Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
File: i1FfuzGzDKItL5R8UZrEcfArtgU.mft (raw, json)
Hash identifier: Pi+P3fvpAoeKTsXjcNU8fYhAkMw24S/OQfKUI1FFa9o=
Subject key identifier: 2B:B3:33:C5:B0:12:95:54:C8:AD:CB:84:2E:33:C9:35:D8:60:48:16
Authority key identifier: 8B:51:5F:BB:31:B3:0C:A2:2D:2F:94:7C:51:9A:C4:71:F0:2B:B6:05
Certificate issuer: /CN=8b515fbb31b30ca22d2f947c519ac471f02bb605
Certificate serial: 019A4FD092AEDCC97909736023399E155C41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
Manifest number: 0A40
Signing time: Tue 04 Nov 2025 17:01:00 +0000
Manifest this update: Tue 04 Nov 2025 17:01:00 +0000
Manifest next update: Wed 05 Nov 2025 17:01:00 +0000
Files and hashes: 1: LeW5uHFX08XYp2mSoayTb96W_kw.roa (hash: 5xyylml8MKoU2vq0LLHOuDrXUYO5MXsP8k0pX9CFEqk=)
2: i1FfuzGzDKItL5R8UZrEcfArtgU.crl (hash: e3+qP9O63Phh69gzr+96fAhz5CWbciLOXAesIkOBPt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:92:ae:dc:c9:79:09:73:60:23:39:9e:15:5c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b515fbb31b30ca22d2f947c519ac471f02bb605
Validity
Not Before: Nov 4 17:01:00 2025 GMT
Not After : Nov 5 17:01:00 2025 GMT
Subject: CN=2bb333c5b0129554c8adcb842e33c935d8604816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fe:5c:d2:a7:cf:10:9c:ec:01:e3:af:e6:17:
16:a0:f5:2d:fe:a2:6b:6d:33:49:ad:2d:11:1b:7e:
0f:21:be:1e:f3:04:89:88:2f:7d:f1:33:43:4e:71:
fe:de:d3:4d:c9:0a:3d:a5:0d:b1:ae:18:68:b3:2a:
92:17:ce:94:01:96:df:56:90:52:b6:d3:73:d4:74:
83:f6:54:4a:f3:dc:c8:ca:4f:a0:0a:45:8c:33:5f:
14:9b:c7:ae:98:b7:48:ed:85:ea:78:23:71:e6:30:
c8:ce:80:0c:a2:68:08:a8:b9:f7:57:47:4e:d7:1a:
6e:86:8e:e4:eb:b9:fc:1c:e7:f3:63:fc:b8:29:1f:
df:eb:a7:ac:42:ab:9d:15:c5:2e:2f:3a:c0:2f:f1:
f7:b5:f2:11:ff:a0:14:da:9f:e6:c2:3e:ac:d6:dd:
bb:de:ad:d0:28:b2:71:35:36:30:f7:31:a2:03:88:
ec:0d:53:c8:dd:5d:75:07:b4:5b:85:42:db:5e:ec:
b6:34:51:38:5c:07:42:dc:11:d9:31:38:c7:2a:24:
11:02:81:dd:97:19:91:59:e4:19:b8:da:6a:5f:06:
06:c3:8e:fe:ad:20:de:f9:23:12:fa:ac:63:37:c1:
86:4c:c5:65:08:b8:30:ab:ff:95:a5:50:db:af:cd:
f6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B3:33:C5:B0:12:95:54:C8:AD:CB:84:2E:33:C9:35:D8:60:48:16
X509v3 Authority Key Identifier:
keyid:8B:51:5F:BB:31:B3:0C:A2:2D:2F:94:7C:51:9A:C4:71:F0:2B:B6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0a:44:0e:16:a6:d4:68:8f:00:53:f2:03:d6:0b:e8:ae:a0:
3b:ad:8e:d8:1f:1a:6a:7a:6f:c2:55:e2:5b:b6:3c:7b:4e:e3:
12:97:93:21:fb:d9:b0:30:2f:af:78:80:07:de:b0:26:10:d5:
85:c6:41:e0:f5:45:98:67:fd:10:43:26:83:2a:52:91:f9:cc:
3b:3f:4d:e0:fc:64:00:af:5f:e4:4b:16:50:e5:17:93:06:0e:
44:38:48:04:6f:e6:56:0c:40:ca:89:b2:1d:eb:0d:ef:39:64:
8e:5a:a0:d0:c2:80:c2:a2:b8:3e:d1:12:57:d0:2c:43:5c:b9:
fb:d7:89:fc:20:a8:9b:9a:7a:64:72:f6:0d:9f:75:94:57:6c:
c5:24:78:76:dd:63:8b:70:92:71:ca:61:ba:16:94:11:8b:38:
71:48:2c:b1:62:5b:aa:23:81:a9:f2:8c:1b:f3:13:7f:59:e3:
a3:8f:b3:6e:2f:7b:36:11:a7:cc:d9:44:54:c3:45:a0:6a:fc:
f3:a5:89:70:16:b4:af:85:db:08:6a:86:a2:b2:39:2b:99:3b:
2c:3c:38:b6:72:c6:6e:af:cd:52:f2:02:65:e3:ac:82:d9:e2:
c9:b5:88:2e:f1:1e:16:cc:38:40:3c:4e:5c:74:9b:55:87:f1:
9d:51:e7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:52:33 2025 by rpki-client