Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft
File: ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft (raw, json)
Hash identifier: ZW+SuZ+wQqUxn5v4URqZBwfQ/8ARb97rjp77FezxgGM=
Subject key identifier: 7D:64:CB:34:D8:6E:FA:0A:BD:B9:2F:C5:80:5D:01:76:E3:DF:A2:42
Authority key identifier: 8A:38:D1:19:1F:66:F1:F0:31:5D:E5:F4:5C:C1:94:D1:CD:19:D1:FB
Certificate issuer: /CN=8a38d1191f66f1f0315de5f45cc194d1cd19d1fb
Certificate serial: 019A4F9976F86195BFEB019E679685CDC221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 16:00:48 +0000
Manifest this update: Tue 04 Nov 2025 16:00:48 +0000
Manifest next update: Wed 05 Nov 2025 16:00:48 +0000
Files and hashes: 1: hLakS4LRqtwndizOwv35_LPmSM8.roa (hash: T21fBsQZHckhVR25IcmVqL7irT842KR48E+IblvWuLQ=)
2: ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl (hash: YXh1zYbh4/vTh6E/GrjASw+tyjgxq/wXuCaHqfWZ0NM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:76:f8:61:95:bf:eb:01:9e:67:96:85:cd:c2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a38d1191f66f1f0315de5f45cc194d1cd19d1fb
Validity
Not Before: Nov 4 16:00:48 2025 GMT
Not After : Nov 5 16:00:48 2025 GMT
Subject: CN=7d64cb34d86efa0abdb92fc5805d0176e3dfa242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:03:07:75:8b:ca:9f:f8:f6:9c:08:05:a0:3b:
23:b4:c1:97:db:8b:8e:a1:dc:04:ba:d7:b9:35:d8:
c2:ad:f3:94:4a:20:7d:18:68:b6:b2:a1:00:67:7a:
e8:a5:b8:7d:7f:68:c4:25:54:70:b6:e7:2c:08:a1:
4a:cc:b9:28:68:48:41:5c:a0:6a:7b:0a:4e:2e:9a:
95:76:49:68:53:81:c0:31:94:41:b4:2b:04:fb:3c:
02:33:54:86:60:e0:f8:ca:40:e8:fb:ee:3a:42:88:
00:80:22:27:41:6b:d3:78:33:c7:b1:6a:aa:72:e6:
7b:dc:c1:a7:b7:19:fb:44:da:de:b9:d4:1d:38:57:
b8:9e:0c:a8:3b:86:a5:b9:78:52:4a:16:a4:a3:f2:
12:63:3f:f4:a5:ab:55:7f:55:70:d9:2e:c2:fb:0f:
42:58:d6:10:64:32:3a:8c:f2:81:a3:f0:9e:92:23:
f5:05:3c:c8:7a:74:5a:8a:65:c6:7c:87:b2:dc:2d:
b9:59:a3:7a:a8:77:ba:b8:4f:7f:0f:86:b3:c0:48:
b0:35:94:d2:a0:ca:96:38:48:fe:5d:57:49:ed:58:
49:81:c4:d7:2e:a4:e7:5c:40:04:ef:8d:54:fd:95:
18:07:26:d6:43:63:e4:f2:7f:10:20:42:96:ed:be:
74:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:64:CB:34:D8:6E:FA:0A:BD:B9:2F:C5:80:5D:01:76:E3:DF:A2:42
X509v3 Authority Key Identifier:
keyid:8A:38:D1:19:1F:66:F1:F0:31:5D:E5:F4:5C:C1:94:D1:CD:19:D1:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:4f:48:c2:24:b4:7d:19:e5:5f:2f:9f:6b:18:8a:ee:72:ef:
ef:d0:3c:94:0d:15:ee:ce:bc:13:b7:4c:fb:1d:47:0e:0f:46:
03:fd:77:ec:4f:19:f2:4c:8b:1d:25:0d:ee:d3:85:fa:51:67:
e3:fc:fd:cb:1e:22:c3:85:5f:5a:ab:ef:3a:e2:ac:a3:5e:f5:
ec:2d:29:ef:53:18:0c:5e:00:63:95:18:52:d9:4f:e9:7b:50:
c6:66:a7:84:3d:be:24:b6:c8:13:4a:0b:75:50:26:c8:b9:ed:
91:67:71:ee:f3:9f:a3:40:0b:c1:42:a6:89:18:52:98:84:d7:
7e:08:34:91:7b:c2:90:0b:ca:b0:a8:09:aa:10:f6:4c:e3:bf:
b2:8d:12:a7:d0:dd:08:67:d2:08:0b:c0:93:09:55:49:14:be:
d4:44:21:a3:8f:13:bc:d8:c3:e1:38:75:aa:07:ef:5d:27:1a:
b9:0d:26:ed:52:f9:7b:75:57:ac:6a:20:b3:b2:13:b1:fc:3f:
b7:1a:c6:e1:7d:fe:99:8b:11:7f:df:8c:bd:e1:d6:e0:44:9d:
5d:27:22:ba:97:bd:8b:28:77:94:03:07:4d:5e:ab:7f:06:09:
ef:2f:93:6d:d9:46:1f:e2:0b:d7:fc:60:cc:f7:16:f1:e5:b1:
7e:4c:86:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:24 2025 by rpki-client