Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
File: IxIMamyM8XJufUjjFKFszQXvhgc.mft (raw, json)
Hash identifier: lzGJnbL/HHbaOWTls1Df0etXiJBH8DZRKGycdUh3nMA=
Subject key identifier: 11:B0:95:D0:A9:77:44:FA:90:25:CE:A2:EA:02:FE:62:76:2D:D7:5C
Authority key identifier: 23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
Certificate issuer: /CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Certificate serial: 019A4E864DEDFB540195C36E41E33E8628FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 11:00:15 +0000
Manifest this update: Tue 04 Nov 2025 11:00:15 +0000
Manifest next update: Wed 05 Nov 2025 11:00:15 +0000
Files and hashes: 1: 3ljJaz1a5cIjZ8YC3COzHNt_p94.roa (hash: bMQghzShphucnVw2AcHoK8ZlibkBQSkRsxgVMSWXPUM=)
2: IxIMamyM8XJufUjjFKFszQXvhgc.crl (hash: x1ZW8WsQweqagTXf4+5Hkl5iWqbxeen5Hw+mQEFo36o=)
3: PVPdjWfp5158kOXCBG02gGqvS2k.roa (hash: yHL6CrBTx/Lx7UNatKVR0PW+xHw8+FZidWVfHY4s2Bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:4d:ed:fb:54:01:95:c3:6e:41:e3:3e:86:28:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Validity
Not Before: Nov 4 11:00:15 2025 GMT
Not After : Nov 5 11:00:15 2025 GMT
Subject: CN=11b095d0a97744fa9025cea2ea02fe62762dd75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:67:8a:bf:bd:05:dd:d2:bd:3b:61:7a:e8:3e:
f1:73:6c:11:81:28:64:b2:c6:88:11:6c:95:2a:53:
c7:88:05:78:0b:65:a3:60:9c:ad:1b:c0:65:91:ac:
82:75:89:69:7b:21:7b:e9:cd:ff:65:61:c6:d7:70:
ec:5e:9b:85:1a:37:5e:3d:36:c5:46:69:69:41:d7:
c8:c3:8e:73:cf:8f:29:b1:fd:68:74:ae:a3:f2:e8:
90:de:e0:55:0d:18:4c:96:fb:d5:c9:19:13:9f:ff:
80:d4:cc:19:cd:b7:2b:44:49:98:73:ea:84:cb:3e:
09:8a:2f:fc:0d:08:d1:88:d4:55:b4:cc:4b:f4:71:
59:0f:78:7f:f5:9b:63:0f:c7:c0:cf:32:d1:ea:5a:
ae:dd:6e:ab:24:1b:4f:f8:59:a1:b1:e0:7e:ce:70:
0d:47:fc:70:d0:9f:40:24:0f:f0:57:4c:f9:de:e2:
39:0c:e0:47:9e:da:84:bf:55:8b:6e:67:a3:1a:2e:
7b:22:a6:83:c6:4c:a5:58:55:cd:22:4d:f2:c9:31:
68:b0:6a:b2:69:a1:9d:7d:fa:4c:00:94:45:31:bd:
ca:15:56:d7:9b:6e:a7:04:97:9a:64:d0:ae:a7:ef:
a6:63:a7:9a:56:f8:77:8e:ef:e2:cb:0b:ea:b0:ca:
27:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B0:95:D0:A9:77:44:FA:90:25:CE:A2:EA:02:FE:62:76:2D:D7:5C
X509v3 Authority Key Identifier:
keyid:23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:14:57:24:66:68:78:37:6c:ad:e9:da:9a:12:2e:ad:8f:62:
0a:86:6d:6a:53:85:3d:fa:f2:eb:1c:e9:3d:33:b6:c6:67:d0:
59:af:ea:37:98:cd:2a:ad:83:74:2b:01:e2:87:20:b8:35:11:
c6:7d:ef:21:39:2d:fe:f6:09:eb:57:33:c1:71:5d:d5:f9:ff:
d4:6c:45:ad:10:bf:1f:fe:47:24:c0:79:e4:55:10:dc:1b:21:
e9:b7:b6:1b:15:68:ac:c4:f7:72:6f:8d:cd:24:1c:14:bd:61:
b5:0d:d7:10:44:1e:8b:f8:c0:e4:47:4a:a2:ea:2f:bf:47:42:
3e:6e:97:c3:29:8c:40:32:7e:55:db:c5:ec:d7:39:83:62:58:
73:73:7e:7d:88:1d:03:0a:93:65:c4:d9:02:79:72:b5:f8:50:
69:85:9b:2b:b6:29:71:1b:b9:d6:51:32:11:a2:a0:8d:87:c0:
5b:4c:f5:82:87:b4:2e:ee:3c:37:32:8c:04:6c:2b:6c:31:43:
2b:7b:7d:0c:df:87:fb:f3:d3:11:e3:7f:30:c8:ed:5a:42:50:
6b:c4:89:58:bf:55:d7:8d:0b:fd:19:b6:86:6a:d2:ae:04:55:
59:8b:bf:c0:e3:41:b1:98:9e:ce:b7:ae:0d:64:87:76:62:8c:
e7:1e:89:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:41 2025 by rpki-client