Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
File: iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft (raw, json)
Hash identifier: DXLQ9Gdz9tUZz/rakOhrGMSjMJ1IARVoMl+Pxqcd6Rg=
Subject key identifier: 9C:E0:D4:3F:56:34:9E:D4:5C:DB:1B:1C:7A:8B:60:28:F9:94:0D:ED
Authority key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
Certificate issuer: /CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Certificate serial: 019A541ACCCE7B8918CAAF81EDCC6332559D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
Manifest number: 4A
Signing time: Wed 05 Nov 2025 13:00:33 +0000
Manifest this update: Wed 05 Nov 2025 13:00:33 +0000
Manifest next update: Thu 06 Nov 2025 13:00:33 +0000
Files and hashes: 1: 0i9rX2feVpxn00o6Ok1LCwfKG9s.roa (hash: CXVbkTnTW3iOhYJS4A/hhGnO0DbUsClXOzGNTAyAP1Q=)
2: JFPB3uodgu0Gtl2wY044BZR5QnM.roa (hash: BoazJepaaj+nQ3+vbpvJADkcm/ka8XF9GvGPFx6HQMM=)
3: iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl (hash: prZFKgxtebZGs/VzZiLVx5DdfJE8dGlEIiBwgw6Gjyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:cc:ce:7b:89:18:ca:af:81:ed:cc:63:32:55:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Validity
Not Before: Nov 5 13:00:33 2025 GMT
Not After : Nov 6 13:00:33 2025 GMT
Subject: CN=9ce0d43f56349ed45cdb1b1c7a8b6028f9940ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a1:1d:0e:b2:63:30:e0:7f:03:84:db:d1:09:
f2:64:96:76:68:a8:2b:51:2b:c9:a3:06:1a:1c:3e:
24:40:7b:d0:c6:0f:ae:de:4f:da:51:77:5b:e6:1c:
0f:d7:35:19:a5:02:4a:0a:49:cb:58:7d:01:e8:ad:
ed:f7:90:4c:f3:8e:98:f6:db:85:67:e7:88:a0:90:
0d:b6:e2:60:eb:4d:37:f1:29:ce:e1:d3:b0:9a:82:
e5:dd:7c:40:e8:58:b0:6f:ed:97:f4:5a:91:79:aa:
22:10:a3:2d:96:20:01:65:fe:21:2a:04:24:93:f5:
6e:4d:61:48:71:19:2d:e1:1f:3b:02:ba:b6:d1:7d:
81:29:86:2c:90:49:b1:22:1d:9c:30:75:2f:10:9c:
3a:c0:b1:08:59:2d:ff:8f:4c:8d:2a:05:4a:a3:bd:
65:04:f7:c1:59:2b:26:b4:40:85:2a:1f:d0:4a:b8:
ed:c8:21:84:cd:a2:b2:d9:3a:7b:e5:85:df:a9:35:
e4:17:47:3f:d9:c2:81:05:74:f6:d7:7b:57:33:ad:
bf:02:de:0b:07:f8:2d:81:15:66:0c:f5:f4:cc:60:
dc:ec:35:a0:21:54:8e:48:57:62:1b:56:0b:df:57:
e1:b8:0a:6a:ba:d6:e0:7d:a3:88:b1:c3:b6:7a:35:
3b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E0:D4:3F:56:34:9E:D4:5C:DB:1B:1C:7A:8B:60:28:F9:94:0D:ED
X509v3 Authority Key Identifier:
keyid:88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:71:99:44:2c:22:dd:d8:a5:ab:50:ba:12:12:b3:0a:4e:33:
e9:6a:31:65:9d:40:c7:a7:e7:3b:44:2d:ca:0d:63:58:91:19:
c2:a6:b5:b3:cf:e2:25:15:54:92:8b:9e:69:65:95:52:14:67:
5c:f5:ee:7d:c5:ef:b5:77:b6:23:ff:0f:50:f1:4e:e3:42:7c:
01:76:f9:6e:76:ec:55:c1:de:f4:c7:f3:43:bb:ec:f2:a5:9f:
f3:d9:3c:66:ce:a9:00:04:bc:28:fe:e5:95:9d:dd:ca:9a:67:
33:fe:c9:d0:96:46:e0:26:f4:33:b5:b9:35:8f:ae:26:23:04:
ea:59:e5:c6:c7:82:0d:3d:29:27:de:8d:ee:87:65:65:a7:a7:
27:09:2e:3d:74:8a:8b:5b:25:0c:8d:0b:4d:d2:a3:13:a5:95:
d8:d0:49:74:30:c5:f0:48:4b:cc:7e:3f:2b:11:29:2e:54:0d:
f1:10:2c:69:0a:b7:75:28:bf:9c:4b:5e:e5:20:48:ef:f4:1e:
65:4f:d4:2d:ed:9f:fb:25:60:17:d7:25:8f:89:43:7c:1c:58:
ae:b1:6c:c8:6f:fa:38:6e:c9:29:34:42:f0:b3:ca:8e:3c:18:
16:c4:51:90:a8:06:a0:fb:b2:5d:52:cd:a7:11:ea:44:b1:32:
0a:b7:a9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:20:04 2025 by rpki-client