Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft
File: ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft (raw, json)
Hash identifier: m8CAf6xhrfQePMV+wG5gJKJ1h/rhT7Vec+81x7w9gyE=
Subject key identifier: 01:40:A9:B0:75:4D:0A:2E:9A:52:30:B0:75:16:90:FA:26:61:9D:63
Authority key identifier: 8A:3E:C0:53:72:42:F4:4C:E7:D5:93:3E:9B:32:20:4B:3F:85:E9:9F
Certificate issuer: /CN=8a3ec0537242f44ce7d5933e9b32204b3f85e99f
Certificate serial: 019A4E191A029D5DA4250A027D1416B4FCBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 09:00:59 +0000
Manifest this update: Tue 04 Nov 2025 09:00:59 +0000
Manifest next update: Wed 05 Nov 2025 09:00:59 +0000
Files and hashes: 1: PiesOXOJWPwXLYJ2cHTuySunyKs.roa (hash: 4Awv2N2IL2lFOspDb44o4wESpUNC6/dxhK+k94xsPOI=)
2: ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.crl (hash: RabDGplpc+1LZEjC6gnb2JYkLlfLUV6IQiX5jq9DjjQ=)
3: vH0ybQg-4MOg1JIP_NGzzKPVW0A.roa (hash: 33oKapmHx4XlPITzHeNgxD+FtYRNK19YTryf0BIZJ+Y=)
4: wjWLj_FDNoLKRo-jWXxTwFjan7M.roa (hash: ztSdcajVdWIcA2EPHQCjpwBh341/H4c/xdNmghfKI0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:1a:02:9d:5d:a4:25:0a:02:7d:14:16:b4:fc:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a3ec0537242f44ce7d5933e9b32204b3f85e99f
Validity
Not Before: Nov 4 09:00:59 2025 GMT
Not After : Nov 5 09:00:59 2025 GMT
Subject: CN=0140a9b0754d0a2e9a5230b0751690fa26619d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:e2:39:02:dd:68:d1:fe:56:b0:59:c6:3b:
70:60:bf:f2:cf:6a:04:13:c5:d3:a8:4c:30:63:9d:
66:73:33:b1:4a:85:43:42:f5:44:7a:b3:7e:94:68:
e6:6a:f1:6a:8b:0a:97:29:59:cb:14:c5:7b:2b:63:
cf:57:fd:fe:82:95:68:d0:c3:84:de:ee:2e:29:bd:
92:56:62:64:d8:65:07:49:b4:03:a6:85:2a:2f:b9:
cc:52:54:4c:1b:a2:84:01:4b:14:64:5d:d0:e6:8d:
89:32:f7:bd:bf:c5:96:0b:02:e0:31:86:63:55:15:
73:f2:7d:47:2e:9f:df:4b:c7:a6:22:83:b8:e0:42:
72:46:be:db:e8:43:83:dc:4a:2d:38:bc:f7:06:0f:
66:4a:ab:53:90:8f:9a:19:43:29:74:3c:55:1d:fb:
8c:ba:de:6b:28:f7:eb:3b:c1:34:40:7a:22:36:ee:
07:cd:db:4d:a6:be:4c:91:54:6c:17:26:6a:01:ee:
1b:c8:d0:71:a3:7e:dc:b7:49:74:c9:ed:c2:1c:8e:
fe:38:ee:a9:09:17:be:29:a6:30:b8:05:d7:b8:6d:
cd:9a:29:62:d2:d3:bb:7f:1e:d1:d1:da:37:5f:5d:
ec:d1:ae:4e:b0:66:9e:c3:41:61:e9:8c:f8:20:0f:
34:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:40:A9:B0:75:4D:0A:2E:9A:52:30:B0:75:16:90:FA:26:61:9D:63
X509v3 Authority Key Identifier:
keyid:8A:3E:C0:53:72:42:F4:4C:E7:D5:93:3E:9B:32:20:4B:3F:85:E9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a9:3f:8f:f4:81:30:0d:f0:ec:70:71:28:2e:9a:fb:57:31:
76:79:be:a5:b0:3c:a1:21:53:49:fc:55:83:dc:ff:c8:46:f6:
6d:63:11:0e:4e:86:11:be:bc:82:45:19:c1:32:4a:87:b6:20:
95:f2:60:dd:04:59:d7:b1:65:b2:37:e4:9f:79:1b:08:e1:11:
83:1a:b6:68:4b:36:99:ff:c1:c7:6c:f8:04:dc:8c:5f:a9:e2:
10:1a:30:61:32:ed:6f:49:fc:11:4c:e5:cc:9c:53:35:03:48:
12:0e:79:54:4a:ab:af:08:3d:ca:37:4c:bf:93:b1:55:25:cb:
8f:ce:c8:c2:22:06:0c:10:bd:e0:1a:26:b2:a7:16:04:8d:b7:
05:d6:88:06:87:d0:21:cd:e6:3f:3c:94:37:fb:e7:4e:46:ad:
2c:82:42:95:8f:2e:97:5c:7b:83:d1:02:ef:49:05:09:01:34:
d7:6b:dd:43:f7:c1:b0:d6:e5:a3:48:15:1b:a6:4f:92:48:1c:
5e:8a:c9:ba:e8:f5:21:ac:22:47:e9:b4:2c:4a:18:f7:c0:47:
91:9f:93:8a:38:4b:3a:31:14:d4:dc:7a:97:b3:6d:ae:f4:02:
0f:b2:ce:60:d1:e8:9c:c3:39:d0:7a:5a:b0:69:fc:2d:17:bd:
86:13:c2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:50 2025 by rpki-client