Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
File: ie36QUlE0BCsae5b-yJ3OySyfvs.mft (raw, json)
Hash identifier: axpRmfFtC1gtzTkq8C5dK8QdBkNuTUC5lO08Xd9sypM=
Subject key identifier: F0:3A:47:BC:45:46:9D:68:2F:00:4F:F5:36:B1:C9:0F:F7:73:10:37
Authority key identifier: 89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
Certificate issuer: /CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Certificate serial: 019A4DAA8F33240548272EB145C394A3D7B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
Manifest number: 0B80
Signing time: Tue 04 Nov 2025 07:00:14 +0000
Manifest this update: Tue 04 Nov 2025 07:00:14 +0000
Manifest next update: Wed 05 Nov 2025 07:00:14 +0000
Files and hashes: 1: 2j_QBpsrLBBxs622BISyOZtEgFA.roa (hash: 32mbR7LJ1AvTIHIxhitKhF6+X6cgHFfdsLG9qjMakhU=)
2: ie36QUlE0BCsae5b-yJ3OySyfvs.crl (hash: YjTjOMGpL7LxnJe908O/TXihADPaZcjMpuZ2svjwwog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:8f:33:24:05:48:27:2e:b1:45:c3:94:a3:d7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Validity
Not Before: Nov 4 07:00:14 2025 GMT
Not After : Nov 5 07:00:14 2025 GMT
Subject: CN=f03a47bc45469d682f004ff536b1c90ff7731037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f4:60:bf:08:ca:62:c6:7b:e8:ee:0f:3d:cf:
17:86:5c:ae:bb:02:e6:71:a5:50:a2:42:2b:0c:76:
88:78:58:29:1b:22:6f:ff:cd:9e:b9:0e:f5:be:24:
9d:59:2b:cc:e4:28:d1:4b:e7:9f:78:74:12:0b:67:
cb:45:fc:12:38:9a:3e:78:82:d9:29:af:79:16:40:
c1:4a:5d:0d:be:83:1f:e7:f0:a6:25:a4:2e:8b:11:
1d:09:e0:40:32:c4:9f:60:eb:2c:89:3e:23:b9:2c:
b1:86:dc:e5:37:cf:19:fc:27:8e:cb:81:6f:50:79:
c8:8b:e5:7c:2c:41:60:72:3a:ec:a9:7a:a5:26:ed:
65:5f:b2:11:35:e4:da:e7:e3:99:f8:96:e3:38:a5:
35:81:aa:54:de:98:d7:71:39:e6:a1:bb:a4:4a:46:
c8:d0:7d:e7:fc:97:e6:2e:7d:48:e9:87:05:ce:f3:
98:8f:ae:71:5c:3f:1e:fa:b4:53:c5:ca:44:f8:8e:
a3:5d:aa:5d:03:f7:7b:52:75:05:95:92:c4:8f:1b:
d5:00:18:22:8c:af:00:d4:ab:5a:a9:4c:c8:35:8e:
16:0b:b0:74:1c:ab:82:ab:7c:da:0c:3a:fb:1b:83:
0d:f1:87:bd:e9:2d:04:5a:f1:fd:aa:a2:be:08:0a:
37:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3A:47:BC:45:46:9D:68:2F:00:4F:F5:36:B1:C9:0F:F7:73:10:37
X509v3 Authority Key Identifier:
keyid:89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b1:02:3b:57:62:96:66:4b:3b:c9:ea:97:dc:ec:b0:4b:63:
c9:df:16:41:a0:a3:81:3e:48:f2:30:0b:00:e2:6d:b5:8f:70:
bc:7b:72:ca:0b:b4:6c:9e:3d:93:f1:c4:2e:4e:43:fd:ad:87:
87:c4:9b:91:a9:a7:ae:ff:de:ae:e3:e8:22:17:3d:8b:35:2e:
5f:21:38:12:94:3b:89:8c:f8:28:1d:53:a4:3b:ad:c4:7d:50:
98:86:60:98:41:ee:c5:c8:9e:82:b1:9c:e2:76:ff:38:0c:40:
39:08:ba:f5:1f:92:0e:06:e6:86:5a:ae:2d:36:d2:54:ca:ae:
4e:b3:ff:2e:03:d6:0f:d0:b7:a0:0a:ce:f1:1b:b2:ca:ce:0d:
3f:f9:48:c0:26:b4:06:8a:fc:c2:21:8f:00:1f:58:4d:0f:65:
b8:ce:4b:3e:6d:60:c3:4e:ff:25:5f:aa:2b:68:ec:38:26:3a:
ce:d8:2e:58:ae:63:da:5f:80:ef:b3:d5:be:fc:99:d5:a5:9c:
6e:4f:0e:fe:cf:e9:cb:1c:10:97:e0:ad:9b:19:28:84:3c:bd:
6a:bd:91:7c:7a:54:05:41:6c:ef:8b:8a:4c:8e:18:5e:42:0e:
25:88:3e:3e:2e:a5:3b:24:ce:f4:9f:28:fd:2d:11:54:ad:ef:
ee:6b:98:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:25 2025 by rpki-client