:53:
3f:50:28:99:e2:9c:0b:df:54:3d:ad:8d:e8:2e:42:
e3:b9:70:07:83:55:d5:51:53:12:bc:ed:34:ae:6d:
77:39:20:8a:c2:da:95:6b:34:37:79:cb:91:1e:dc:
c7:a5:4b:3e:62:9c:80:5b:9b:5d:1b:1a:9c:c7:06:
72:03:56:e5:25:e0:b4:20:1d:b2:ae:2a:41:2c:07:
2f:b3:84:27:10:f6:f1:98:c4:0f:48:9d:cf:42:36:
b6:c6:a9:4b:f7:f9:27:37:fc:8e:ec:db:64:27:6f:
b7:91:ab:8e:78:8d:cf:10:71:8a:03:e4:28:50:96:
3a:06:2e:63:2d:95:0d:28:30:ec:a5:f6:c2:09:75:
f1:73:ea:0b:ea:5a:8a:1b:a4:35:ee:f9:43:f2:a5:
c5:d1:f6:af:70:5e:4e:f9:2c:da:03:44:f4:0a:65:
1d:00:7e:92:7d:31:3e:ce:9e:a8:12:a9:ab:7f:3b:
74:ec:20:e2:1c:0b:6d:d0:d9:31:ae:44:92:9b:72:
91:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:73:CA:32:6A:8C:47:53:F5:17:F4:F5:18:DA:3E:2A:7A:09:86:89
X509v3 Authority Key Identifier:
keyid:23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:8f:72:1c:5c:d3:49:ff:a8:e1:06:ac:97:c8:3e:9c:ef:17:
9d:d5:e1:1c:df:7c:a3:4e:c1:e4:89:1f:f2:2c:ca:3a:5e:82:
d1:8d:82:64:bd:5c:1b:17:b3:62:78:14:3a:b3:74:e3:5f:de:
8d:19:c6:1c:ae:5b:1e:d5:10:91:4a:1f:bd:b6:43:af:25:69:
92:24:53:82:de:c1:14:47:f1:fd:e4:5b:ea:ab:2d:db:e9:de:
ac:f8:8d:bf:f8:e6:60:4b:d8:b7:e9:38:3f:cb:06:c9:ff:35:
4a:01:b5:e3:83:1e:8a:50:6b:ec:ad:5b:4f:4c:da:cd:5f:a4:
0b:27:0d:5f:67:86:22:f4:ca:88:1d:5a:50:97:aa:d4:1a:92:
20:00:a1:f9:e3:68:9d:c7:cf:20:7f:93:58:59:5b:88:f6:e3:
51:a7:60:99:ab:43:bc:70:ea:90:b1:c2:b9:c7:69:ca:21:d0:
c2:9c:c0:1f:48:53:4b:6c:68:89:9a:11:b0:98:bc:41:d0:7f:
1e:51:84:bb:82:65:1b:60:23:19:17:0a:8c:fc:52:22:da:00:
37:78:de:e0:e9:49:25:92:35:5e:09:45:7c:cc:2d:a2:da:ab:
e2:64:78:29:6f:78:d1:ce:34:df:8e:50:73:22:29:58:b8:8e:
76:43:26:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:48:47 2025 by rpki-client