Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
File: i2E3lJJwULIlJatwCRg1QI7uTHk.mft (raw, json)
Hash identifier: xsdTYEJt6vzWw1cr1GnhAn9Mw2iZvL7eqC5tYXofoOE=
Subject key identifier: BB:06:67:6B:DC:22:32:E6:03:BF:53:CE:3B:1A:43:6E:3B:B3:59:39
Authority key identifier: 8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
Certificate issuer: /CN=8b613794927050b22525ab70091835408eee4c79
Certificate serial: 019A4E4F37700D5FDAACA1639202254870C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 10:00:05 +0000
Manifest this update: Tue 04 Nov 2025 10:00:05 +0000
Manifest next update: Wed 05 Nov 2025 10:00:05 +0000
Files and hashes: 1: 8d7VpoBO27aN3dak4lAaxGgmHlY.roa (hash: nh1zP1FVrxhSUv/TNCc0ZubqPf+syGRj5kTxf6jPWNk=)
2: i2E3lJJwULIlJatwCRg1QI7uTHk.crl (hash: uWECODTkG62n4a9UH3oAQ++ekX19J1DHtK7hVt64Wt4=)
3: jr93hN4EhKSWYqIbECyoZXKfIBk.roa (hash: 73KNAqHLsWX0NkD2n0f2jQTbbkk8jmsVt6nVH9n8jm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:37:70:0d:5f:da:ac:a1:63:92:02:25:48:70:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b613794927050b22525ab70091835408eee4c79
Validity
Not Before: Nov 4 10:00:05 2025 GMT
Not After : Nov 5 10:00:05 2025 GMT
Subject: CN=bb06676bdc2232e603bf53ce3b1a436e3bb35939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:6c:c7:2f:cb:75:ef:e3:3f:d1:6c:3d:94:
44:e6:c0:ce:24:8a:04:7a:37:b0:8f:bc:36:a2:98:
c2:da:ca:94:6f:38:03:84:b6:a4:1b:3c:f3:5f:e8:
19:a9:49:43:10:72:ce:69:da:51:0f:13:b8:ae:06:
07:c8:63:90:b8:d0:0f:5c:65:56:60:45:80:db:70:
3e:44:8d:be:ee:b0:c1:4f:ae:8c:88:77:fd:06:2c:
cb:80:09:14:17:53:50:91:53:1c:20:03:bb:45:6a:
e7:b5:0d:35:72:e6:0b:c3:88:95:79:2e:39:85:f2:
6d:0a:97:48:90:e4:ab:d4:d2:94:ef:d7:05:be:b6:
0c:0b:60:fd:6b:e4:f0:1c:6c:d7:62:ef:e5:2a:a8:
4c:76:b7:08:95:a4:67:bc:92:95:04:11:b1:d5:4c:
ac:2b:2f:fd:de:60:19:f8:39:a8:97:20:dc:22:bf:
91:62:d7:d6:df:a6:07:c7:c9:33:d9:d8:3a:8f:21:
25:25:9d:7c:7a:33:1c:ca:a9:dc:1b:8f:15:22:18:
72:cb:98:9b:e9:6b:21:4a:c7:52:b7:b4:c0:3c:91:
c5:ea:79:a8:29:63:98:91:53:fc:90:cc:2b:5a:60:
9d:2d:48:ee:88:63:3a:2a:e5:9d:e0:98:22:a5:64:
7a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:06:67:6B:DC:22:32:E6:03:BF:53:CE:3B:1A:43:6E:3B:B3:59:39
X509v3 Authority Key Identifier:
keyid:8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ee:27:34:6d:f5:43:b2:0a:21:2f:95:45:e4:77:0d:d8:ff:94:
7f:72:a2:f0:d8:b4:66:fa:66:c0:5c:50:d6:5f:f2:f3:32:08:
f7:44:5c:67:f4:c8:35:76:5e:91:6e:02:ff:f1:60:40:f9:ee:
4e:c2:90:58:6f:d9:5c:d2:ac:57:82:f5:3a:68:03:47:02:40:
04:38:21:8c:e3:78:c1:d4:66:f1:d5:43:ab:0b:28:09:df:72:
45:5f:70:b1:97:1c:f3:95:d1:04:83:0f:30:2a:c6:26:e3:68:
82:3f:fb:41:60:30:b7:51:41:d8:b7:83:41:6c:1a:3f:16:07:
43:12:65:1b:1d:9c:7c:6a:82:5d:e6:0e:c1:e1:09:75:06:58:
aa:17:4e:60:26:e7:07:a8:6e:b2:da:40:72:7c:94:f2:35:ee:
c1:12:e8:87:df:e0:fc:2e:15:02:0d:01:7b:6d:fd:e1:1d:4e:
8f:d2:f7:9c:c4:09:67:01:7d:5c:90:47:05:cd:9d:20:02:54:
df:f0:9f:7a:26:fa:91:1e:10:26:f9:ed:04:f5:32:88:c1:1b:
70:7f:86:1f:4d:9b:d4:07:79:8c:95:5d:ff:11:a2:c3:bd:68:
8f:2e:c9:4a:60:c8:02:98:94:45:32:77:10:06:26:df:3f:ec:
30:cb:fc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:22:25 2025 by rpki-client