Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
File: 0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft (raw, json)
Hash identifier: pGJt4xG4GUqRTy89pDB5RLHjvXbygxQEem5+AOVuKkA=
Subject key identifier: 61:1B:2E:8A:56:7D:23:07:B9:37:60:BC:1C:AC:6A:E3:77:50:2D:51
Authority key identifier: D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2
Certificate issuer: /CN=d223093ce150874016d793f439f43d2e6440c3f2
Certificate serial: 019A51F5BEFF063B71EDF863A85C3294E8E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
Manifest number: 170C
Signing time: Wed 05 Nov 2025 03:00:50 +0000
Manifest this update: Wed 05 Nov 2025 03:00:50 +0000
Manifest next update: Thu 06 Nov 2025 03:00:50 +0000
Files and hashes: 1: 0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl (hash: ch7vEdKVFHGJAIFibJBxDUTHpP6dfKfDqVIHbJwqRV0=)
2: 8foZPawfC4Bge_VpnjQP50GOAg8.roa (hash: GRqVhwrx6ASLBDj77rYjcJvDM0QCQ1bVWMj8DIm3F+M=)
3: Qvc8RSbEXXaKTVJ-2F_YzL6RWqQ.roa (hash: a+7CPhduNeCdLfwErr+aJ4N+Kny/SpDPIbHNdyGUm+I=)
4: Yav_wTnthnhUJgVUNCqahhzwsSo.roa (hash: JhocbRWhMTwMsID+n4FCpeOKgy5OrWytCdlYeicraA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:be:ff:06:3b:71:ed:f8:63:a8:5c:32:94:e8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d223093ce150874016d793f439f43d2e6440c3f2
Validity
Not Before: Nov 5 03:00:50 2025 GMT
Not After : Nov 6 03:00:50 2025 GMT
Subject: CN=611b2e8a567d2307b93760bc1cac6ae377502d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:42:63:75:d6:fd:bf:d4:0f:75:af:3d:5d:05:
c5:35:c4:d7:dc:3d:23:17:02:27:ef:d8:d9:65:f3:
5c:48:83:43:e5:8f:e2:78:f2:96:7c:87:12:96:06:
91:93:0b:d0:12:02:3f:65:99:80:51:54:03:b3:80:
14:bf:46:51:1b:a1:9a:40:27:4e:3f:7d:e3:47:8a:
a0:13:ee:87:cf:bd:37:03:d1:d5:f0:93:78:51:4c:
93:0b:28:e9:93:09:18:e3:0f:41:2d:b3:30:6d:51:
2d:86:ac:46:36:bf:1d:d0:6d:fd:d4:58:49:ce:4e:
b7:d7:f0:de:cb:b1:fd:0c:58:e2:57:4c:84:25:96:
f3:70:45:b7:ba:2e:e4:c6:b2:e4:58:80:93:59:e6:
b3:68:c9:9b:e8:4b:93:f6:82:ad:31:bc:a2:08:19:
4d:81:aa:8c:17:51:99:c5:5f:9f:08:db:9b:63:47:
fc:45:da:b5:fa:d5:de:13:d1:3e:5f:e2:7d:44:21:
0b:69:de:cb:f0:30:bb:19:97:55:8a:26:ea:57:c0:
72:ee:7d:47:8a:11:66:2d:67:89:13:09:08:da:96:
47:5e:27:09:2f:00:81:40:df:e1:cc:d8:d6:c5:03:
d2:37:95:01:ae:dc:4d:9c:1c:d3:fd:43:4a:47:d2:
78:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1B:2E:8A:56:7D:23:07:B9:37:60:BC:1C:AC:6A:E3:77:50:2D:51
X509v3 Authority Key Identifier:
keyid:D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e8:0a:2d:83:71:85:bd:8e:3e:63:a6:e5:40:b9:36:62:b9:8e:
66:65:3a:5a:91:e3:9c:ed:51:1e:b0:73:3a:0e:9b:a0:8e:64:
5f:b1:0a:05:e6:c2:b9:9e:07:2b:4f:6d:e1:22:83:74:d5:f1:
ad:87:69:42:64:17:67:42:62:af:b9:85:ea:d9:72:b0:b7:4b:
8d:a0:ce:32:c8:5b:8e:63:8d:75:1f:e3:24:08:58:c7:c0:dd:
c6:78:1f:6d:ee:b2:ea:db:17:53:8b:ee:9a:12:d4:e8:3b:3e:
42:9e:25:d3:e8:42:8f:f3:62:90:d0:0f:28:6b:31:5d:51:0f:
d4:9d:42:f5:df:60:bb:b4:49:0f:91:5d:fc:3b:fb:e9:de:ae:
d8:ba:f6:61:55:39:e6:27:cd:39:54:3f:db:07:fb:de:bc:e4:
e7:e0:8d:0f:8b:91:3d:52:b1:58:80:d3:f6:08:83:65:be:15:
ff:90:e3:e8:f4:9d:9e:20:23:f7:0d:d8:31:8e:ea:58:cc:27:
24:2e:1b:0a:9a:a8:bc:5d:23:11:43:c0:ef:b4:70:23:be:60:
88:f0:9d:f7:fc:ee:a7:15:dd:7a:0c:ba:bb:97:30:5d:04:5c:
ce:3a:84:ae:6f:e1:e3:73:07:15:c5:11:a3:a1:22:2d:a1:ab:
b3:9e:27:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:41:33 2025 by rpki-client