Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
File: ieXrHhIJiXh0XVQNypbP8N5HBNo.mft (raw, json)
Hash identifier: eDLTbv9f1qLDSrSJLlLWCSB1yMVdJ4GF9KFSU3cu2Mw=
Subject key identifier: 98:5A:0A:29:E7:6D:7D:6D:52:7D:72:F5:B2:02:B8:02:F0:A5:82:21
Authority key identifier: 89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
Certificate issuer: /CN=89e5eb1e12098978745d540dca96cff0de4704da
Certificate serial: 019A56E47244C1BBD55711F4D249467BAC32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
Manifest number: 0B86
Signing time: Thu 06 Nov 2025 02:00:03 +0000
Manifest this update: Thu 06 Nov 2025 02:00:03 +0000
Manifest next update: Fri 07 Nov 2025 02:00:03 +0000
Files and hashes: 1: ieXrHhIJiXh0XVQNypbP8N5HBNo.crl (hash: jfmbFrFelIJU/3YKqbxxffumoucAE+iifjekygbbWdU=)
2: l-HFEGYP57VmF8aDDh7--ZbJBDw.roa (hash: z6foBKVqU7T5Yu/Dwks8ZalWU/MYlRsXoQCU7GPCUOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:e4:72:44:c1:bb:d5:57:11:f4:d2:49:46:7b:ac:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e5eb1e12098978745d540dca96cff0de4704da
Validity
Not Before: Nov 6 02:00:03 2025 GMT
Not After : Nov 7 02:00:03 2025 GMT
Subject: CN=985a0a29e76d7d6d527d72f5b202b802f0a58221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:a3:ec:c5:d9:89:c7:c4:7b:cb:fe:65:08:
54:bd:34:b0:9f:fe:48:01:e0:e1:23:8a:e4:53:75:
45:77:d8:d5:b3:97:52:7d:49:2b:85:fa:b6:2a:03:
78:fb:d7:07:47:bc:16:38:da:9f:b5:62:ee:77:4d:
42:30:19:dc:0b:57:ed:01:cd:88:00:9a:fb:43:13:
d3:93:cb:3e:00:2f:c3:23:30:2a:df:da:c5:11:a1:
44:8b:1a:cd:50:43:94:7a:b6:0a:79:b9:b7:4c:34:
fa:9c:b7:53:5b:a6:05:53:90:db:10:d2:15:72:a5:
ff:94:a4:5a:e0:c3:20:aa:56:dc:eb:0f:3f:09:9a:
dd:6c:19:d7:40:26:e2:1d:0e:48:99:d7:35:d1:5e:
51:2e:96:d6:b5:13:b5:0b:9d:ab:1c:50:d2:9f:22:
00:11:d2:1c:2c:72:5c:48:5a:09:74:21:3c:6c:26:
25:1c:cf:ce:a0:c1:f8:96:69:34:1b:18:f0:96:5e:
9d:11:16:65:ba:f2:c2:67:0e:d4:bd:6b:5a:01:d0:
fa:78:48:3f:ee:d0:88:cc:ff:f5:65:ae:a7:87:5b:
73:d7:bb:f4:d4:0e:fa:0e:8a:df:fa:b7:1c:78:f8:
c6:24:7e:51:e9:40:d5:0e:93:63:2d:9e:1f:4b:2c:
5c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5A:0A:29:E7:6D:7D:6D:52:7D:72:F5:B2:02:B8:02:F0:A5:82:21
X509v3 Authority Key Identifier:
keyid:89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d3:b2:8a:22:ce:d0:35:b5:c2:b2:b5:b6:cf:1b:5d:44:bd:
66:56:02:34:f4:4f:14:a5:05:2c:10:a8:97:7f:c3:71:47:3e:
e9:54:90:f5:88:ca:e4:dc:40:33:f3:db:18:c2:22:f8:0c:ce:
d7:a4:42:01:ec:46:4a:ed:30:aa:98:74:44:1d:0f:4d:e9:c1:
59:00:5a:33:3b:db:dd:54:a6:89:f5:0f:d1:89:7d:fa:c6:44:
2b:79:63:30:de:2b:e4:fd:c4:5f:3b:f4:7e:d7:ce:40:1c:45:
6c:06:19:b1:57:67:a7:9e:eb:34:d1:dc:04:4b:eb:c6:91:67:
ce:66:39:b8:21:50:b5:ef:1f:20:18:b1:25:b6:09:b1:80:a3:
d0:77:11:4d:9d:09:07:3a:14:f1:36:b6:83:fe:b3:f0:1c:b8:
83:77:92:0a:17:bc:fb:9c:ca:58:82:04:f3:c3:b6:bf:4c:49:
6b:95:39:ba:8d:49:86:8a:77:8d:cf:92:39:50:69:78:84:42:
49:ca:03:44:3c:59:0d:55:53:30:ee:6f:ac:3b:b9:e9:c8:cd:
44:31:fa:8f:91:ba:ac:21:c0:3f:05:d1:bd:72:83:01:ae:64:
8e:c0:3a:45:a5:57:ac:b4:ab:de:c6:23:9b:e2:fc:53:b3:90:
55:a0:5a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:04:31 2025 by rpki-client