Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
File: iBr4X4HdPzskqxTtH0LHzEZlAvA.mft (raw, json)
Hash identifier: m2O1n1cxTdlcPm21/2mN8L96xfI0uCmAH/PrcN3jn10=
Subject key identifier: F8:25:71:BD:4F:EB:44:49:05:06:97:9B:FC:B5:07:91:E3:02:A7:05
Authority key identifier: 88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
Certificate issuer: /CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Certificate serial: 019A4D7446123B82C0CA19B98FEB37BB12D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 06:00:56 +0000
Manifest this update: Tue 04 Nov 2025 06:00:56 +0000
Manifest next update: Wed 05 Nov 2025 06:00:56 +0000
Files and hashes: 1: ThUJ8aSmMtP4aHcJCzzypfLa8ic.roa (hash: dNkVlGDZVTIktuBX7rmx/RdrVxwALHhLlc8K3va90zE=)
2: iBr4X4HdPzskqxTtH0LHzEZlAvA.crl (hash: GXkSjsNZQIouaZ+m1YRTI4pWOFfkTLJHxpVGQYcVEG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:46:12:3b:82:c0:ca:19:b9:8f:eb:37:bb:12:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Validity
Not Before: Nov 4 06:00:56 2025 GMT
Not After : Nov 5 06:00:56 2025 GMT
Subject: CN=f82571bd4feb44490506979bfcb50791e302a705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:ba:fc:85:6a:5e:32:04:26:58:1a:ae:6b:
61:78:f3:2e:50:87:42:27:f4:a4:b2:f3:46:a0:8a:
b8:50:96:de:96:51:6e:f3:de:80:9e:f1:d5:e1:5f:
a5:0d:df:c9:53:01:8e:1e:19:8a:5a:b4:31:b4:f4:
df:30:49:11:f8:c7:00:da:27:bd:a5:68:52:e0:b4:
1e:04:57:3e:68:37:70:ff:5e:62:29:69:a4:9f:b5:
56:05:ea:db:49:bb:a3:dc:51:10:1d:3c:d6:a6:78:
ee:fb:55:60:87:97:be:89:69:85:cb:5c:c5:bb:99:
48:00:ac:fe:97:64:27:0e:bc:a6:38:85:4d:b3:d2:
d9:9a:ab:a7:85:a2:f4:98:c5:10:eb:b1:39:1a:5a:
d5:17:db:46:52:02:08:e0:b1:9c:d9:82:05:23:a4:
f7:4e:d7:37:64:13:5f:44:ec:9e:87:b1:b7:ca:2c:
96:6f:b5:60:56:b2:25:eb:0a:2c:c3:db:77:42:c0:
9b:2d:3d:c2:fc:e5:b2:0d:ee:02:e7:3c:8d:c3:4f:
4a:c8:c2:19:28:c6:9e:3e:fe:40:3a:24:23:1a:e3:
01:65:a4:60:9e:16:df:59:90:67:03:2e:e9:f3:57:
48:83:15:fa:16:58:ea:ec:f3:32:0a:cc:e5:61:bf:
55:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:25:71:BD:4F:EB:44:49:05:06:97:9B:FC:B5:07:91:E3:02:A7:05
X509v3 Authority Key Identifier:
keyid:88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d1:9c:7a:a4:39:0c:04:9e:9d:07:2d:45:0c:b4:f5:0b:5e:
84:50:6f:26:88:c1:d1:2e:4a:27:ee:43:62:0c:f8:06:43:f5:
47:10:40:ef:84:d7:7c:72:8c:5b:04:02:44:2c:b5:0a:9e:2d:
39:12:bd:47:61:30:13:e9:f3:98:3c:22:eb:f2:15:82:e4:92:
09:0e:0e:61:bd:f9:95:4d:f3:b3:c9:6a:50:cf:22:92:d5:d5:
e6:81:cc:2c:54:c9:4a:45:e5:37:02:49:c3:bf:3b:a5:69:0c:
61:4c:fd:5d:19:90:c2:c7:5d:8c:32:24:81:ef:d3:d6:8b:a5:
23:74:49:e6:66:13:d9:7b:6a:17:c7:69:75:19:bd:19:ef:cc:
79:d1:dc:5c:ef:f6:b2:28:3c:1a:d5:8a:48:11:95:05:43:af:
79:11:c9:2b:c7:cc:35:5d:58:d9:d9:2b:cf:a1:3d:00:2f:49:
5e:31:35:55:7a:65:2e:7a:78:38:a3:7b:16:76:ea:fe:f5:41:
3d:68:3a:53:f4:e4:d8:65:49:f6:d0:34:21:d2:ab:9c:d0:ac:
26:92:21:bb:8e:56:1c:5d:2c:3f:d3:2e:e1:fb:13:5d:9d:e9:
d0:85:97:f5:7c:31:ce:20:59:a8:ab:37:62:65:a5:9b:22:91:
e8:ba:7e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:54 2025 by rpki-client