Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
File: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft (raw, json)
Hash identifier: ajH48QEY6tnahDRC+ynmQzCVJQvmqTcdvsz/gLyQYm8=
Subject key identifier: 29:7F:15:5F:51:72:48:E8:2A:04:4B:08:74:38:70:E1:D8:2E:E2:63
Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
Certificate issuer: /CN=21a00080cd2cb1bb073903b32b25ad660a366486
Certificate serial: 019A4D3CF122A840966E423E6E5D7D4D4E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
Manifest number: 15E1
Signing time: Tue 04 Nov 2025 05:00:30 +0000
Manifest this update: Tue 04 Nov 2025 05:00:30 +0000
Manifest next update: Wed 05 Nov 2025 05:00:30 +0000
Files and hashes: 1: 1KLC3gBk4V8UlL1q34VPnUxHzZY.roa (hash: PpTqyE9jhdplaM4jeC6bew/Mkzc7lRGupafDYfql5k0=)
2: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl (hash: NzhygUWTP1TBjVUuGuLzgjewnex37bVMHM7iMGiCHVc=)
3: QdEJ7zpCJnQlkbu72Bn_JyCb_EM.roa (hash: uicaL7GuC1Mghzq3VpHhej/MKa/9KriBzrxlFVoCpcc=)
4: WylnrO-wU58E26AefCAQ7nrb79w.roa (hash: y1OWdCLTeRgES3w6dtbyOUz1ZW2NZGMx2qqGlzUOOl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:f1:22:a8:40:96:6e:42:3e:6e:5d:7d:4d:4e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486
Validity
Not Before: Nov 4 05:00:30 2025 GMT
Not After : Nov 5 05:00:30 2025 GMT
Subject: CN=297f155f517248e82a044b08743870e1d82ee263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f5:e0:1f:89:bc:97:f0:9e:a1:fb:89:d7:31:
74:7d:c8:0f:b8:26:2e:37:0c:c3:94:26:08:5a:0c:
b6:2a:c0:34:13:b6:ea:ef:5e:51:12:a5:5a:f8:b3:
1e:7c:fb:18:41:53:aa:05:d5:1d:de:95:30:94:f7:
b0:71:a1:c9:b2:6a:8a:e0:49:dc:5b:bf:23:33:e0:
55:63:4a:b9:24:94:45:44:a8:cb:42:00:a2:42:39:
d2:94:fd:59:dd:84:4b:30:8e:53:04:4e:e4:0c:42:
98:c6:27:84:3f:c3:af:6d:f6:38:66:c0:4e:78:fe:
03:15:ca:cd:d4:8e:e4:2b:6e:92:96:db:62:e5:73:
83:95:39:c5:ea:70:a6:cc:d5:8a:bc:96:f0:7a:ed:
24:21:92:7f:eb:70:b0:92:48:51:2f:ba:5c:4f:c4:
f0:1c:38:8f:b8:a2:13:69:cd:f0:c4:b4:ea:3b:95:
22:3c:97:60:8e:19:63:c2:54:98:82:ea:cf:f2:ea:
7a:84:da:91:61:2b:b4:7a:f7:b1:8b:bb:47:f4:ac:
77:0e:46:08:6d:82:12:57:a2:2b:45:6e:03:7d:43:
22:2d:b3:67:21:be:d9:1c:98:e3:db:cb:c5:c4:e2:
1e:6b:8d:7b:9f:f7:6d:ee:9e:58:50:43:aa:05:b1:
37:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7F:15:5F:51:72:48:E8:2A:04:4B:08:74:38:70:E1:D8:2E:E2:63
X509v3 Authority Key Identifier:
keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:1f:7a:3a:09:16:d0:f3:2e:97:8e:1f:70:58:7d:4a:7b:f0:
e3:3e:e1:35:79:81:60:02:4f:99:57:1d:da:bd:c0:44:33:0a:
a4:49:43:cc:9c:55:77:2e:65:6c:eb:e8:e6:1b:f1:e9:75:45:
4a:bc:1e:b0:f4:bd:42:47:94:6c:08:42:56:d2:e0:4c:44:07:
06:79:5b:be:45:af:95:1e:71:df:d5:bf:a3:bd:95:21:4d:29:
cd:bf:2b:25:05:2a:d3:30:17:71:9f:4c:b0:ec:43:70:bf:be:
30:26:35:8a:a3:bc:71:66:bb:21:2e:04:41:fe:df:ad:55:8a:
a5:65:d9:f9:d0:df:6f:a2:61:ed:3b:23:30:4c:cf:2f:c5:9d:
ec:7e:be:91:dc:84:ac:6e:ea:66:c0:1f:7e:7a:01:87:02:82:
ed:52:b6:55:c7:40:7d:3d:83:60:6e:02:2b:17:b5:bd:e6:44:
4e:4e:bf:9a:f5:74:35:8c:6c:7d:d9:16:73:84:11:dd:f0:76:
1e:12:16:42:e5:0e:c4:9a:53:4a:37:97:4e:d1:03:46:79:3a:
0b:e7:ea:1c:80:f7:78:18:fd:dc:bb:7a:6e:32:4f:fc:26:86:
2c:10:a7:f0:f5:0d:74:5c:e3:18:f1:87:1c:49:19:9d:9d:be:
45:15:6c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:31 2025 by rpki-client