Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
File: I6xIaAc5isHO7Akh0E1Amk9_R5s.mft (raw, json)
Hash identifier: aN/21zsB9foGfbcZuWzai2YALCanypNDSTH9nossVqk=
Subject key identifier: 94:B5:26:F7:D7:65:D0:61:D9:11:59:0F:AC:FD:1F:00:CB:8B:C0:65
Authority key identifier: 23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B
Certificate issuer: /CN=23ac486807398ac1ceec0921d04d409a4f7f479b
Certificate serial: 019A52D1AF66C57EE5E44B0516BEAB63A131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 07:01:04 +0000
Manifest this update: Wed 05 Nov 2025 07:01:04 +0000
Manifest next update: Thu 06 Nov 2025 07:01:04 +0000
Files and hashes: 1: I6xIaAc5isHO7Akh0E1Amk9_R5s.crl (hash: jwg2smXmdEwjm+R1+Mead4fCHvaF6YJKOXEww/qKyD8=)
2: bjCXA7rp-GRMTkdMkg_zXfKYrW0.roa (hash: FxnvNnw+IOeKtHJC0KTXpxkTr4pA05J6vavAi4HV2BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:af:66:c5:7e:e5:e4:4b:05:16:be:ab:63:a1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ac486807398ac1ceec0921d04d409a4f7f479b
Validity
Not Before: Nov 5 07:01:04 2025 GMT
Not After : Nov 6 07:01:04 2025 GMT
Subject: CN=94b526f7d765d061d911590facfd1f00cb8bc065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c8:3c:17:20:cf:e3:1f:fa:72:8a:68:d0:0e:
cf:03:3d:0b:d6:a2:3a:2b:79:4a:2d:79:85:68:85:
60:4e:c6:35:be:d4:5d:74:10:2d:8e:8d:42:a0:cf:
df:90:4f:b0:55:9a:2f:37:c0:02:54:de:79:41:e6:
88:b2:01:04:0a:a5:87:cd:e9:1d:f0:4f:a1:4c:16:
c7:6f:91:d4:96:67:d7:a4:1e:60:f0:e8:a1:00:98:
3b:40:39:3b:c2:8c:4b:3c:41:fa:65:27:32:aa:a8:
3d:d6:a2:c5:0a:74:ee:a7:85:6e:d9:43:e5:82:cc:
6f:1c:79:ef:b8:00:b7:73:c1:94:a9:fb:c8:cc:91:
e7:9b:36:f4:9d:57:0d:a8:ff:73:ed:66:0a:6f:d7:
86:5d:93:71:98:94:57:7b:65:62:15:d0:48:e8:87:
95:8b:2f:b5:93:15:da:39:9a:29:5a:a5:99:14:35:
38:03:76:49:0a:b6:ca:91:9a:92:04:13:61:83:9a:
6c:5a:26:e2:77:07:92:b5:a9:c3:50:d5:a2:2d:58:
9c:28:d4:e4:02:63:c5:52:4f:6a:12:12:ed:fe:88:
f2:dd:ea:a9:a2:d6:bc:06:cb:9e:71:d8:bb:f1:31:
e7:88:16:18:57:60:6a:58:89:51:cf:f1:8a:c5:a3:
5c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B5:26:F7:D7:65:D0:61:D9:11:59:0F:AC:FD:1F:00:CB:8B:C0:65
X509v3 Authority Key Identifier:
keyid:23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:dd:57:d0:05:d2:a1:e6:55:2a:eb:eb:55:62:ed:58:2f:b5:
e1:5b:69:1e:84:37:60:3e:64:d0:35:e0:f8:12:9d:f0:36:f2:
1a:11:76:4f:a3:8d:5d:73:b3:cd:7f:aa:4a:39:a8:96:a3:9a:
de:3c:4e:9a:59:86:72:cb:5e:27:2f:5d:35:66:5c:32:97:32:
f0:a1:93:3b:2e:ad:54:e7:65:fb:6f:4f:ed:63:e2:b0:a1:e4:
52:51:eb:f6:80:19:c3:23:b3:72:5d:19:62:43:cb:3d:1b:c9:
81:3c:95:f3:35:56:eb:48:d6:d7:f5:07:fc:28:d5:dc:b8:35:
fa:a5:ee:f6:ac:00:78:be:ce:7b:26:17:1e:ba:3b:5a:cb:6c:
4c:c2:90:cf:e4:1b:ac:26:6d:ae:1c:35:c8:01:46:80:cb:49:
2b:41:b6:c0:16:24:80:3d:48:01:ad:f4:d7:c6:ef:c9:e2:40:
ff:6c:2e:d4:78:18:90:d5:db:9d:2f:80:da:fd:4f:f8:28:77:
91:38:d9:24:9c:46:2e:b7:20:5e:50:50:79:c0:aa:cf:3e:6a:
fa:a4:e0:84:e8:17:08:26:2a:9c:ae:18:1f:c7:9f:01:cc:05:
f7:5d:4e:d7:3b:a5:3a:90:8f:66:c9:fd:8b:cb:25:59:25:61:
94:93:ba:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:46:41 2025 by rpki-client