Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
File: iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft (raw, json)
Hash identifier: e8gyEXPMwcDKFnz7zwFbxRgp57wJO35o7s3fMhGqtFY=
Subject key identifier: 2A:25:4E:D7:FF:3A:0E:F5:7E:CF:27:4F:42:14:A4:23:49:12:CF:8E
Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
Certificate issuer: /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Certificate serial: 019A4EF48A177E1422694C15B36E8E4F1FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
Manifest number: 0D7A
Signing time: Tue 04 Nov 2025 13:00:40 +0000
Manifest this update: Tue 04 Nov 2025 13:00:40 +0000
Manifest next update: Wed 05 Nov 2025 13:00:40 +0000
Files and hashes: 1: 8l1JGPKaxK0LdzidLYE5O7KO7uc.roa (hash: iLVJNEHjRSQZgufW9Xco39laNybFCSoPb4TytjD2nas=)
2: ZaUvqR58Anq8vLQipN0wr5eky28.roa (hash: SPNO6fIwJVYF/onFgsSackS0wfwUe38bLzIxAklnkrs=)
3: dXGr5BqS128mRLd0J3At49a2qzg.roa (hash: wuoQDj1SJzE/S7y91rkdzuUmyIzNX+hGJtJoYwKPBvU=)
4: iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl (hash: L2fdgCA+LUw2gFzFuBWnj2OfUVuxv3LMTwx219h29kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:8a:17:7e:14:22:69:4c:15:b3:6e:8e:4f:1f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Validity
Not Before: Nov 4 13:00:40 2025 GMT
Not After : Nov 5 13:00:40 2025 GMT
Subject: CN=2a254ed7ff3a0ef57ecf274f4214a4234912cf8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:52:3b:ff:fa:aa:eb:93:fb:1d:7a:cb:3f:f3:
b7:a9:7a:7e:bf:5b:46:d8:da:03:34:56:45:e1:f1:
de:d1:58:35:67:b6:8e:a8:90:97:6d:c6:db:8d:74:
e3:2a:2d:27:22:a0:d8:d2:84:c2:f4:94:79:06:2b:
81:1e:02:b4:dc:3f:3d:b6:7f:b2:79:f5:a4:3e:cc:
66:03:62:05:a8:c5:d3:8f:e8:ff:14:01:1a:f3:cd:
d5:d3:f2:14:d4:a0:5f:34:93:0e:46:c4:92:de:fc:
2f:2a:e7:78:c3:5f:d4:de:c8:cb:db:37:3b:71:5f:
3c:f3:ba:75:75:5e:2d:ab:b9:34:50:f6:fd:c3:b9:
e2:cd:b2:8f:0b:48:da:e4:96:92:be:96:cb:5f:db:
38:80:ec:4d:d4:70:94:e0:d1:5c:da:9f:b1:b7:2b:
d1:c4:6e:22:09:e5:4a:b6:15:1d:d5:e8:1e:25:e3:
ca:f3:bb:91:9f:b1:14:b5:f0:1c:27:12:a1:d8:5d:
98:df:62:da:23:86:51:c3:cf:f0:8c:ea:c8:30:10:
f4:7c:cc:24:c9:51:83:03:6f:71:22:17:8f:76:99:
4b:d8:7d:f6:37:a3:18:a9:ce:9a:e4:7b:c6:ef:74:
55:bc:b5:fa:a8:d6:0b:6d:e3:42:fd:d6:bb:cd:ee:
21:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:25:4E:D7:FF:3A:0E:F5:7E:CF:27:4F:42:14:A4:23:49:12:CF:8E
X509v3 Authority Key Identifier:
keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2e:0d:66:0f:c2:2c:57:02:52:c8:80:f2:32:01:43:6f:4c:
75:9c:75:c1:83:8d:fe:e8:f1:a8:f2:80:bd:1e:1e:f2:66:2e:
87:fc:9e:01:3b:e7:f0:85:44:44:c6:26:2b:a8:5b:58:cc:1e:
fb:7a:94:0e:b1:72:fb:7b:38:a9:28:0d:16:80:7d:23:25:30:
c9:a4:15:e7:35:a1:52:d5:50:0c:1c:6a:8c:88:e6:b0:18:33:
cf:fc:cd:81:9a:fb:38:29:a6:20:bd:99:20:b2:9a:81:bb:bd:
2f:f2:a7:c9:30:38:5a:cb:5d:b5:2f:b0:21:fe:cb:3c:48:af:
93:3a:a9:c3:ba:09:54:98:a4:3a:46:b4:1f:e6:b0:7c:9a:a7:
30:d0:b3:08:d3:51:19:85:d1:e9:7a:b0:23:d7:fa:44:e6:76:
c1:73:30:87:8b:a3:27:73:31:8b:bb:76:4e:b6:79:71:9e:f0:
45:13:01:98:3a:ec:40:fe:5b:5a:04:62:4e:40:23:06:35:2c:
80:65:38:40:2c:0f:77:05:95:23:d6:87:e0:90:e2:41:be:2a:
3e:b1:1f:e0:41:01:c6:ca:fb:34:45:5d:a2:f6:8b:6e:54:ac:
7e:05:f7:f3:59:36:60:37:9b:18:96:8e:23:11:20:40:15:16:
5b:4b:01:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:16 2025 by rpki-client