Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
File: ihZhi3H_yA4cP0HtDfyJq16WP9I.mft (raw, json)
Hash identifier: ZXP226830xs4X1v2IQW7iCHCfTTrh1S/bfmNiy2CzEg=
Subject key identifier: F1:C9:D5:B2:4D:C5:F9:D2:29:2A:63:02:ED:7B:32:4D:23:40:63:56
Authority key identifier: 8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
Certificate issuer: /CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Certificate serial: 019A4E18D1D70CC647ABEF008DE252F1CED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 09:00:40 +0000
Manifest this update: Tue 04 Nov 2025 09:00:40 +0000
Manifest next update: Wed 05 Nov 2025 09:00:40 +0000
Files and hashes: 1: ExfUqNEW3Lyq9Nl7Jq22WcfJ1rw.roa (hash: 6SjZfPEMGV4QZNr6XzSlmm+VNkfjjPfYSSMSKKIpL5E=)
2: ihZhi3H_yA4cP0HtDfyJq16WP9I.crl (hash: A5+0t3mDEktCZv68zcSFI++iMYIZfpQ8JP+oaqKtHLM=)
3: vuckuXbmedLIJWITtJ1gJzQY8X0.roa (hash: BujWwxtiu31OcVkERDwp6qXjCF/qZpedTzNgbY+R4ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:d1:d7:0c:c6:47:ab:ef:00:8d:e2:52:f1:ce:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Validity
Not Before: Nov 4 09:00:40 2025 GMT
Not After : Nov 5 09:00:40 2025 GMT
Subject: CN=f1c9d5b24dc5f9d2292a6302ed7b324d23406356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:db:af:f7:4a:ec:b1:95:b1:86:50:0f:b0:ce:
6f:7b:0f:db:f9:5d:b3:b3:10:5a:c4:b4:70:a8:1a:
aa:5a:95:12:fb:df:fe:28:82:2a:31:81:2d:3b:ab:
30:ff:66:eb:9f:e6:f0:94:54:f0:7e:73:a3:2b:73:
4a:44:20:9c:f7:53:76:1a:bb:60:8d:b4:16:a8:6c:
b0:84:ac:35:ff:e4:53:d2:5e:10:c3:bf:65:3f:f4:
6d:2d:79:3b:7e:31:51:29:09:46:0b:69:36:28:b0:
9f:2e:fc:6d:94:af:c6:91:c8:b1:b8:19:4f:4c:41:
39:89:f5:c4:40:13:a4:bd:39:2e:83:83:0b:bb:7d:
44:db:68:62:27:1f:46:15:e1:82:1b:5c:3b:b6:91:
41:78:3b:0a:8f:33:f3:83:25:1a:7a:18:b4:0d:90:
1f:01:0b:19:57:21:20:7c:10:de:ee:1c:42:14:ca:
86:2e:c6:00:07:50:b4:05:f3:50:ab:db:39:a3:81:
83:06:00:35:a4:60:ce:e2:9e:3d:ee:46:d1:3d:df:
76:2d:85:f9:c5:48:39:22:bd:8b:6a:fd:93:1e:ca:
1a:32:c2:50:c4:21:12:7c:ed:f1:d6:95:5d:0a:55:
4d:4e:c4:21:94:a3:b7:7e:dc:fd:98:06:f6:b3:46:
12:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C9:D5:B2:4D:C5:F9:D2:29:2A:63:02:ED:7B:32:4D:23:40:63:56
X509v3 Authority Key Identifier:
keyid:8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e2:4b:02:f0:a3:66:39:6d:f2:de:8f:43:43:ea:88:10:49:
1f:64:1c:9b:59:60:74:fe:37:15:04:7a:06:27:11:57:39:37:
c0:8e:65:4a:c4:73:24:ff:ae:8c:76:b9:c0:25:23:5a:b4:0a:
68:e9:c0:7c:f6:dd:e6:0d:c6:23:95:b4:fd:c1:6f:fd:36:aa:
3e:64:ae:7d:51:59:bc:43:5c:c6:80:ec:ac:bf:a3:0e:ef:fe:
3c:8e:25:a6:6d:5c:e5:61:b6:5c:32:00:e8:9d:1c:40:da:eb:
23:f4:e3:4c:0e:e2:9a:b7:94:fe:b1:7a:3b:a1:3e:40:f1:ba:
dc:87:47:80:10:9e:0b:1c:3a:1a:c7:8d:9a:a9:26:02:a3:22:
7f:2a:46:38:5f:4d:0c:82:52:ac:ed:93:78:34:37:d7:2e:60:
63:9a:5e:5c:93:e7:f6:56:be:3d:f1:16:dd:7e:14:12:4c:f3:
2c:84:b3:1b:05:47:46:34:45:ee:89:4d:e4:e4:07:d5:57:5a:
e6:c0:19:a9:f7:7c:4e:38:bc:22:2e:79:27:5e:fe:45:84:e8:
1f:e9:54:2e:e5:89:a1:31:89:44:21:3f:b9:46:48:63:b5:d7:
cc:f6:17:25:14:20:ed:67:7b:50:7a:a4:4b:f7:19:87:af:f9:
3a:7d:20:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:55 2025 by rpki-client