Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
File: IwWuBiEvPC-PVzoLVJJEHljyHE4.mft (raw, json)
Hash identifier: 7wvVvRGGlPpGwuoL07nqtWFRSMNPFntBHld571BXHRs=
Subject key identifier: EA:9A:65:43:B0:1F:9D:B2:EF:FF:76:16:49:35:37:09:4C:A6:D4:99
Authority key identifier: 23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E
Certificate issuer: /CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e
Certificate serial: 019A4EF56B322AA6399A6A6CB3EFB5E36F22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:01:37 +0000
Manifest this update: Tue 04 Nov 2025 13:01:37 +0000
Manifest next update: Wed 05 Nov 2025 13:01:37 +0000
Files and hashes: 1: AYkoB-e1MzcctAIB25MUBAI3Gw8.roa (hash: RhXb3K21xkSfp4wHDHnklvRvJi1oEc1FzHYwM8s92WA=)
2: IwWuBiEvPC-PVzoLVJJEHljyHE4.crl (hash: n2DscgekyaTzFVKJTT58062B3FBSFfafsuSxNZ2WWr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:6b:32:2a:a6:39:9a:6a:6c:b3:ef:b5:e3:6f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e
Validity
Not Before: Nov 4 13:01:37 2025 GMT
Not After : Nov 5 13:01:37 2025 GMT
Subject: CN=ea9a6543b01f9db2efff7616493537094ca6d499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:63:8d:57:32:0c:20:f6:43:85:ae:ce:13:
83:76:ae:6a:83:a9:3b:93:94:08:01:dc:ac:4e:7b:
34:db:22:20:cd:99:a3:5f:57:12:b1:87:9b:3e:84:
41:d2:3d:c8:8e:59:55:61:fd:4b:f8:49:29:a7:ad:
de:62:73:79:25:c6:92:c9:c8:61:72:d9:fb:de:09:
68:1f:a9:66:bf:8b:93:0e:7e:2a:c9:b9:df:31:3f:
a2:50:3e:c5:fe:c2:29:cb:6b:df:23:90:a5:cd:5d:
9e:55:a1:e2:a2:74:21:a4:ea:3f:89:05:73:58:20:
a3:f1:46:da:41:38:c5:cd:91:a1:b2:d7:e2:2d:ff:
bb:6c:d7:3e:6f:ee:71:5b:1f:e3:f4:17:cc:de:d7:
c2:48:37:f4:f3:59:e3:55:76:7c:6b:06:1d:d0:46:
56:e0:62:50:7a:4d:0c:1d:c9:1d:dc:fe:07:98:dd:
81:25:d8:db:c2:e8:b9:a3:18:44:dc:7a:0b:10:aa:
99:4c:db:95:7e:0c:45:b8:1d:a7:2a:69:bc:fc:0c:
41:90:00:f8:80:78:50:ac:63:e2:87:cb:c1:f5:1a:
70:96:cc:32:79:78:78:94:58:5a:e4:db:17:80:0d:
2f:10:65:5d:20:f5:a4:f2:11:09:71:d8:de:23:9b:
37:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9A:65:43:B0:1F:9D:B2:EF:FF:76:16:49:35:37:09:4C:A6:D4:99
X509v3 Authority Key Identifier:
keyid:23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:61:c4:21:51:dc:15:24:74:7a:7d:27:29:eb:c3:2c:00:8d:
ea:46:c5:40:a4:09:92:ee:52:57:8c:21:90:ec:31:98:26:b3:
2b:1b:b1:8e:b0:8b:15:f1:55:f1:3e:59:40:1a:26:0a:e6:b4:
38:6d:ea:ef:fb:18:0e:3c:53:19:d1:3d:9e:07:03:11:19:7b:
4a:ac:ef:ad:b0:c4:9e:28:3e:67:15:37:2c:5b:c7:2d:a6:fb:
b6:6b:5f:e9:7e:b5:45:9d:21:c3:fd:d3:ef:42:6c:36:1f:d0:
ae:d5:0e:c0:f3:52:40:57:14:ee:ad:3d:ec:3c:42:c8:77:d1:
14:9d:0d:cb:e4:26:e9:d9:2b:3a:a4:1e:5c:32:98:f4:e4:84:
16:57:29:24:ad:f1:d9:32:7d:e4:7c:4e:03:f9:b8:1e:97:a6:
68:ab:bc:54:50:da:61:d4:c0:1e:89:6b:3e:de:e5:4c:c3:a4:
55:2c:89:fb:aa:41:f5:59:7b:9c:aa:10:60:2a:4c:66:f4:77:
d3:43:41:f2:f0:a6:f6:fb:33:67:49:a7:b9:7e:00:f3:69:b6:
88:03:92:67:09:2c:3c:3f:eb:e2:82:b1:8b:a6:4d:12:a7:ca:
b9:fe:f8:76:a7:fb:2d:db:0c:83:01:86:ee:3f:45:81:7f:c0:
50:e7:06:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:33 2025 by rpki-client