Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
File: iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft (raw, json)
Hash identifier: j5JpC7PHvmUVdIh4iv1xvKF2XjFjktR90OFcvOhN/qo=
Subject key identifier: 0B:FF:B7:5C:02:80:8A:50:80:0D:D9:D8:5D:50:DB:81:FB:4A:49:D5
Authority key identifier: 88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
Certificate issuer: /CN=887fa37371d7d4593ba290ef45669ea0de293782
Certificate serial: 019A4D073717190B19218841DCA913B98E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
Manifest number: 082E
Signing time: Tue 04 Nov 2025 04:01:49 +0000
Manifest this update: Tue 04 Nov 2025 04:01:49 +0000
Manifest next update: Wed 05 Nov 2025 04:01:49 +0000
Files and hashes: 1: XWaEMNo4oCmJKw7xuT_lUqU1a9o.roa (hash: vlh1Ps1w/BBZ8U+fD5oVlO0yHpfRUnw+NHa2xAJ40qE=)
2: iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl (hash: sYfc4b0voqoD3ucA5CEX6iLHqvmdaqdSz0Yx4WVDbJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:37:17:19:0b:19:21:88:41:dc:a9:13:b9:8e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887fa37371d7d4593ba290ef45669ea0de293782
Validity
Not Before: Nov 4 04:01:49 2025 GMT
Not After : Nov 5 04:01:49 2025 GMT
Subject: CN=0bffb75c02808a50800dd9d85d50db81fb4a49d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f9:3c:09:99:b7:36:c2:50:6a:c5:31:48:0a:
1d:73:32:c4:f2:35:f2:9d:46:df:8d:03:0c:9b:da:
26:41:01:8f:03:f9:3c:ad:e9:a5:de:4c:9d:f6:98:
e8:7c:9b:4c:a5:67:88:fe:5c:cd:bd:d9:8e:d3:e4:
7b:b0:1f:9e:9f:78:28:ce:e4:fa:fc:a7:21:cd:9d:
94:f0:98:55:73:5a:e7:50:40:f7:66:bf:bc:06:c2:
97:12:af:7b:f7:32:f2:36:15:1e:24:cd:75:b3:26:
36:c7:c8:41:bf:6f:1e:fa:f5:85:d2:ee:99:da:0a:
fd:37:2b:17:19:e3:87:66:0e:ae:27:92:25:ce:4b:
bf:47:02:bd:dc:0f:69:64:8d:a0:ff:1b:c8:7c:3f:
3a:8f:c9:f8:23:69:58:9f:44:71:3f:8d:af:83:83:
00:b0:9e:49:13:f2:64:ca:a1:34:70:23:b7:58:bd:
46:e3:39:ff:fd:8c:d1:ad:7e:24:eb:50:56:af:8f:
e0:8b:13:9a:8e:d5:c7:7f:71:d5:e6:02:52:84:80:
49:13:a8:be:c4:84:ed:dd:1e:7c:11:9a:b6:30:e8:
2e:65:8e:17:71:a1:15:bd:79:27:2d:9a:f2:27:08:
ca:ad:44:33:1b:6c:39:7c:53:26:ea:cf:c0:e3:45:
4a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FF:B7:5C:02:80:8A:50:80:0D:D9:D8:5D:50:DB:81:FB:4A:49:D5
X509v3 Authority Key Identifier:
keyid:88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:eb:c7:08:94:3d:33:7a:57:34:12:94:45:e2:4d:05:b1:b9:
b7:a1:33:f1:24:bf:df:94:82:94:26:e9:40:87:3d:a4:fa:12:
24:bb:49:b9:18:d1:1e:3e:c4:74:03:77:51:f0:a4:f3:20:4c:
e3:74:f4:54:d6:4a:eb:79:d0:15:4f:89:90:94:c5:79:18:f7:
b4:75:60:bb:ea:ac:01:c2:19:07:a5:e2:85:6d:71:42:fc:86:
e6:ea:4b:19:f3:b4:54:2d:22:e3:d7:34:8e:b2:de:3f:4e:fe:
7d:c4:f8:3e:93:97:7a:00:a5:06:56:a7:19:61:d8:56:77:7e:
8b:03:9a:40:2d:f9:ce:fa:5f:fc:11:ea:40:4b:e5:9b:05:c1:
cb:2c:fd:c3:22:c3:82:ef:ad:02:27:3c:86:df:c2:89:91:eb:
b4:a8:d1:2b:ce:90:30:9c:e8:14:e0:ce:23:4a:94:21:82:76:
da:69:6d:16:a6:ba:a4:a4:de:87:1f:70:5e:f0:80:d5:7a:d6:
c6:da:83:8b:cf:7b:02:8d:15:fb:ae:e9:42:b8:b1:e6:91:e6:
ed:fe:2d:17:14:f2:cd:81:92:d1:4d:bd:63:67:03:5f:df:2f:
cd:24:15:3f:51:76:5c:c2:dc:27:59:ba:ab:18:c6:00:b8:2e:
09:b5:04:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:28 2025 by rpki-client