Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
File: I7GUMIfOaWI-drIUWzR5rCBLock.mft (raw, json)
Hash identifier: mkkPJc5TlpqZID3xFVtrlZLlJ/VUAuufa84V+nEfUpA=
Subject key identifier: 30:57:C4:89:2D:EF:2D:FC:DA:2C:A6:5E:DC:14:D0:9B:78:73:AB:E1
Authority key identifier: 23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
Certificate issuer: /CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Certificate serial: 019A4E4F99B3DB2A445A27D6C43DB4376AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
Manifest number: 164B
Signing time: Tue 04 Nov 2025 10:00:30 +0000
Manifest this update: Tue 04 Nov 2025 10:00:30 +0000
Manifest next update: Wed 05 Nov 2025 10:00:30 +0000
Files and hashes: 1: I7GUMIfOaWI-drIUWzR5rCBLock.crl (hash: QW3DAHj2+4Qwg/F7HHQyup2/QH0pINEgvK5PJnzgx1g=)
2: IGzDnKyfU3XrsCi1kVIq3v9WjnM.roa (hash: BCjdpahib4P29wEhEZ+5HfDxKnWj0l2OSsP7lZ3IOHg=)
3: fngY7vAjtnIa6khyzBr6ohfARXc.roa (hash: 8j7K0AdGmWd/+RMVsdDrX0khITQq1MTMhTuPXkbPnqc=)
4: xgdlAL2WKr_Js4V_ZLjPaz6bev8.roa (hash: CfOyHBtQR8zjYYv9qA3Dd8n5he3YeIT+MsIzoT30dKc=)
5: z5Ucz1kkGg56QZyAblN2WefSoGM.roa (hash: 5hK/qHn0csimMvRktmqCqsq2To8mi7zen0Vo1KFJGyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:99:b3:db:2a:44:5a:27:d6:c4:3d:b4:37:6a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Validity
Not Before: Nov 4 10:00:30 2025 GMT
Not After : Nov 5 10:00:30 2025 GMT
Subject: CN=3057c4892def2dfcda2ca65edc14d09b7873abe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1d:38:7d:46:52:68:f8:cb:3b:84:86:9f:28:
d2:a7:a2:ff:fb:05:db:d2:bc:2f:28:8c:40:fa:91:
e4:8a:88:44:0f:f1:2b:71:53:1a:23:95:ef:73:ac:
24:03:f9:c6:e6:0f:1d:7d:80:41:7a:2f:7e:f1:53:
0a:37:47:96:25:31:6a:b6:88:3d:6c:4e:a9:e9:aa:
30:99:bd:f9:8d:2f:cd:19:2b:19:91:28:9e:fa:4d:
38:5d:ed:13:33:4b:a1:8a:3d:cc:7a:e8:59:35:64:
ad:f4:38:ae:09:1b:7b:d1:c7:5d:da:cc:e6:04:32:
e5:a8:ba:98:b3:e4:31:b2:88:c4:89:40:b8:e6:ce:
2a:88:40:29:a2:4d:e6:6f:7d:a7:fc:ff:13:df:fa:
ca:69:3e:f1:32:be:9a:73:43:70:1e:b3:13:91:31:
3d:9a:29:e0:36:cc:1c:00:ff:2a:83:33:d2:ba:6f:
fc:35:40:32:6a:8f:9c:1b:8f:58:d1:81:91:18:09:
9a:06:89:5d:40:22:21:26:b5:bc:75:55:63:75:0b:
67:bb:2e:1f:7c:d1:0e:cd:29:12:d8:4d:3b:cd:ee:
74:90:cb:1e:d6:51:4e:1f:d9:88:3f:b6:1c:58:c9:
31:93:08:d5:b4:79:18:fc:5b:98:45:dc:90:d5:42:
e6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:57:C4:89:2D:EF:2D:FC:DA:2C:A6:5E:DC:14:D0:9B:78:73:AB:E1
X509v3 Authority Key Identifier:
keyid:23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:78:35:33:bd:a5:57:3d:af:b6:a3:b9:cc:f6:38:2e:04:59:
8f:01:bf:59:b3:00:8e:0c:f8:6a:b1:89:40:2d:fd:d3:e4:a4:
cc:69:1e:1a:e0:ad:69:b6:75:8d:b4:54:d1:b1:6a:9f:d8:c5:
83:2d:80:da:02:f0:f5:40:c3:28:26:6f:bc:ec:f3:4c:77:fe:
4d:a0:46:01:ea:c5:11:ff:e3:76:fe:31:29:47:b2:c9:c3:9d:
da:b8:25:06:1b:a9:ca:d2:de:4d:b6:48:67:b3:ce:5e:1b:f3:
c2:df:7a:e6:a2:fe:4e:ea:88:50:36:ad:9c:f1:99:a8:8d:ce:
c1:f4:dc:64:ee:ac:42:32:8c:a6:32:c8:7d:51:d0:4e:37:33:
64:98:f5:cb:5a:13:6e:e7:a3:c3:d2:7f:1b:2f:4b:e8:6d:91:
61:17:0f:43:3d:72:a6:cb:41:31:45:d1:1a:da:58:5a:28:21:
4c:9c:74:72:25:d9:43:62:d5:39:8f:1c:b9:08:29:9c:cf:86:
1c:17:67:3e:66:33:fb:23:d9:67:e9:6e:e4:cc:a9:0b:ce:0e:
b3:ec:3d:e2:1e:2c:98:8d:64:b3:5c:18:51:53:73:ec:d9:08:
2d:0b:a1:ac:a7:c1:68:19:d2:0c:84:7f:0c:dd:1b:0c:76:a7:
2c:11:d4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:43 2025 by rpki-client