Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
File: ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft (raw, json)
Hash identifier: Xy5Er2ohwUEK1OsLPLX0No0cd+ILKCirZRAynGMZRcw=
Subject key identifier: A2:DB:C0:47:37:93:BB:2C:C7:64:86:FE:31:13:40:5C:05:85:5D:EB
Authority key identifier: 8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
Certificate issuer: /CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
Certificate serial: 019A4DE1BAB131C856EE81F5B0A2E8859A7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 08:00:30 +0000
Manifest this update: Tue 04 Nov 2025 08:00:30 +0000
Manifest next update: Wed 05 Nov 2025 08:00:30 +0000
Files and hashes: 1: SZpd9qPeF2_UcZ0BFTiD1uQx6CE.roa (hash: 4d7c/yFsOUlnwxOih4L4b458874C6mb5/7y63/As6E0=)
2: e6NTQMQbAc2rRpYIgSE0b5QlitQ.roa (hash: AW2JD/AMZP/3NkMYPVumCDsjg07AD98EjBhRoynRE5I=)
3: ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl (hash: vWYlPbO7/xl5kNOeSGgiWySxcHZfzt/NV/iIrEiAdoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:ba:b1:31:c8:56:ee:81:f5:b0:a2:e8:85:9a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
Validity
Not Before: Nov 4 08:00:30 2025 GMT
Not After : Nov 5 08:00:30 2025 GMT
Subject: CN=a2dbc0473793bb2cc76486fe3113405c05855deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:88:be:dd:7d:24:60:24:4e:5a:73:15:68:f1:
70:64:16:6d:fa:2d:e8:1d:c0:88:e2:a9:e5:64:96:
06:09:82:8a:62:32:71:4f:54:1b:9d:2b:61:c7:16:
30:95:eb:83:64:18:52:4f:55:66:79:86:51:e8:36:
24:62:0f:bd:d5:4b:2a:96:4a:70:16:c9:e3:7b:df:
bb:ec:e4:45:72:41:18:73:ef:12:b2:6a:4f:04:56:
29:6e:1f:8f:a5:f7:19:9b:c0:64:df:97:11:3e:8d:
0e:66:a6:50:42:95:14:0a:fc:d9:14:39:12:f4:42:
27:0f:5a:31:31:e2:4f:58:a6:6f:c7:c3:4b:77:81:
a8:be:8c:59:df:2a:95:10:e9:a7:50:df:0a:4a:90:
ac:5f:d4:6a:bd:33:8f:50:90:cc:56:53:b6:ea:f5:
c4:b3:92:37:b5:70:1b:a9:a7:25:cd:46:dc:a4:91:
39:59:34:f7:c0:43:77:76:19:c9:1d:56:93:05:e7:
12:d7:b0:67:9e:f4:a1:02:d6:51:4b:24:94:c2:91:
e9:5f:23:3d:0e:0c:d2:76:85:11:27:51:16:89:b9:
0d:6f:bd:fd:45:ed:a2:ef:8b:96:9e:e0:f7:54:8e:
04:bb:14:52:34:1b:34:4f:c3:05:c2:a7:18:6e:8b:
b2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DB:C0:47:37:93:BB:2C:C7:64:86:FE:31:13:40:5C:05:85:5D:EB
X509v3 Authority Key Identifier:
keyid:8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:4c:73:b4:09:4a:01:94:46:ea:e2:b6:5d:e7:2f:52:a8:1c:
27:00:09:e4:8f:22:7e:dd:b2:e7:d1:99:04:33:28:6f:10:c7:
55:fa:ab:50:45:27:0e:55:7f:99:f0:7f:e9:e2:df:d0:89:c3:
30:fe:64:18:df:35:5f:43:f6:bc:fc:ab:44:75:76:08:25:50:
61:c2:28:2e:a1:97:cc:ae:cf:eb:97:df:4e:82:26:4c:13:ab:
f2:08:cf:93:c1:38:3a:cd:43:42:a3:cc:2b:8b:ac:ba:42:2f:
29:82:d9:7b:cf:58:23:53:fc:9c:43:bf:db:26:58:62:90:2e:
77:d1:fa:28:48:5b:ed:fe:a0:27:d8:58:74:6b:db:83:e8:26:
08:c3:89:3a:18:89:1c:68:30:cb:7f:48:f6:ed:a1:94:21:13:
2e:69:53:9f:ef:3a:de:e9:ec:ef:69:cf:c6:3a:44:f9:af:04:
0b:b3:15:f3:b1:9c:23:fc:38:56:6f:62:09:90:c4:fa:66:eb:
98:af:c8:5a:27:b6:21:c8:ff:63:57:8d:06:05:fa:e4:d4:ee:
48:8c:b9:9d:35:30:ad:7b:f4:f9:7c:1a:a9:e4:a2:76:7f:6a:
ca:02:71:33:e0:ad:ae:f3:bc:e7:8c:69:30:5e:50:4d:23:bd:
25:4a:f6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:03 2025 by rpki-client