Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
File: IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft (raw, json)
Hash identifier: XDVoW7nUEw9ryVFSF8UiH9So/quhrG9swHuGoZczzw8=
Subject key identifier: D6:27:D3:74:89:4C:B1:1B:CE:EA:15:16:F1:82:4E:75:29:84:16:A0
Authority key identifier: 20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
Certificate issuer: /CN=200585361d51a72e7ba6308c0ceb160244831178
Certificate serial: 019A5375D4F6E484F13D8D15A3A5E399C902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
Manifest number: 0842
Signing time: Wed 05 Nov 2025 10:00:22 +0000
Manifest this update: Wed 05 Nov 2025 10:00:22 +0000
Manifest next update: Thu 06 Nov 2025 10:00:22 +0000
Files and hashes: 1: HbRQpBgObvXEU2PlNrEx4IzYigA.roa (hash: Zv7kNMXOsdDw3zZwNDMjdGrZy1Nvjep0YaEbodwv3Qw=)
2: IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl (hash: cLp//7XwUDEXTCyE04FME8WG2Ni9wDbnZZHoF6Z6QCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:d4:f6:e4:84:f1:3d:8d:15:a3:a5:e3:99:c9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200585361d51a72e7ba6308c0ceb160244831178
Validity
Not Before: Nov 5 10:00:22 2025 GMT
Not After : Nov 6 10:00:22 2025 GMT
Subject: CN=d627d374894cb11bceea1516f1824e75298416a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a4:79:0a:27:47:7a:74:88:91:2b:f6:40:42:
16:a5:1d:88:33:49:99:9f:22:47:f0:f8:54:3b:c3:
d5:c0:56:55:95:6a:07:d5:94:57:30:db:5f:7a:3f:
d7:e3:8a:dc:c9:cd:f4:dc:d5:bf:74:00:ac:bb:23:
1b:69:77:d1:5f:c7:14:6c:f7:b6:64:29:d9:be:24:
af:f7:1a:f7:cc:4d:77:24:5f:08:ba:b5:c8:08:63:
85:d4:79:4f:93:14:cc:90:6c:6b:18:02:6e:87:e4:
66:50:10:4f:54:6d:c8:40:43:7c:1c:ee:dd:d9:c0:
eb:1e:8a:c7:db:7e:fa:05:10:cc:49:6a:fb:b9:92:
74:40:c0:17:db:5c:ca:36:da:27:2d:8c:af:83:21:
3a:eb:32:50:bb:ec:ff:e1:dd:77:f4:e5:07:b9:71:
54:71:d7:71:f9:f9:b1:91:49:7b:8a:9e:eb:68:00:
f0:e6:49:0d:ad:ce:84:4a:f0:ba:1c:b2:4b:7d:f8:
91:04:93:0b:8d:bb:71:28:3f:d7:64:c0:39:2f:c9:
f8:e2:de:ef:3e:b5:23:7e:f6:1b:06:67:ce:06:df:
65:cc:e7:c0:0c:7e:f2:4f:ba:dd:ff:b4:e0:05:ef:
15:13:7b:48:eb:69:ec:52:ab:a6:59:36:a9:bc:d7:
8e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:27:D3:74:89:4C:B1:1B:CE:EA:15:16:F1:82:4E:75:29:84:16:A0
X509v3 Authority Key Identifier:
keyid:20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:01:44:fd:b9:c4:21:01:19:ce:af:1f:ea:f5:e6:33:d4:f6:
5b:03:4b:40:c1:59:46:97:9a:e4:0e:fd:70:23:71:01:46:bf:
3c:60:37:20:14:31:b6:41:82:79:a1:e4:3a:02:4c:d6:1c:d5:
03:d5:03:3d:b6:2e:d4:1d:39:61:aa:3a:4f:89:a8:ee:b8:7a:
d0:5a:ee:c4:b8:c7:a6:ab:1d:4b:51:ce:4f:6d:3e:d1:d9:b7:
54:3e:5a:da:79:86:fe:c5:90:79:de:70:cf:9c:f9:42:ae:ef:
79:d5:85:6c:83:2c:01:24:59:7c:8b:4e:27:d3:eb:c8:b0:ad:
bc:49:e2:26:09:f7:37:a6:94:7d:1f:3b:98:28:fc:a9:33:db:
59:47:34:52:a6:08:5f:7b:77:67:a0:77:dd:77:51:5a:03:0c:
1a:0e:b4:04:cb:3d:de:43:2c:aa:87:4a:79:06:5b:20:8f:06:
95:07:a5:df:2c:f0:39:f9:ca:f1:6f:b7:f9:e2:47:59:5e:3f:
09:14:f3:35:a3:74:49:71:5d:50:fa:b7:6b:75:bc:65:ab:47:
a6:70:cb:cd:00:33:83:19:71:7e:fb:ff:5b:dc:c4:3b:b2:4b:
ff:f0:0d:b9:8d:c0:d6:79:a5:7c:0f:65:0b:cd:10:b8:70:14:
d3:78:49:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:20:49 2025 by rpki-client