Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
File: i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft (raw, json)
Hash identifier: jo2ZqOD41cS7R7d9yDcfbLIme4NumM05I0nGbIIe1dM=
Subject key identifier: 2A:30:C2:8D:61:EE:05:6A:49:1F:C3:75:7F:1D:07:30:29:A3:02:15
Authority key identifier: 8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
Certificate issuer: /CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Certificate serial: 019A4D0656E2FFE414CE65C3B06AF7E57596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 04:00:52 +0000
Manifest this update: Tue 04 Nov 2025 04:00:52 +0000
Manifest next update: Wed 05 Nov 2025 04:00:52 +0000
Files and hashes: 1: fv5YNECYQOScxqIs8CQ4Mfvo6r4.roa (hash: 1dbsSquUR6918Zz6dymdjZNTTgaYfI6MWJh2pSzjXy4=)
2: fweRbovLWdF9pH6rb4wkNI7Qa5A.roa (hash: Ij1i47Q8RIaDs08CnmY/mVxyR0aEzscrR4GtWWkDV3Q=)
3: i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl (hash: KztliVxWJNDCs6iLEAP3AIolmb/U+2HtVgBIJhJdd4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:56:e2:ff:e4:14:ce:65:c3:b0:6a:f7:e5:75:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Validity
Not Before: Nov 4 04:00:52 2025 GMT
Not After : Nov 5 04:00:52 2025 GMT
Subject: CN=2a30c28d61ee056a491fc3757f1d073029a30215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0a:12:13:47:30:2c:45:8f:b4:cb:7b:6f:6c:
bf:10:4e:a4:7a:c2:f9:39:32:31:8b:01:83:7e:aa:
0c:cc:93:e7:07:73:44:ce:cf:89:0d:7c:b6:dc:71:
37:f8:20:fa:7c:8c:5b:9b:88:9f:78:34:cb:15:6c:
5c:58:12:9a:38:0f:61:ea:ea:51:58:d8:e7:00:6f:
eb:c6:94:cb:2a:f9:0f:4b:db:d9:f8:12:12:80:d8:
dc:c2:fb:39:35:06:b2:1a:79:31:03:6b:f1:2a:9c:
5a:e8:0e:46:0d:60:ce:01:82:ff:e4:d0:c2:ad:6d:
77:28:59:23:d7:45:02:5f:47:27:80:84:42:53:9a:
04:d3:56:10:15:b2:17:f5:40:f0:ec:1c:20:63:35:
ec:67:1f:7b:dd:37:a1:3c:e2:7c:e6:b2:04:69:43:
66:fc:75:21:b5:cf:32:e5:6d:8c:a1:89:4d:50:21:
b4:bf:fd:e1:6b:20:09:84:35:b6:67:4c:dc:fa:72:
e3:d8:21:9e:e4:c8:8d:13:39:c0:33:cc:95:c3:ba:
43:ed:52:f1:33:fa:28:fd:cd:2e:c0:d6:eb:29:e2:
8d:0b:22:83:3f:b1:7e:03:75:ce:64:a9:55:4d:cb:
bb:ff:80:d0:6f:20:d6:38:f5:21:7c:48:a9:36:6a:
5c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:30:C2:8D:61:EE:05:6A:49:1F:C3:75:7F:1D:07:30:29:A3:02:15
X509v3 Authority Key Identifier:
keyid:8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ad:eb:0a:df:9a:c9:bc:24:64:ba:eb:22:e0:4f:fa:bc:fc:
1f:af:dc:e5:c2:e1:42:90:fa:41:38:cb:bb:af:e1:d9:24:e2:
31:77:cb:37:f9:da:da:f7:f5:78:17:a5:c2:da:2c:2a:95:54:
ec:72:c3:b2:72:bc:62:52:3a:b0:db:94:5e:b8:e0:a3:31:ba:
32:e4:6d:30:54:f8:c6:3f:2f:04:1a:5d:21:75:db:1c:b9:dc:
aa:67:37:5b:83:97:a2:79:4d:6a:f7:65:a2:1b:a3:ab:78:e4:
fb:05:05:d0:1d:09:e0:ce:38:6b:16:b0:0e:49:41:63:1a:0f:
78:cb:0c:ea:d5:14:aa:3c:84:77:58:36:da:ac:da:70:48:bf:
cf:3d:69:57:a5:75:b5:48:ef:09:fa:2d:43:b7:a6:61:0e:a1:
c6:94:43:11:4d:77:a9:9e:19:91:f9:20:68:03:c6:60:97:0c:
83:74:e7:cc:c9:b6:3a:e9:c5:d2:7d:16:d3:a8:b7:3a:0b:d9:
6a:b5:63:ce:e3:b6:55:66:cc:6a:91:33:2c:7a:56:fa:5d:ab:
ab:a5:35:b6:47:51:80:59:3c:81:70:71:16:ec:93:04:f0:7e:
62:a4:62:ee:e2:e8:a5:3a:97:6e:20:c5:58:cd:fc:38:4b:b3:
cc:28:6f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:51 2025 by rpki-client