Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
File: ilZohaHW1VRFRs0oXYbE7_6qPCw.mft (raw, json)
Hash identifier: mcuXZ/Els6+H91J1l5GEZRnWcr8ZexNcdm0vXW/s65c=
Subject key identifier: D1:5C:5E:81:35:38:5A:95:CC:D3:8D:6A:70:48:85:A4:CD:8C:A3:86
Authority key identifier: 8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C
Certificate issuer: /CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c
Certificate serial: 019A5006F7F54FA4702102C1B64965F8B2A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 18:00:25 +0000
Manifest this update: Tue 04 Nov 2025 18:00:25 +0000
Manifest next update: Wed 05 Nov 2025 18:00:25 +0000
Files and hashes: 1: Lb8vbukOa5hlTRoTkAdj0qnnj8o.roa (hash: gDIkSUwNSGV5eKv6/1wqJs7MzcoYqV9u1fGfL9hM0j0=)
2: ilZohaHW1VRFRs0oXYbE7_6qPCw.crl (hash: SkH9HCGpwDD4nGDVdApCU3vTNqZm+oKQSss8wHFQjE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:f7:f5:4f:a4:70:21:02:c1:b6:49:65:f8:b2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c
Validity
Not Before: Nov 4 18:00:25 2025 GMT
Not After : Nov 5 18:00:25 2025 GMT
Subject: CN=d15c5e8135385a95ccd38d6a704885a4cd8ca386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:21:b3:53:b3:cb:78:81:f1:5f:9b:55:ad:8d:
14:98:ca:d2:44:04:87:36:90:6d:18:28:2a:93:4a:
5a:bc:38:12:8c:bd:9a:ca:7c:6b:a3:f0:48:b0:93:
42:d7:ec:d1:f6:ff:04:29:23:9a:f4:ec:9a:c3:a1:
bc:fa:10:88:a3:d2:79:3d:65:94:e9:e8:f8:79:d1:
9f:72:d5:fb:10:91:5e:af:f3:9b:10:2b:72:b5:14:
ec:44:65:95:71:b8:08:31:01:f2:ad:81:26:52:4f:
ac:88:b9:29:e0:9b:b1:71:29:8d:46:60:d3:58:29:
cd:c2:df:ff:93:3b:8b:c8:82:3f:e5:db:77:a1:bb:
00:bb:5d:f7:a8:5e:48:07:32:46:64:80:4d:12:d3:
b3:45:0a:60:7f:60:f2:55:89:a2:19:a6:68:bf:cd:
3a:f9:05:fc:1b:6e:00:52:a6:e5:66:7b:fb:d3:56:
fe:d8:f2:52:1b:0b:bd:97:4a:9f:21:72:0b:ea:cf:
a3:46:dd:15:cd:40:dd:38:f9:0e:98:5a:c0:9f:5c:
10:15:b3:aa:37:bf:cb:af:34:29:33:31:8f:13:0e:
e5:2e:84:1f:52:77:97:1e:79:e3:00:97:3b:65:aa:
06:95:1d:f1:c0:05:f0:12:e5:56:e6:85:27:02:3c:
c3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5C:5E:81:35:38:5A:95:CC:D3:8D:6A:70:48:85:A4:CD:8C:A3:86
X509v3 Authority Key Identifier:
keyid:8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f8:9a:41:b4:cb:9b:7b:c6:d1:d9:41:70:54:14:7d:39:28:
3a:7c:56:f3:b1:dc:45:06:66:c8:74:0e:4c:4c:ea:78:31:6d:
84:5b:cb:59:3f:7a:ec:94:16:00:cb:6a:04:b1:29:9f:1f:3b:
bc:51:d1:1d:e1:8b:4e:87:fc:ac:e4:a0:f5:d2:e6:53:0f:66:
2f:39:0c:ae:f6:fa:7f:6b:9c:9b:79:16:d9:70:5d:8a:72:6f:
20:16:a4:5d:c7:31:46:e7:da:75:8e:8f:d8:37:4a:84:c1:a4:
c5:19:93:b6:e5:a2:06:3e:d1:84:40:c5:2b:dd:2a:aa:a3:61:
54:9d:31:17:03:9c:aa:43:7a:81:dc:07:2f:68:8f:74:fa:44:
19:53:3c:f7:5a:4a:8f:ef:b1:65:d0:21:1f:83:3d:52:49:57:
2b:f6:f4:73:fe:89:db:b5:6d:9a:1a:4b:fe:00:a7:06:5a:65:
16:33:62:7e:93:c4:84:1e:0d:1b:d9:9d:63:31:10:aa:36:47:
61:a5:f3:12:2d:f7:05:03:5d:67:00:6c:3b:22:7a:68:60:4c:
1e:81:df:dd:20:ba:03:1f:bb:74:c5:2f:75:0b:e1:0a:08:8d:
a8:91:95:53:dc:82:51:89:58:0f:2e:c2:0b:3f:58:1c:5d:24:
fa:ee:6e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:34:11 2025 by rpki-client