Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
File: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft (raw, json)
Hash identifier: AXJt4dyUmD0guyaK8nhhb6XYS/jZ3CnUAm069M0vBAI=
Subject key identifier: 53:23:39:30:3E:FB:18:08:2F:73:B6:E5:17:16:A7:3F:7B:54:6B:0B
Authority key identifier: 89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75
Certificate issuer: /CN=89aed2cff8ce31b334f83a0b305feef01d71da75
Certificate serial: 019A4EF520A6A2FBE0199F6FF03431479EA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
Manifest number: 16C7
Signing time: Tue 04 Nov 2025 13:01:18 +0000
Manifest this update: Tue 04 Nov 2025 13:01:18 +0000
Manifest next update: Wed 05 Nov 2025 13:01:18 +0000
Files and hashes: 1: TuA6dq5RUfQK0g-nhGPwelxAp8s.roa (hash: A068hT4+Hwiukpw4NAI0ekcWki3f2qgAy0smH/qbl44=)
2: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl (hash: 1w9ugz+E/foOR5GH+1KoGNtq2GYVzATjf/XK+qfTFtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:20:a6:a2:fb:e0:19:9f:6f:f0:34:31:47:9e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aed2cff8ce31b334f83a0b305feef01d71da75
Validity
Not Before: Nov 4 13:01:18 2025 GMT
Not After : Nov 5 13:01:18 2025 GMT
Subject: CN=532339303efb18082f73b6e51716a73f7b546b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:df:27:28:59:8f:26:63:f8:c3:81:60:a2:63:
57:d5:23:21:ad:fa:d8:ca:7a:05:ac:e9:ee:85:c7:
f1:95:c0:fa:a7:d3:81:ce:32:64:a0:84:81:51:cb:
15:e4:fb:04:17:bf:8a:f8:8f:c9:cf:47:fd:26:d5:
de:ac:08:01:0f:a4:f8:10:b4:56:41:f7:9f:af:e2:
2f:b9:44:ee:d8:c7:59:de:fd:02:e5:6e:ae:b9:5f:
97:68:43:6c:c0:98:e4:f5:a2:65:67:00:3f:03:0a:
84:d1:8f:d8:fb:26:57:17:09:f9:93:3e:cc:2d:ed:
a2:56:5a:9f:3a:fc:2f:8d:24:5a:8d:d0:fc:64:ae:
23:5b:26:90:1d:e8:9b:10:c4:16:d8:d3:e9:54:23:
4a:d1:6f:10:1d:45:4f:30:ea:9e:d3:4a:61:b4:93:
63:07:a0:26:9f:69:01:f8:5e:71:43:d2:73:e5:74:
b8:20:e8:a7:5c:dd:f7:70:49:9a:7e:dd:e0:29:33:
54:20:2b:ac:d4:af:6b:bb:21:8e:eb:be:2f:6c:a4:
bc:d2:85:cb:79:05:88:53:82:c4:57:03:48:13:84:
34:25:6a:39:9f:5b:56:8a:74:85:92:e9:d6:aa:90:
b7:29:7b:8c:87:8c:6d:40:b9:51:bf:db:92:40:6f:
dc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:23:39:30:3E:FB:18:08:2F:73:B6:E5:17:16:A7:3F:7B:54:6B:0B
X509v3 Authority Key Identifier:
keyid:89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:cb:9f:d5:85:f9:3f:4b:7f:71:13:04:e1:40:17:e0:5c:b8:
14:48:e4:7e:c9:33:24:b6:0b:ef:01:ec:f4:c1:43:a9:25:a1:
af:ae:e8:79:02:ee:96:fb:a8:eb:d3:a9:f7:73:9a:1a:62:de:
0e:f3:86:49:e5:ec:0b:72:59:be:61:c1:96:26:74:67:8d:85:
22:2e:85:5f:95:50:9e:83:cf:13:cf:aa:60:cf:40:b9:76:b0:
78:97:10:fc:15:26:bf:dd:8f:2f:46:15:4f:b1:6a:14:11:62:
c4:ef:0e:6a:c5:fb:76:93:64:27:0b:a0:51:ca:13:cf:46:02:
30:7e:c0:5c:a3:76:3b:eb:a7:2c:62:f8:e6:3c:09:9d:08:d6:
56:d9:67:d5:bc:31:3e:d9:c4:12:45:30:5b:46:3b:41:f1:c4:
9b:d7:4c:a4:9d:ec:27:7f:f7:57:34:a5:03:3f:5a:1e:52:32:
de:5e:59:50:85:cd:88:23:8b:a2:f1:71:04:f1:9c:9c:cb:0e:
87:cc:3d:40:8b:42:4a:80:9e:46:4a:e5:13:88:15:00:1b:0c:
e2:17:84:01:5c:c2:40:26:d2:c9:85:b3:7c:d6:48:88:2a:65:
f4:12:d3:50:d8:83:77:f6:b3:de:40:90:b5:b7:36:e4:a3:6e:
48:b9:0b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:34:05 2025 by rpki-client