Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
File: IjbtX1Yj7et5EKzTHV9u6B5csX4.mft (raw, json)
Hash identifier: tboebKIMv/fin5IKi8XtLBJtNAIs/SLJ63bTaKSpfXs=
Subject key identifier: 3A:29:A6:B2:E4:BB:88:50:82:AB:F5:E7:DB:C7:8F:AB:F3:B0:DA:2F
Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
Certificate issuer: /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Certificate serial: 019A507491B499D0229B5FB4F17F21FBE538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
Manifest number: 0EF4
Signing time: Tue 04 Nov 2025 20:00:07 +0000
Manifest this update: Tue 04 Nov 2025 20:00:07 +0000
Manifest next update: Wed 05 Nov 2025 20:00:07 +0000
Files and hashes: 1: 2aoaMcLeoHsRYMrDwR7GYBYfV38.roa (hash: jssRFClKzuPy7Bnng6eFWBTeCatBaCf3VHUaJ2d4iI0=)
2: DY_YBD7dUEwRu5f1VApN2Xto06Y.roa (hash: kRig8nqc2JDYyWblKNLJUeoM3OkrL2nvfEXQMIcNjPI=)
3: IjbtX1Yj7et5EKzTHV9u6B5csX4.crl (hash: 4m6tsshG2QB3Iq9so5S9i9XmqRuqEd+6cdbOwzuFSwk=)
4: oxqh0Vlunc9_jJzsSDgtivZ6iaI.roa (hash: O+sbnF0yUj4wLiTH2KtiKCTxn2FjAX1wiARhxbkhBM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:91:b4:99:d0:22:9b:5f:b4:f1:7f:21:fb:e5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Validity
Not Before: Nov 4 20:00:07 2025 GMT
Not After : Nov 5 20:00:07 2025 GMT
Subject: CN=3a29a6b2e4bb885082abf5e7dbc78fabf3b0da2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7d:e0:6b:65:e1:4b:62:34:17:55:07:fe:9a:
c9:c2:3a:1e:ed:29:d2:94:05:3a:70:9e:41:1b:5a:
6a:f3:20:a5:ca:f4:bf:e8:8c:c8:f9:c5:c7:7a:36:
50:24:41:7a:28:fa:6f:35:c7:09:45:e5:d4:52:b8:
3e:35:c8:6e:3f:5f:4e:8a:7f:b1:50:45:44:63:de:
60:af:1d:98:5c:0a:3e:7f:46:19:bc:3a:2b:d6:3d:
e7:a8:b6:dd:e2:8b:20:eb:93:3a:91:ef:10:34:13:
7b:e2:73:a0:45:1b:a8:c7:19:03:40:63:90:da:67:
c0:97:bd:4a:b2:b6:f7:d7:1c:b2:db:92:23:3b:ad:
a1:10:f9:7b:47:f8:e0:e9:17:be:a5:fa:b7:a2:56:
9a:24:e8:fe:d8:90:a5:86:4e:ed:c8:1b:95:21:4f:
29:ab:8d:bd:2b:a0:a1:43:31:6a:5d:85:07:d8:4c:
bb:06:ce:a0:6b:7a:76:be:dc:7b:f5:48:ea:76:13:
2e:06:b5:1f:7c:eb:bc:46:f3:67:76:f4:3a:56:bd:
46:43:8d:15:d5:d4:7a:52:fc:d2:fa:a7:00:a8:6d:
1c:f1:aa:fd:83:78:29:98:20:78:f5:01:6a:4f:56:
e6:cd:cd:7e:9f:80:60:f9:8b:ce:6c:c3:dd:1b:4d:
fe:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:29:A6:B2:E4:BB:88:50:82:AB:F5:E7:DB:C7:8F:AB:F3:B0:DA:2F
X509v3 Authority Key Identifier:
keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:7e:54:0e:d2:dc:e6:bc:bd:9d:1e:9a:60:36:fb:c9:04:d8:
0a:3d:e2:1a:fd:0d:a5:b7:ac:90:64:0c:24:b9:16:4c:c6:8c:
1a:3c:19:4c:df:80:8a:d5:65:39:1c:89:19:04:3c:c7:5d:82:
62:0c:90:9b:00:53:86:65:4c:06:99:41:18:06:da:88:56:ae:
70:5a:52:99:1b:79:8d:f3:54:e5:ec:c0:5e:14:e5:55:7b:c1:
b2:f5:9a:5e:77:8e:a6:a8:63:78:41:84:d4:db:d8:98:7f:1b:
82:3b:9c:24:1f:1e:fc:20:1a:18:a5:aa:f7:b6:ef:21:f1:57:
d4:e6:ba:aa:93:17:01:8b:3a:4d:5f:33:f6:d4:db:f4:9c:d6:
52:a0:cf:18:5d:32:21:0a:6c:58:44:57:f9:8c:19:f5:ae:09:
8e:b6:35:af:b1:e4:9e:35:4d:f5:fb:72:b6:9c:3a:b4:9d:7c:
0b:3d:ca:3d:d6:e6:b1:67:36:3e:88:99:d1:b3:49:d8:a1:40:
6b:ed:20:f1:ab:41:aa:d0:d4:fe:f7:ee:c6:9c:af:89:58:50:
d6:d0:6f:03:fd:5d:85:90:62:b6:af:90:60:88:c6:25:b9:3e:
43:2e:3a:3a:31:74:fc:a5:20:40:7f:54:ed:ba:96:78:d1:2d:
80:9e:f8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:15:32 2025 by rpki-client