Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
File: iH0wEZNRUA8lmlfi_2hQeX0bTho.mft (raw, json)
Hash identifier: Rl6XNDPHauqK52EFn+JH9GvVwcVJwkdl3wcuLA9MRws=
Subject key identifier: F4:3D:3D:10:FD:E4:B6:03:86:F6:3E:FA:8F:BF:F1:CF:85:15:F2:63
Authority key identifier: 88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
Certificate issuer: /CN=887d30119351500f259a57e2ff6850797d1b4e1a
Certificate serial: 019A4EF4FF62B77FDFE3680C000E0C5072B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 13:01:10 +0000
Manifest this update: Tue 04 Nov 2025 13:01:10 +0000
Manifest next update: Wed 05 Nov 2025 13:01:10 +0000
Files and hashes: 1: iH0wEZNRUA8lmlfi_2hQeX0bTho.crl (hash: U2l47AMpJYDZVA2kYqu+TGdQNeirts1Yq7tKNEhJbz8=)
2: qABhsOLWjcCV2-NCnGtwC8QlYyU.roa (hash: md9z/89P3sn3nXo5h/larqHDUL4eXCPfvLewxfl/iTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:ff:62:b7:7f:df:e3:68:0c:00:0e:0c:50:72:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887d30119351500f259a57e2ff6850797d1b4e1a
Validity
Not Before: Nov 4 13:01:10 2025 GMT
Not After : Nov 5 13:01:10 2025 GMT
Subject: CN=f43d3d10fde4b60386f63efa8fbff1cf8515f263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a2:0e:da:1f:67:4c:fe:a2:61:54:f4:89:e7:
73:41:3c:a6:31:75:07:63:80:aa:ca:0f:18:4f:48:
c4:a3:4e:7d:03:4f:91:05:46:a5:df:e6:75:44:6e:
84:1f:5e:49:10:2a:24:e2:cd:ac:1f:fc:8f:0e:ea:
d7:c9:e4:b4:34:a3:ca:f6:a0:2a:a8:6d:38:58:0c:
e2:ac:1a:f2:c3:8e:2c:db:10:18:83:a9:6b:42:53:
f8:59:1a:86:df:9d:3d:b8:30:3a:bc:8e:59:d0:23:
04:0f:ae:65:7f:64:45:e7:60:4c:56:6e:0e:77:61:
ec:9e:e9:5e:37:d1:5c:aa:ae:9c:ec:44:55:08:22:
5f:ee:0c:7b:1b:b7:a0:ce:71:af:87:21:a0:ce:99:
07:3e:e9:5f:37:13:43:3f:a5:20:80:9f:68:15:4d:
7f:03:86:bd:b6:d0:5f:24:50:f7:90:75:95:b3:26:
71:90:7b:d1:c1:0a:01:2d:12:ac:23:fa:b7:bc:c7:
c3:2f:e4:e5:9f:7d:86:68:2c:18:94:a2:a7:11:b5:
73:8b:cc:49:0d:94:d3:a4:bf:70:2d:22:35:dc:b9:
b8:00:41:7d:64:4b:ff:95:df:7d:6d:b6:d2:f1:96:
f6:06:03:41:6b:05:31:5c:f6:09:88:74:ca:1d:a0:
96:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3D:3D:10:FD:E4:B6:03:86:F6:3E:FA:8F:BF:F1:CF:85:15:F2:63
X509v3 Authority Key Identifier:
keyid:88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:72:e4:b9:13:c4:2e:a5:d0:5e:e0:e1:84:41:16:3e:fe:ec:
71:c9:61:9b:8c:76:83:8b:f7:d2:ea:0b:24:ab:52:22:07:d7:
4f:ad:00:b2:8b:dd:38:85:21:ad:cc:1b:18:1a:b0:16:5d:6b:
21:e0:bb:11:0a:55:2e:21:4e:33:46:ed:e7:13:3a:20:3c:18:
e2:4d:6c:1a:f0:b6:43:c8:0d:5a:51:04:03:40:49:df:d1:f9:
86:09:aa:e9:9c:4c:50:9c:05:c0:6b:cf:01:d6:45:cc:78:d2:
ba:6e:77:75:ba:3a:a2:07:ca:39:7e:5b:7f:a1:56:48:6c:f6:
45:bb:ac:92:72:cc:b3:00:49:05:5c:dc:8f:5f:8c:fd:a7:35:
51:67:5a:9c:cb:15:2d:7a:75:95:e1:a9:62:f9:f5:68:c7:2b:
41:52:cd:30:50:4f:19:50:7e:78:8c:7c:ec:42:b1:dd:ef:b3:
a2:5f:fb:ff:7d:6e:68:2a:7f:47:aa:8e:10:b9:89:2c:df:e4:
fb:67:d2:db:30:d5:bd:14:2a:d4:ba:f8:c6:1c:62:f7:0d:9e:
27:fd:f9:95:5d:fb:ac:d7:4c:7c:62:8c:97:38:3e:40:cf:0e:
2b:98:24:da:ed:5e:f6:2f:77:93:33:a4:0c:40:69:a8:5d:17:
67:f5:5f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:33:39 2025 by rpki-client