Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
File: Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft (raw, json)
Hash identifier: 5QZvdMRbTIehrbY0+2mpzPvYbReKrxBGUjLvLis7dUw=
Subject key identifier: 7B:B2:50:9C:D0:FC:12:76:8D:B0:0F:43:92:33:74:E5:C9:EB:DC:A8
Authority key identifier: 23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
Certificate issuer: /CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Certificate serial: 019A4D079F1E228B5F3DFCF16F95D136B078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 04:02:16 +0000
Manifest this update: Tue 04 Nov 2025 04:02:16 +0000
Manifest next update: Wed 05 Nov 2025 04:02:16 +0000
Files and hashes: 1: 1--lfY911D4o-n0x13kTzxgPAa1c.roa (hash: 7jYLrsmco67v6YLtE1rUNiJwEOZGyK+AZuLqYtKHcu0=)
2: 1-PLlhObhI2KvU31PH_oGB4eDG5U.roa (hash: h2JQLRGR8RDG0rSKaLT0jUCHodG0PW/TX0LlgI0i4Qc=)
3: Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl (hash: /vNPue9B9TVsmrwStYJfW7QsiMouWO7PCjIpWQFT33Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:9f:1e:22:8b:5f:3d:fc:f1:6f:95:d1:36:b0:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Validity
Not Before: Nov 4 04:02:16 2025 GMT
Not After : Nov 5 04:02:16 2025 GMT
Subject: CN=7bb2509cd0fc12768db00f43923374e5c9ebdca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:25:af:60:85:78:76:3e:9e:fc:db:93:d4:
b0:3e:ec:bd:87:74:eb:ba:be:6b:c2:ad:ee:f8:36:
bb:ca:37:53:84:2a:ed:07:86:42:23:d3:94:3a:44:
22:9a:65:59:d3:d7:2d:24:c2:97:11:73:aa:be:7e:
53:15:5a:32:10:7b:be:47:ce:77:84:5a:e7:cf:e3:
80:71:b3:81:20:0f:0b:6f:79:4f:c7:6d:61:eb:70:
df:ce:5f:e8:3b:5f:ad:f4:c7:52:a2:77:d4:b7:a4:
1c:25:28:a6:0d:c7:9f:fe:bf:99:71:1a:33:da:14:
9e:47:7f:d0:5d:1f:80:2b:1f:e8:0e:1f:30:4e:f5:
2e:d9:89:58:41:49:49:fc:6f:ee:9f:a2:07:49:8c:
66:83:fd:57:51:c1:8c:15:75:e4:c9:53:99:8f:7d:
dd:63:a9:07:00:f0:ac:cb:f8:d4:9a:c6:f7:84:4a:
aa:eb:f1:19:31:d2:c9:77:b7:5f:1b:92:d6:a7:9a:
41:83:3f:7a:07:9d:a9:b5:d2:87:b6:ec:5e:6b:8a:
b4:68:f4:0d:a7:0d:16:a0:20:60:8e:0e:45:85:15:
98:6c:e4:28:b4:11:5d:a6:42:14:42:34:08:f1:d0:
26:59:97:75:96:a8:e5:2c:13:18:69:1b:83:aa:27:
fa:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B2:50:9C:D0:FC:12:76:8D:B0:0F:43:92:33:74:E5:C9:EB:DC:A8
X509v3 Authority Key Identifier:
keyid:23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:3f:91:14:c1:4b:10:d3:94:63:5a:6d:d9:9a:42:ac:70:5b:
47:9b:42:4f:ea:db:79:ce:72:24:eb:b3:1a:58:60:6d:b7:fa:
f6:d0:8c:c1:05:40:e6:19:ff:cc:c3:e8:18:28:75:01:cc:0d:
69:83:12:8f:80:c9:f4:e2:3e:99:48:96:92:f6:25:b1:77:0b:
a4:5a:61:44:93:85:8c:a1:12:01:76:bd:19:6d:61:c1:07:85:
e2:49:90:f5:e8:fe:2a:ec:42:ed:97:40:98:0c:c0:06:c1:85:
f0:b8:0d:9d:5f:27:3d:2d:1f:03:6c:13:ef:19:48:30:da:29:
eb:29:db:42:7d:e2:8e:17:cb:29:85:48:61:67:75:68:3d:80:
ef:8d:20:7d:ea:f9:a5:be:ef:bb:f2:cc:e7:07:8e:1c:8e:12:
3c:5d:10:ec:9d:a9:ae:6f:63:9c:d5:e5:7f:ea:78:5c:a9:a1:
ef:87:7b:d6:62:f6:6c:84:12:69:2b:3c:20:fb:ca:25:7c:00:
e1:6c:27:f1:53:26:9d:e9:5b:da:f8:ba:52:0c:9c:22:78:7b:
df:b0:17:49:44:cb:2c:f9:60:70:1e:c4:41:f6:b6:ba:d8:f1:
fe:66:58:97:52:91:61:46:74:1c:e0:88:14:56:7a:4c:a8:c3:
75:b8:a6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:49 2025 by rpki-client