Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
File: _IJp9C5GRBqx7ZlMifdHuqVU4yA.mft (raw, json)
Hash identifier: tnKusZCk/9IKygTJnoN87LfBrIW1ig2y7EzwUMEWwuU=
Subject key identifier: 8D:24:BD:01:43:78:10:9A:37:E2:A4:B7:15:C5:00:BC:9A:34:28:DD
Authority key identifier: FC:82:69:F4:2E:46:44:1A:B1:ED:99:4C:89:F7:47:BA:A5:54:E3:20
Certificate issuer: /CN=fc8269f42e46441ab1ed994c89f747baa554e320
Certificate serial: 019A4EF442CE5F95438A586C28E9CCBE2C19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:00:21 +0000
Manifest this update: Tue 04 Nov 2025 13:00:21 +0000
Manifest next update: Wed 05 Nov 2025 13:00:21 +0000
Files and hashes: 1: _IJp9C5GRBqx7ZlMifdHuqVU4yA.crl (hash: 3h9S45RNba2dGI9RYXtGmlbz1XzQwrCUO3YQplXBQoQ=)
2: eJpm7vOqN0K6_-N5ZvgNj0bJa14.roa (hash: ZjNNKQofgKq/YUnavRCCV2cjVOzm2yU0UKdAMKHM4p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:42:ce:5f:95:43:8a:58:6c:28:e9:cc:be:2c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc8269f42e46441ab1ed994c89f747baa554e320
Validity
Not Before: Nov 4 13:00:21 2025 GMT
Not After : Nov 5 13:00:21 2025 GMT
Subject: CN=8d24bd014378109a37e2a4b715c500bc9a3428dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:36:3f:89:8b:ef:10:30:ab:0f:40:14:f6:3a:
b4:04:28:cf:10:8b:33:f1:5c:7b:1e:e5:8f:aa:33:
1b:e4:0e:21:48:4a:95:54:c9:65:1c:3d:39:2b:4c:
e3:21:b5:23:3d:e5:97:5a:9a:b2:dc:2a:01:cf:be:
f6:85:07:b5:7d:02:63:ae:c5:42:8f:90:87:f2:c0:
d1:f9:c4:35:cf:74:9d:15:2a:af:02:96:1f:f9:0a:
3c:70:4b:1d:0e:e4:f2:91:f2:a9:78:ce:64:f0:92:
5f:59:31:4b:73:58:90:39:84:25:a8:86:1f:a4:41:
50:10:d2:12:e3:53:95:0d:92:f3:82:e1:e4:8d:c0:
0e:41:da:03:1c:cc:76:4e:28:f8:a3:03:55:09:de:
8a:13:77:d1:e6:73:87:ef:4a:41:f9:0e:34:9e:be:
66:59:1a:61:05:62:0a:e3:f0:4e:ad:3a:c2:13:05:
77:1e:20:0d:30:f6:5c:30:65:c0:93:b1:af:0d:82:
f9:a2:77:1b:07:e7:b6:72:b6:05:42:04:c4:aa:9d:
f3:66:e6:79:12:74:ae:48:3b:59:d3:ec:a4:81:59:
4f:ff:6e:4f:29:58:2c:08:cb:b8:4b:ca:e1:ed:cb:
7e:c3:22:71:94:57:b8:04:1c:a3:b5:1a:9d:62:11:
19:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:24:BD:01:43:78:10:9A:37:E2:A4:B7:15:C5:00:BC:9A:34:28:DD
X509v3 Authority Key Identifier:
keyid:FC:82:69:F4:2E:46:44:1A:B1:ED:99:4C:89:F7:47:BA:A5:54:E3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:23:54:ab:3e:ca:f2:56:ce:8f:9e:d2:35:41:2f:8f:46:42:
1e:8b:7e:78:35:bc:7f:cd:8b:10:50:82:90:6c:d7:77:23:1d:
11:e8:43:6d:9f:41:6f:ea:5f:3f:ee:6d:fc:6a:6c:b7:a0:ec:
97:cd:3a:0e:4d:df:92:60:7c:81:88:34:20:61:8c:9e:23:3c:
ef:64:ab:f9:7d:f1:b6:90:27:41:b7:4f:a9:43:a7:1b:f3:e1:
2a:f0:90:c2:bd:08:8f:b9:26:27:e3:34:2e:54:b9:0e:82:62:
f0:d2:d1:3f:71:31:73:3d:0a:f1:54:26:7f:45:df:3f:d9:7f:
43:a8:ed:17:c2:a3:8a:aa:76:96:6d:45:65:3e:85:08:fd:e5:
5f:a3:cc:cc:09:60:ce:dd:4d:2b:76:1d:db:12:7c:46:07:d3:
60:51:76:09:6c:6d:d3:c4:77:25:84:25:71:4d:c3:4e:47:27:
f4:1d:4a:ff:e7:2b:b1:0b:c9:88:81:7a:12:a5:01:28:b3:23:
6b:c4:25:ae:a3:06:bc:35:a5:7d:2b:b7:07:43:a1:e1:38:73:
09:65:a2:c0:bd:54:26:e3:d1:2f:df:16:88:35:a6:7f:f2:5f:
62:04:fb:fc:c9:3c:45:56:78:ff:ee:73:43:23:84:aa:b9:5d:
57:20:90:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:04 2025 by rpki-client