Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
File: I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft (raw, json)
Hash identifier: m38BsTJ4ZLmtT+VAanuSA0PyhLophf4gX7ahVqnhyTQ=
Subject key identifier: 25:56:3B:1F:6F:C9:8F:20:6C:CB:31:6D:B7:AC:40:CC:B8:FB:27:A6
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Certificate issuer: /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial: 019A4F61EFBDA49D6C49F8866CB8CAE1F952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
Manifest number: 0AD3
Signing time: Tue 04 Nov 2025 15:00:09 +0000
Manifest this update: Tue 04 Nov 2025 15:00:09 +0000
Manifest next update: Wed 05 Nov 2025 15:00:09 +0000
Files and hashes: 1: FSsZO7tf2uyGI_GTm9rqM0qzwyo.roa (hash: +N02NDT8cxwi6khKovC14z/AE2KwVw5IVFU5XCAAiJs=)
2: I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl (hash: MG4eAEcPbEJ5mXi4aoFtz7MNbx02todtLqx60DP+uts=)
3: pGnzHT17oa6cGFgaKh_Mb1gg4HU.roa (hash: tnbr1e3XQydvlzjAP3o8eDkS1HDgrVPM/kErIEuP+f8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:ef:bd:a4:9d:6c:49:f8:86:6c:b8:ca:e1:f9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
Validity
Not Before: Nov 4 15:00:09 2025 GMT
Not After : Nov 5 15:00:09 2025 GMT
Subject: CN=25563b1f6fc98f206ccb316db7ac40ccb8fb27a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:2c:24:36:73:9b:db:b2:88:a1:86:db:77:
f7:d6:38:97:04:94:fc:69:23:e9:05:df:6b:6f:70:
c0:64:1c:1f:8f:b4:09:2f:eb:5d:84:a9:df:f7:24:
be:f6:f6:6f:4a:d7:3c:dd:94:ac:4a:fe:ed:0b:f8:
14:42:2c:32:82:97:4c:d5:65:ac:1d:63:ad:a5:28:
eb:7b:cb:35:2c:58:97:a2:9b:e6:8b:2e:20:8a:ee:
21:37:01:c0:83:13:9a:49:b6:bd:6a:af:c5:4d:90:
e3:7a:e8:bc:48:c5:08:01:87:18:d6:38:0d:2d:cb:
ea:0a:5d:e7:f7:42:88:84:45:e9:b4:44:64:ab:8b:
ff:18:c3:7e:68:fe:7f:5c:e9:2d:2d:f2:26:f5:40:
84:d5:60:6c:6a:41:d4:20:18:69:fd:fb:05:13:c6:
dc:25:3f:16:80:0d:42:e6:a7:20:c3:fb:c1:61:a6:
ec:aa:73:31:d0:73:4d:52:25:1a:07:36:88:37:67:
c0:19:b1:a7:d6:be:37:fb:0a:82:46:e6:f9:26:aa:
79:8f:64:31:0f:c9:fa:1c:fc:8e:71:32:4a:13:30:
94:17:56:11:b5:2a:d9:3b:55:2b:e8:ac:10:9e:97:
f0:8a:66:4b:82:15:1b:11:27:5f:a5:dd:2c:ba:b9:
8d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:56:3B:1F:6F:C9:8F:20:6C:CB:31:6D:B7:AC:40:CC:B8:FB:27:A6
X509v3 Authority Key Identifier:
keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:02:23:d8:19:bd:ed:77:54:ab:97:ce:e3:53:bd:c3:ca:5f:
b0:f0:2b:0b:fd:a1:32:5e:8f:69:1a:02:06:95:fb:c0:f8:e6:
90:c0:cf:3f:bb:cb:d8:70:e0:79:6f:a4:1e:4e:cc:ec:8f:8a:
83:31:31:a4:4f:c5:0d:5e:bd:43:cd:46:2d:03:17:b5:04:72:
b5:c5:a5:86:f4:6b:4d:a0:5d:f7:e9:52:20:33:d5:4a:8b:fb:
1e:5e:01:94:1e:df:6c:78:bb:c6:03:13:36:a4:a2:9e:55:1b:
7c:21:b0:d5:64:a2:6a:8b:d1:27:1b:dd:6e:e0:00:d4:a5:69:
f2:63:7d:c4:38:f7:cd:68:97:06:0a:34:2c:ca:01:08:61:d9:
4e:aa:6f:0a:fc:8c:bd:0e:ed:c7:0a:5d:82:cd:af:ad:58:ba:
f4:29:61:1c:7f:9e:0c:19:2d:c6:49:31:16:69:c0:ad:f0:8b:
ae:9f:cd:ab:ce:21:4f:fe:fb:89:38:0b:19:62:90:5e:1d:14:
77:80:76:96:06:72:c4:34:8b:c5:25:2b:50:92:b5:97:14:a4:
dc:40:cb:f9:06:54:11:a2:1c:b2:7e:bf:41:86:7e:19:b3:95:
7a:60:9c:7c:32:5d:8e:94:2a:9b:35:92:27:6d:34:b2:5e:58:
66:07:22:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:10:36 2025 by rpki-client