Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
File: I06fdccyb3ZciWbC7cAKmCpep_A.mft (raw, json)
Hash identifier: 1Eqi81GujCGLqAMVq1kar5YWKHyFpPC7ClpwWs0lyhA=
Subject key identifier: 74:36:39:E2:7A:06:C7:AC:14:54:F8:39:0D:5D:82:5C:9A:11:4C:0C
Authority key identifier: 23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
Certificate issuer: /CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Certificate serial: 019A4EF4110717EEB4FB7A2CEBFBF6FB95D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
Manifest number: 147B
Signing time: Tue 04 Nov 2025 13:00:09 +0000
Manifest this update: Tue 04 Nov 2025 13:00:09 +0000
Manifest next update: Wed 05 Nov 2025 13:00:09 +0000
Files and hashes: 1: I06fdccyb3ZciWbC7cAKmCpep_A.crl (hash: cpCJ9xTroX54IhtNLRaXzne3EsaHOhZsEsu8DKM0jgs=)
2: _abtUqDmMxDQ2RmQqkGL8N8DjTE.roa (hash: CRHU3YWrzulAziPCk+beyoXQoDHAl8oOT3cyglDGbAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:11:07:17:ee:b4:fb:7a:2c:eb:fb:f6:fb:95:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Validity
Not Before: Nov 4 13:00:09 2025 GMT
Not After : Nov 5 13:00:09 2025 GMT
Subject: CN=743639e27a06c7ac1454f8390d5d825c9a114c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:16:0b:aa:ce:0d:a8:a8:ef:48:e3:f7:13:08:
c7:00:59:08:ee:6a:6c:6b:15:ab:36:fd:5e:09:cd:
89:a9:4e:33:94:55:d0:66:a5:97:30:a7:30:73:f0:
d8:3c:ad:10:8a:07:1d:a1:a2:5f:75:cc:cd:30:c0:
ba:87:f8:cb:e9:01:c4:ca:07:b5:3e:a8:f8:ab:26:
e6:ce:3b:b1:78:70:dc:e4:6a:57:0f:4c:10:42:85:
30:be:e7:64:34:21:31:b1:c8:a4:c6:50:4a:b5:51:
29:ed:c6:4b:17:c8:42:47:de:e6:96:e9:33:3b:69:
98:bf:f7:bf:b8:27:73:de:a1:75:ad:b2:a7:c5:f2:
d2:da:0b:d4:19:43:f6:22:a1:4a:84:d8:67:19:32:
47:f7:d1:39:c5:1f:54:59:ea:45:36:7b:15:97:e2:
ae:4a:57:a0:57:d3:5d:62:17:ae:a6:59:2a:3a:7e:
07:73:2a:fb:bf:f5:43:f9:fb:cb:e0:b0:6a:d0:9b:
23:37:06:98:43:95:72:0d:b5:58:52:19:10:6c:e3:
e9:d1:38:7e:e1:69:9b:b3:30:c5:a1:12:13:08:f0:
cc:2e:4d:08:cc:e1:36:57:1f:6f:ab:fc:7a:39:aa:
69:02:0f:50:25:25:e9:ec:d1:b8:b3:e6:2b:90:17:
74:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:36:39:E2:7A:06:C7:AC:14:54:F8:39:0D:5D:82:5C:9A:11:4C:0C
X509v3 Authority Key Identifier:
keyid:23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:0a:33:f1:32:31:67:9a:98:1b:38:6f:e5:0a:5c:19:0f:29:
27:5a:fb:76:64:90:da:c7:2a:ae:30:8d:01:a4:c4:79:61:e4:
21:fb:66:ab:0e:31:aa:3d:df:06:e0:13:c2:6b:dd:b9:54:67:
16:76:d1:e0:7d:d2:1e:f3:52:b4:04:7e:88:14:ec:ed:c1:1f:
43:77:b1:0f:27:f2:a4:14:f5:7b:e6:72:4f:9f:ed:79:c9:46:
58:5c:2e:ad:0d:9a:1e:9d:f8:8e:1b:6c:99:e0:10:3b:fb:3e:
e3:3e:c9:b7:53:8e:4e:db:99:96:27:ed:ad:96:c2:f3:af:6a:
56:a7:9b:74:e9:16:b3:08:b3:64:d4:0a:24:e6:1b:4e:0e:9f:
82:9b:ca:5f:94:b8:ea:25:1f:8d:c9:d8:e6:ce:78:ba:15:0e:
3a:ec:92:1e:cb:f4:c8:6d:bc:d0:c8:d0:eb:7f:ba:1e:0f:66:
34:6e:79:e8:74:08:70:46:50:51:a3:78:53:b6:be:57:ec:e4:
58:10:c7:cf:0b:ad:46:be:1a:88:d3:7a:da:97:2c:9d:9e:a0:
26:4b:2a:31:65:ab:de:96:cf:26:11:c7:ae:e4:8f:43:d8:e0:
25:9d:40:79:fd:53:39:9b:9c:28:44:22:f4:15:8b:13:72:4c:
72:0b:88:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:44:51 2025 by rpki-client