Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
File: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft (raw, json)
Hash identifier: 1C7HY1l5bD8JVO9rrRbRBhuLdRgSWH2FvDdg2nfHZq4=
Subject key identifier: 75:93:51:9A:E4:06:D1:A6:DF:4B:01:62:0A:28:18:77:E4:84:9F:10
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 019A4E4F4E489ED231AE172C9C3350974FBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
Manifest number: 15B8
Signing time: Tue 04 Nov 2025 10:00:11 +0000
Manifest this update: Tue 04 Nov 2025 10:00:11 +0000
Manifest next update: Wed 05 Nov 2025 10:00:11 +0000
Files and hashes: 1: 25GdIX8pGRrdAAaubJO0FxbYG-s.roa (hash: J7SjJPVMXuJzyuyQBNTx3E62SBRqK9gpWeifxFumUs0=)
2: 6WSzq5tklzrrb4CQ30LLV8NUx2g.roa (hash: UmnImARopszt+4WaNMMPCsufWGExd3hc37DvZdbg1tI=)
3: 8ROo1-f7zOJ7IGVOmN_RufzzbRg.roa (hash: 0g/v1GDnSb/mpf5pKYYz9HEAiGcoNER98ihb6wrQqWo=)
4: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl (hash: eapEKzTECuWgle+f60DwYl7UhuS6rKOPsvjTmgw74vw=)
5: OREDNoQ0vwPI3XM_zRsW3yzoE_A.roa (hash: 1cT3zKRDrAQDDxV5Rq7SD/mINGk0AiyR89E6Ur7LkVA=)
6: mQQXMqosDbrfiBBQFe3pss-9NtQ.roa (hash: qAb1oy5TaR+lNTajDgndtpEVHAu7ZMdgoTop9g6Wh6Y=)
7: uSaVwi6W5g3viY9NscHN3tqDzCk.roa (hash: t4D+qU5YVF27z4TGr3wG3ucQjp23my4+sKI2eFqOYYg=)
8: uumQQQ1viq_-gfcaqAufH6g_C7w.roa (hash: AM9mJlfYhSa7Wcw8Wx9nTWnnL8T0GQwXceLp5ft6/NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:4e:48:9e:d2:31:ae:17:2c:9c:33:50:97:4f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Nov 4 10:00:11 2025 GMT
Not After : Nov 5 10:00:11 2025 GMT
Subject: CN=7593519ae406d1a6df4b01620a281877e4849f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:61:53:8e:96:99:26:61:15:83:24:b3:df:09:
d8:38:e5:cc:89:ff:d2:50:f8:91:83:e9:86:5a:8d:
15:17:69:f9:85:78:de:e8:51:43:ef:8a:7a:6c:cd:
18:23:7b:17:96:7a:e5:22:36:70:76:47:9d:84:f9:
0a:5d:e8:e6:60:2e:b8:cb:1d:27:d0:3a:e8:8b:fd:
ae:9c:f0:3a:47:85:c6:25:7c:ad:48:16:2f:b3:79:
36:e5:dd:69:46:26:f1:2a:79:f7:f6:70:3f:ae:ad:
24:81:7a:7e:37:d2:90:7d:5b:d3:2d:dc:b8:01:09:
ab:f6:89:31:b5:c9:6a:d0:ea:1b:14:bd:e6:bd:48:
61:d2:fb:eb:c8:fe:28:d2:b8:68:63:e6:a3:24:ce:
4a:a4:03:3b:a1:0f:3c:bd:8b:5d:ad:4c:41:45:74:
fa:c8:f5:96:01:bb:d7:28:9c:49:8b:87:a3:06:9a:
22:73:c6:9e:cc:05:1c:57:25:e2:af:79:d9:3a:83:
77:d6:c5:41:79:07:59:09:83:89:60:fa:8a:9d:d7:
eb:a2:92:7d:d8:e6:6b:58:c0:e8:48:76:89:22:d7:
e0:c7:75:c7:8a:10:a9:f1:cf:ee:d1:15:4f:27:4d:
d7:aa:cb:5e:3a:29:f5:91:a5:a3:b9:eb:eb:34:aa:
1f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:93:51:9A:E4:06:D1:A6:DF:4B:01:62:0A:28:18:77:E4:84:9F:10
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:52:d9:9f:d8:4a:06:24:41:b7:08:61:ad:43:12:d1:95:e7:
b2:8a:75:2c:e7:dc:3e:92:e8:2c:e6:e4:bf:31:10:a8:6d:c0:
c1:03:d4:81:60:2e:9a:27:28:29:38:f2:b2:cf:f3:ee:0d:ea:
ac:3c:9d:10:4a:c7:3f:86:c1:b5:f8:21:51:5a:d9:ec:50:33:
38:8b:db:33:de:3e:88:64:e0:1b:4e:10:a0:cd:6a:b3:32:ab:
a0:77:f6:ce:89:f3:9b:bd:33:4f:36:3b:8d:c9:06:97:53:c3:
bc:c9:9a:b0:ba:f3:fe:e1:3a:51:73:b7:9f:af:8f:f3:38:bb:
eb:25:21:b6:0d:73:c6:73:6f:d1:37:ad:e7:ec:b4:f4:6b:17:
12:e1:40:aa:79:1a:c6:c3:a7:93:cc:a4:86:2a:31:0a:9e:58:
d4:e9:3e:c6:ba:57:18:14:4a:1c:c5:5c:08:82:f7:53:16:52:
67:0e:e1:42:6b:79:02:43:ad:7f:2b:24:4d:a8:a0:71:22:73:
f0:80:cc:e0:60:8b:a5:79:d3:89:7f:db:05:75:78:8b:8f:c3:
f0:c3:11:37:1c:91:dd:83:76:c4:de:c4:c4:a4:36:35:75:ea:
58:e0:a3:91:c6:0b:c1:ec:5d:43:c6:d6:bb:76:8d:04:86:ae:
63:27:8f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:06 2025 by rpki-client