Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
File: I7oexPA1py36OekwrY7FQ2jrevQ.mft (raw, json)
Hash identifier: 5XDnvsHOqnhZGbdp6RbNhXI77W8hag85Dv/kygSkTfU=
Subject key identifier: 26:7C:F2:D1:97:5C:5F:AE:0D:6F:A7:8A:F8:FD:9C:D1:6D:38:58:F9
Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Certificate issuer: /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Certificate serial: 019A4EF50C8ABBA1A27355B4CEF93B0B67C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 13:01:13 +0000
Manifest this update: Tue 04 Nov 2025 13:01:13 +0000
Manifest next update: Wed 05 Nov 2025 13:01:13 +0000
Files and hashes: 1: I7oexPA1py36OekwrY7FQ2jrevQ.crl (hash: KpTQCk4BgZJNg7NhMC/idydlB+RYF6AUnUJnRIgzo0U=)
2: LrVwKiIfML7mAYKSwQjrFc9mp0A.roa (hash: pqGsuXC48BK/nJrmWeripHJL6964Try+bgZKQC5cMuM=)
3: bKwA7ygctFGfYxj37Ulrjy4h7wc.roa (hash: wDr01UuqGpYUgCW7TRCxOE6weB2OEkQge2nt3Tah0ms=)
4: b_MmvUZfA5ZZF4bFCypyK1p5UMI.roa (hash: 9E4PGJ6w5hYLiKvYcuEqwE8eKmB9cOnevFWIyVMZhgE=)
5: wmfmaFsDhu27cNgPElAJRkA9d2A.roa (hash: jsS53vdJzXk5aLl615moQFBVWf7IQgXR2RroQvAW/zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:0c:8a:bb:a1:a2:73:55:b4:ce:f9:3b:0b:67:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Validity
Not Before: Nov 4 13:01:13 2025 GMT
Not After : Nov 5 13:01:13 2025 GMT
Subject: CN=267cf2d1975c5fae0d6fa78af8fd9cd16d3858f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d8:aa:27:d5:64:bc:12:4c:6b:8b:83:04:32:
48:1e:c7:23:34:c5:c2:46:4d:95:ab:cc:27:19:9b:
a2:a7:68:00:09:01:1a:49:76:f5:47:4a:ba:39:8f:
84:7d:3b:3e:a8:79:a4:de:05:5f:62:9d:cc:b8:85:
ca:fc:87:88:21:7b:86:35:91:28:b1:bf:61:6b:10:
38:5c:81:ca:93:4d:f8:99:fa:4a:c0:fa:24:a1:4b:
5c:2b:81:0f:14:a4:9f:69:55:da:f8:63:c0:6b:0d:
be:de:46:1d:9f:30:4d:31:5d:6f:5e:eb:07:28:05:
4a:d4:08:0d:3b:52:9d:a3:1d:89:b3:a2:8e:f2:c8:
28:d8:f7:6b:43:b6:3d:f9:96:ec:30:58:79:a0:5f:
0f:9f:0b:96:dc:9f:ca:8a:b0:fe:b5:b4:16:14:b8:
09:27:23:f3:2b:fa:6c:99:23:c8:2d:fd:20:3f:a3:
6f:3d:34:75:00:1d:29:4d:fd:56:c9:56:1b:bd:ab:
d0:27:8a:ee:c2:69:61:9e:05:5c:27:e8:6a:4b:c7:
89:f4:52:16:ad:82:46:f1:45:0d:cf:e5:7c:0c:4e:
a8:83:c4:76:0c:11:44:e5:c4:80:c2:65:ee:e9:5a:
7e:ec:e3:51:3c:12:a1:4f:b5:b2:97:ea:24:3e:8b:
d9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7C:F2:D1:97:5C:5F:AE:0D:6F:A7:8A:F8:FD:9C:D1:6D:38:58:F9
X509v3 Authority Key Identifier:
keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a6:14:1e:31:93:4c:34:1f:80:03:68:9a:39:eb:12:78:64:
38:57:9d:bb:c3:2a:80:f8:1b:68:64:a9:65:f1:a1:d1:4d:50:
ce:25:1c:43:b6:33:ad:07:7f:97:8d:7d:4a:1e:97:04:1c:00:
b6:85:78:aa:b0:c9:60:1c:e0:51:9f:68:11:52:eb:60:58:56:
45:f0:a4:0b:a4:05:22:b9:55:9a:b9:dc:1d:4c:aa:7f:20:1a:
6d:72:f2:ae:56:03:12:4a:18:e6:32:ff:98:3e:23:c7:e5:5d:
f3:99:71:32:cd:5c:75:fd:5d:68:0c:c4:3a:0f:aa:96:f7:84:
e6:4d:9c:97:76:f6:7e:ed:ba:7a:e7:fc:dd:e9:e6:24:2e:5d:
6c:f9:43:fa:e5:b5:ba:28:e0:5b:68:a6:69:ab:e0:91:29:2d:
e4:d4:1b:af:c0:43:81:0f:1e:d7:8c:4c:d5:f6:42:e8:ac:4e:
d6:78:62:aa:47:3d:2c:96:c4:f9:e7:9b:c6:49:f9:24:bc:e7:
44:31:57:49:2b:47:9c:2b:aa:3f:1a:71:cf:98:a1:f2:0b:da:
35:90:d6:1a:9c:8b:5b:e6:67:e4:56:25:71:c1:80:ef:21:c3:
57:b3:2d:76:52:a4:ed:e4:00:7e:46:50:bb:dd:f0:86:48:13:
c5:57:0f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:53 2025 by rpki-client