Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
File: IacXNhMJ0pOTUcnYuiFz24MZqI8.mft (raw, json)
Hash identifier: SDCq1s2AEYnLXCPOztX0g84odHJCJJFlCDP3QyKsXAg=
Subject key identifier: 34:53:F7:BA:5D:BD:FC:7D:A9:7A:0C:6A:22:C1:49:3F:6F:0A:2B:BD
Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
Certificate issuer: /CN=21a717361309d2939351c9d8ba2173db8319a88f
Certificate serial: 019A4DAA63DDFA2169C55EE50E420BAE4301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
Manifest number: 0F29
Signing time: Tue 04 Nov 2025 07:00:03 +0000
Manifest this update: Tue 04 Nov 2025 07:00:03 +0000
Manifest next update: Wed 05 Nov 2025 07:00:03 +0000
Files and hashes: 1: IacXNhMJ0pOTUcnYuiFz24MZqI8.crl (hash: 3l4PiBNHiSQJ/exHvn/tjjRX0XbTuHkdnxT2zIPq1vk=)
2: PeD0qOPxUYxeVA81pP9--xNVIzU.roa (hash: fJvgODfg2m2y6FUhDf+GL6D88mfLwM4rg59sQSq2L84=)
3: qwmmpmJft8mwuiEXYTlzhJQuep0.roa (hash: Q0Z/E8v8Q7W2fm0rXhwdPc4pFVbeDlufQTIsqxx5ZeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:63:dd:fa:21:69:c5:5e:e5:0e:42:0b:ae:43:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f
Validity
Not Before: Nov 4 07:00:03 2025 GMT
Not After : Nov 5 07:00:03 2025 GMT
Subject: CN=3453f7ba5dbdfc7da97a0c6a22c1493f6f0a2bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:75:b0:6d:ce:b4:d6:3b:8c:db:84:21:61:52:
98:4c:e4:ca:45:72:3a:41:89:f1:31:e5:4d:f5:7f:
81:df:c0:f5:a1:54:57:56:16:59:42:5f:18:01:88:
3a:e4:20:41:1f:33:44:53:8f:37:8b:6d:72:20:eb:
b1:43:6b:11:7e:44:16:cb:db:e3:b4:7e:e8:e0:a7:
a9:a2:e8:3e:34:01:57:4b:94:8a:91:d1:99:59:23:
b6:84:c0:66:77:5a:b8:98:32:08:ff:71:70:0c:03:
c7:81:eb:30:46:c2:56:69:0d:d8:1e:af:a1:38:84:
90:9f:48:8c:11:02:88:03:17:02:28:fd:15:c0:d7:
2d:1e:b3:f3:57:64:f4:50:2e:97:78:ee:0a:d5:e7:
1f:db:dc:92:3d:bc:bd:d6:1f:6e:47:fb:ec:96:09:
3a:09:14:1c:1d:00:ad:26:98:99:09:0f:31:23:a1:
d8:27:86:11:c7:f2:4b:fe:97:ec:25:86:e0:66:df:
91:7d:42:77:1d:f0:c2:e2:2e:6f:1c:d2:c3:12:69:
05:61:1c:a8:a8:52:05:e6:a2:05:6d:23:71:4b:ef:
3d:9f:f0:f7:fc:e5:94:34:a2:ec:55:f9:1f:74:bc:
97:7a:b1:d0:88:9c:e5:eb:ac:09:5e:35:f3:64:e1:
92:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:53:F7:BA:5D:BD:FC:7D:A9:7A:0C:6A:22:C1:49:3F:6F:0A:2B:BD
X509v3 Authority Key Identifier:
keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:3c:82:f3:48:ab:61:44:e2:ab:a8:8c:3a:9d:16:5c:9f:0a:
4a:24:e9:11:84:f2:7b:e1:fd:60:bc:0c:2a:23:f2:0c:77:6b:
33:66:1d:65:3d:e4:dc:8c:27:37:64:98:c3:64:d1:f9:52:d3:
d9:a9:68:fc:1b:49:3d:60:8a:d5:75:91:ab:1b:12:34:8f:29:
97:d7:ce:70:ea:31:cb:6d:c2:c2:96:be:22:09:07:b5:4b:6f:
23:fb:aa:ec:b9:cf:2c:1d:0e:32:26:01:02:42:b5:b7:21:cd:
05:aa:51:85:4d:af:58:a2:dc:36:03:2d:e9:af:bd:b6:cb:13:
e8:92:d7:7e:e6:16:cf:c7:4d:09:26:6e:da:c3:db:5a:df:a8:
19:83:de:85:7e:2d:ae:07:29:3b:cc:5f:1d:70:0a:6b:b1:b0:
f4:1a:13:64:51:d9:50:1a:0b:a7:c9:49:30:2f:f3:08:98:f8:
b6:11:91:0f:fe:d0:29:ee:bf:7f:da:5d:67:ee:5a:2f:02:7b:
fb:e9:4c:ed:e2:96:0c:62:a2:6d:36:6e:df:c8:1f:f5:12:b7:
57:e8:62:5b:f7:e0:8f:82:e3:f2:00:40:6d:c5:75:ec:61:7e:
d6:95:29:12:e7:d8:81:a3:80:b7:2c:f6:62:fb:da:64:39:a6:
dd:10:4e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:50 2025 by rpki-client