Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
File: RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft (raw, json)
Hash identifier: YOZAHIoAx0VeFPDsc+PSVUxKHhW8Ew13WY14IgxMgGQ=
Subject key identifier: F4:A1:B4:EC:53:9C:E5:97:6C:B6:5E:31:60:46:5D:CD:30:7F:08:E8
Authority key identifier: 46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90
Certificate issuer: /CN=462231e713f0f834bd09c3f76e12e250e773c290
Certificate serial: 019A533EEE111281E21D2405030D84B3991A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
Manifest number: 161F
Signing time: Wed 05 Nov 2025 09:00:24 +0000
Manifest this update: Wed 05 Nov 2025 09:00:24 +0000
Manifest next update: Thu 06 Nov 2025 09:00:24 +0000
Files and hashes: 1: RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl (hash: vlKZs183QGwlb1UqUbf75FljSJiC+YLupoEzTr34BUQ=)
2: xmUpqD4NUMAqisL66k_x6MTYnaQ.roa (hash: dGRcbHkgyhvucFtnmzWvrILS2aHk2c8SQDJ6rOX+JL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:ee:11:12:81:e2:1d:24:05:03:0d:84:b3:99:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=462231e713f0f834bd09c3f76e12e250e773c290
Validity
Not Before: Nov 5 09:00:24 2025 GMT
Not After : Nov 6 09:00:24 2025 GMT
Subject: CN=f4a1b4ec539ce5976cb65e3160465dcd307f08e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4b:08:cd:96:3e:a9:2c:8f:78:e3:c0:34:7b:
5b:ce:be:06:bd:6d:ba:e7:c6:9f:2f:03:fd:d5:05:
03:2a:2a:b4:91:94:60:b2:76:b8:3b:5e:ce:e9:e3:
7e:b9:de:f3:c6:eb:f3:58:44:20:38:6e:a8:23:19:
ef:02:a3:b4:87:4f:ce:79:4b:1e:53:80:62:22:29:
ab:8b:b6:14:94:30:9c:6c:ba:90:6e:cd:61:ce:f0:
99:a0:bd:51:88:8c:a2:c6:a7:3f:93:2d:21:b4:15:
8c:e2:b2:e4:2f:8d:95:83:fb:83:20:e1:8e:38:40:
b7:07:5a:23:3f:bd:96:45:9e:2c:86:31:8b:d9:56:
fa:77:af:90:02:68:b0:c1:a6:ed:e8:e8:47:41:f7:
88:14:01:44:61:ab:a8:fb:46:d5:6f:57:94:d5:24:
7b:c7:86:ed:ce:ed:1f:a5:e0:3c:ad:4f:0f:f3:f8:
d2:0c:e4:22:2d:93:b8:e0:f0:0e:33:82:26:01:a0:
b5:73:e8:8a:81:bb:11:ab:71:48:c8:bb:4c:23:65:
ed:18:78:c4:d3:94:25:b3:1a:7a:a6:ee:f1:13:62:
73:61:68:71:a4:8e:49:76:98:2e:1f:0b:17:c3:52:
f6:0f:a2:df:7d:d8:f7:6e:a0:ff:f2:a4:6b:83:e7:
6f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A1:B4:EC:53:9C:E5:97:6C:B6:5E:31:60:46:5D:CD:30:7F:08:E8
X509v3 Authority Key Identifier:
keyid:46:22:31:E7:13:F0:F8:34:BD:09:C3:F7:6E:12:E2:50:E7:73:C2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RiIx5xPw-DS9CcP3bhLiUOdzwpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9ab3a5-1c46-4be0-8937-ad4bd7f23ce4/1/RiIx5xPw-DS9CcP3bhLiUOdzwpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:79:d5:5e:9a:e5:aa:42:dd:6c:0c:2a:83:0b:15:8a:1d:77:
ba:10:6b:67:59:73:e7:6e:65:04:9d:f8:80:73:ca:15:2f:fd:
2b:ad:dd:c0:9c:59:b2:ad:e7:13:5b:ed:be:14:0e:39:e9:7e:
14:bb:ce:ed:15:8e:39:5c:f4:cc:09:20:22:a5:d1:69:3a:d9:
ac:b4:0b:f9:46:66:d9:25:86:e7:85:de:93:fd:fc:00:7f:b2:
b8:ad:14:d3:76:eb:59:7b:69:db:d2:ed:6e:41:fd:ef:d3:a7:
a8:4f:92:08:c2:45:89:f1:a1:6e:f3:49:c0:73:d2:bf:3c:aa:
d4:11:cf:4f:b0:de:54:e3:5d:45:d5:ae:e1:e9:12:13:49:9f:
94:eb:e9:97:85:1a:8b:e2:fd:93:c0:fa:59:e7:6d:6a:7c:cd:
e8:ff:0e:5f:a7:a8:c8:03:8c:8d:49:f6:ac:3f:ee:07:0c:84:
7b:96:2f:a8:1a:6a:39:8b:f5:84:3c:57:8c:d5:11:d6:75:91:
cc:88:5b:98:55:ba:66:d8:4b:46:72:c3:bb:85:ad:6e:7c:1a:
c5:de:4f:6e:83:aa:87:0f:bd:d8:47:82:63:ad:9a:4a:cf:1a:
ba:a7:f0:ff:dd:45:ff:a6:31:5c:61:e5:30:98:85:3f:1f:88:
7f:94:cc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:21:58 2025 by rpki-client