Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
File: i4GUQccJMDSp1GVqL202qyQDP-Q.mft (raw, json)
Hash identifier: HKcTdZ817AWjWJT1vcTbkAwt3DoHJTIk8LETwNxGqws=
Subject key identifier: 4C:DE:A7:43:04:BB:1F:18:57:77:75:1D:53:61:ED:85:6B:A2:26:51
Authority key identifier: 8B:81:94:41:C7:09:30:34:A9:D4:65:6A:2F:6D:36:AB:24:03:3F:E4
Certificate issuer: /CN=8b819441c7093034a9d4656a2f6d36ab24033fe4
Certificate serial: 019A578986801DA157C7C9F679BE20B6FA25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
Manifest number: 0187
Signing time: Thu 06 Nov 2025 05:00:21 +0000
Manifest this update: Thu 06 Nov 2025 05:00:21 +0000
Manifest next update: Fri 07 Nov 2025 05:00:21 +0000
Files and hashes: 1: Dm667XnaRqtK2i3UfsThVeXTWc4.roa (hash: 8yEFF1MNlsRKs74/fi+3dMb5d+dLJ3drU0IwlTP+fus=)
2: i4GUQccJMDSp1GVqL202qyQDP-Q.crl (hash: zIBesjoINA4hE7OSvriqw4/19rLlpZlQ8dtZgB/BgAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 03:53:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:89:86:80:1d:a1:57:c7:c9:f6:79:be:20:b6:fa:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b819441c7093034a9d4656a2f6d36ab24033fe4
Validity
Not Before: Nov 6 05:00:21 2025 GMT
Not After : Nov 7 05:00:21 2025 GMT
Subject: CN=4cdea74304bb1f185777751d5361ed856ba22651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6d:6a:26:c8:b7:dd:5c:3f:25:f5:81:ba:ec:
43:bd:b0:e6:3f:22:2f:2f:a0:2c:51:0f:f4:bf:ba:
68:eb:95:42:c3:b9:7d:0d:08:0b:8f:e2:3d:ee:be:
32:29:fc:71:c3:79:40:57:cf:50:00:e2:a2:13:9f:
25:a9:ed:8e:e8:55:dd:5f:f6:2c:6f:48:da:27:2e:
fa:9d:1a:e8:f9:69:69:8a:dc:d4:d7:40:9b:95:7d:
8c:74:4b:36:91:ed:4a:4c:f8:d0:f3:48:54:70:0c:
f7:0d:f9:69:3e:c4:04:93:f3:dd:d8:10:fc:ec:65:
16:59:11:b9:a6:5b:fb:9b:92:e3:1f:e1:bc:66:75:
b5:4d:75:10:a9:ef:5f:a9:10:35:b8:f4:b4:95:67:
07:20:fd:9a:3c:65:c0:03:4f:40:7a:b0:34:2e:2c:
9c:97:4f:84:26:73:92:ce:9e:12:15:b1:a9:59:c5:
a7:e4:a3:f5:c2:b6:65:ed:af:7d:e4:d8:43:11:c5:
02:e3:1c:d5:e7:05:4d:6f:4c:16:93:d4:02:1d:f9:
6d:5b:df:c5:6f:ad:b4:f2:9e:3a:be:bc:35:4f:d4:
20:65:25:9f:9e:f8:b9:cc:eb:6d:5b:0b:15:c3:32:
25:60:8d:d8:60:6e:c5:12:a8:2e:20:11:ff:ca:c0:
ad:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DE:A7:43:04:BB:1F:18:57:77:75:1D:53:61:ED:85:6B:A2:26:51
X509v3 Authority Key Identifier:
keyid:8B:81:94:41:C7:09:30:34:A9:D4:65:6A:2F:6D:36:AB:24:03:3F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c3:1d:36:38:d8:73:c4:04:45:98:f7:9c:d2:ab:dc:1b:f0:
6c:96:c9:9e:f2:70:99:3f:dc:06:dd:31:68:aa:ab:2a:76:6b:
bb:75:a4:ce:c2:4d:66:29:10:48:40:49:d5:16:30:6e:48:55:
bb:52:7a:64:c9:4b:47:7d:b1:e0:53:e2:ed:a8:c4:5e:dd:a3:
cd:4d:57:13:e6:75:81:26:87:82:f4:02:1b:45:2a:95:69:3d:
73:59:18:98:bb:7c:34:37:1e:fa:ee:05:50:7a:1a:2e:15:2a:
9d:50:9c:0e:6b:1f:60:ab:2a:2d:10:f1:a1:bd:ee:39:cd:22:
87:6a:e2:8e:8b:a8:21:6c:6d:cc:19:c3:cf:19:bd:fb:a6:94:
f3:16:68:a0:3a:ce:56:36:18:f1:b9:66:8a:ab:87:68:90:be:
20:c3:dc:26:b2:65:67:77:0b:1f:ae:45:98:cf:3f:61:2b:96:
fa:64:d2:e0:64:4c:cf:d9:9b:c5:ac:53:af:5d:93:ba:35:10:
15:59:3f:33:bb:4a:8c:6b:f8:11:a0:0d:f7:46:58:b3:c4:c7:
c7:bf:ac:19:68:7f:5e:3a:96:da:39:ac:96:c7:f5:93:d0:ba:
45:52:bd:5c:c7:56:30:cc:d6:9b:b6:65:cb:52:7e:7c:46:bf:
a7:6a:4e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 07:36:10 2025 by rpki-client