Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
File: 1IVR4mFps7PhJPaWTicC6VdoJT4.mft (raw, json)
Hash identifier: HkDTjD8jXIzNZX9Zh6idb34tgsYZwlhumkHox9/DhdU=
Subject key identifier: EB:20:7F:DB:2D:E4:2B:A2:89:F3:B0:23:0F:0B:8E:80:54:01:21:EC
Authority key identifier: D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
Certificate issuer: /CN=d48551e26169b3b3e124f6964e2702e95768253e
Certificate serial: 019A4EF5F04660F167BA61BFA6CE7BEF8BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
Manifest number: 0728
Signing time: Tue 04 Nov 2025 13:02:11 +0000
Manifest this update: Tue 04 Nov 2025 13:02:11 +0000
Manifest next update: Wed 05 Nov 2025 13:02:11 +0000
Files and hashes: 1: 1IVR4mFps7PhJPaWTicC6VdoJT4.crl (hash: mV+Nsxyrd9dv3u3uOn8jeUAKRQO3RBdH1LPzc0S2L0o=)
2: 1egEAWTQi1OcNU0W_rjr_CRLdbs.roa (hash: LHe616pBcv+bCNyg1cs6z4IxwstMXXlrnpuBdg2aZbs=)
3: 3ojh0vwmWGR8R130UvEk1Ukeno0.roa (hash: /WfyicFmwcjSGtw05lqyqsVoIK9F8QUQc2+NhhBmMwI=)
4: dwkbDumHfM-fJPhQnf3bRCy2PjY.roa (hash: aIk07HBkaBzs1F02NTAQLrtiIZZaDl8SPQXuogtqsw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:f0:46:60:f1:67:ba:61:bf:a6:ce:7b:ef:8b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48551e26169b3b3e124f6964e2702e95768253e
Validity
Not Before: Nov 4 13:02:11 2025 GMT
Not After : Nov 5 13:02:11 2025 GMT
Subject: CN=eb207fdb2de42ba289f3b0230f0b8e80540121ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:90:4a:02:be:4b:ab:55:9c:22:2f:12:3f:e3:
d1:4d:4c:e9:ec:6f:80:5f:c1:d2:c8:69:4c:3b:39:
71:0b:e9:9c:d6:59:2b:7d:69:82:18:6c:c1:90:5f:
b4:b0:0d:2b:de:c9:7c:af:5d:36:5c:0d:47:9c:15:
9a:a2:f2:68:09:af:d2:69:3b:4d:77:f0:a7:e0:b0:
28:bb:9f:d2:35:10:1b:01:f0:03:bd:20:ac:3d:cf:
81:eb:ba:f6:82:8c:0f:6e:f2:90:39:88:3c:7b:ba:
c6:1f:a0:34:37:c0:8a:f9:ad:b5:39:e6:52:d9:46:
b0:f3:78:a3:38:11:8a:3a:0f:e8:a3:4a:ce:f0:d4:
06:c5:07:62:df:39:a5:e1:3e:a6:86:ea:65:8e:c5:
42:33:8f:2e:48:04:c0:b9:9e:1d:86:e6:05:6c:fc:
da:8c:48:f1:5a:9a:3d:c6:7b:f7:2a:22:dc:71:d8:
ec:d0:28:f4:fd:5d:44:e8:ac:b6:dd:94:5e:cf:0f:
64:49:37:d6:77:c5:3e:63:c0:3a:f7:14:1c:61:9f:
ad:f1:6f:b6:c7:49:b8:e2:38:ac:a2:83:bc:28:d3:
c7:d9:9e:d0:8a:67:45:b8:52:81:0b:f7:61:d0:8b:
50:ee:e0:0e:fa:e5:cf:92:16:9a:da:a9:f6:97:96:
a4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:20:7F:DB:2D:E4:2B:A2:89:F3:B0:23:0F:0B:8E:80:54:01:21:EC
X509v3 Authority Key Identifier:
keyid:D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c3:86:a0:00:ce:dd:e0:e3:fb:47:e6:a3:f9:fc:0a:e5:12:
2b:e0:91:c8:5b:6b:69:81:22:cc:7f:ba:e3:c8:ad:47:82:98:
05:df:84:cc:10:f3:b8:4a:d7:ef:b2:fc:e7:cb:71:fa:e7:b7:
37:74:d8:61:59:dd:5e:e5:73:d7:ff:2c:92:01:fb:bc:b2:0e:
ba:56:02:21:5f:55:82:b7:5a:f3:d1:c6:1f:fc:8b:dd:c9:7a:
67:67:61:a4:43:cb:39:77:08:73:f9:00:17:1e:49:95:d0:c1:
b7:7c:d8:aa:12:b8:9f:0c:ad:5c:c8:c0:e1:b3:66:f8:fb:73:
f3:53:11:aa:69:82:f9:4b:1d:b3:54:b6:ff:e6:f2:95:eb:dc:
45:38:1f:d8:19:0e:76:c0:e4:f0:88:89:64:28:fd:31:ef:78:
87:1a:cd:26:0a:4a:09:ce:92:ee:58:5c:5a:d2:bd:ae:30:07:
0f:e7:6d:51:49:f9:11:2d:23:57:21:d0:44:53:0a:1a:b0:34:
47:83:c2:04:19:67:82:b6:6d:5f:fd:ae:a9:04:f6:fd:5e:2e:
3c:9e:ab:46:44:90:80:5f:73:9d:c4:27:2a:9f:41:41:99:27:
c9:1f:19:34:77:fe:12:da:b6:95:06:c2:7e:3b:a5:f9:eb:d7:
e0:d9:de:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:36 2025 by rpki-client