Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
File: iiQuCntgz9644OA_-a7DPlq30sg.mft (raw, json)
Hash identifier: vWCaYzl+VQyS5p2a2g9aKzVtNRk93LlsVejVsbf7UOk=
Subject key identifier: E7:1E:BC:3E:E6:17:D7:86:19:E1:BF:5F:D1:B8:A3:D1:E4:63:7D:8E
Authority key identifier: 8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
Certificate issuer: /CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Certificate serial: 019A51BE7B4D72311DFB6D6E59DED0BDD286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
Manifest number: 0B1C
Signing time: Wed 05 Nov 2025 02:00:29 +0000
Manifest this update: Wed 05 Nov 2025 02:00:29 +0000
Manifest next update: Thu 06 Nov 2025 02:00:29 +0000
Files and hashes: 1: iiQuCntgz9644OA_-a7DPlq30sg.crl (hash: /bgSydglZAtftRA8DijRfegr9hyIEdCCW9tSTYghiJw=)
2: siJjmLBZP9diFC7BYX9p7SQAfZw.roa (hash: Gsh0pNObMeNVow5ebFzkqw16IE2NyBLNNUC8IDCqBag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:7b:4d:72:31:1d:fb:6d:6e:59:de:d0:bd:d2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Validity
Not Before: Nov 5 02:00:29 2025 GMT
Not After : Nov 6 02:00:29 2025 GMT
Subject: CN=e71ebc3ee617d78619e1bf5fd1b8a3d1e4637d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:d3:f5:fe:04:39:b4:b0:ea:66:67:39:8d:
ac:ce:5f:ac:f3:4e:03:d3:20:33:17:cc:b2:a3:bc:
b0:42:10:32:b0:e2:c2:e6:40:73:e8:89:1b:d0:dd:
7b:24:36:0f:55:a7:b7:6b:bf:df:c7:cb:18:81:3b:
8a:2f:72:d9:88:a7:d5:39:11:1f:18:14:cf:af:4c:
e2:59:ec:75:5a:f4:13:35:5c:c8:0e:40:d4:d4:5b:
3c:b1:2f:81:9b:5c:ef:83:33:1a:02:6b:28:9c:e3:
2e:ca:76:c3:38:d7:27:38:e2:a7:3c:80:31:63:89:
90:aa:2c:2f:8d:b0:7f:d4:a6:8f:08:b7:83:84:6b:
ba:d0:3f:be:44:81:f5:8e:b6:ae:e0:78:90:98:d4:
b9:8c:6e:4e:f5:27:4f:54:47:0e:b4:b8:4d:65:93:
f8:e3:34:f6:d2:30:dc:f1:c4:73:f6:f2:91:3d:03:
51:42:71:5a:98:ae:97:c1:7d:a4:a8:e1:bb:a0:a2:
97:70:de:65:12:35:e1:7d:70:07:d2:b8:8d:96:bc:
7e:48:2f:2b:3c:53:5b:7b:01:36:67:1d:4d:ae:bf:
f9:74:68:fd:a0:8b:a5:15:4c:f1:2f:db:48:1d:3a:
17:7b:05:d9:e5:77:1f:20:e8:31:01:06:2d:d1:7b:
c9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1E:BC:3E:E6:17:D7:86:19:E1:BF:5F:D1:B8:A3:D1:E4:63:7D:8E
X509v3 Authority Key Identifier:
keyid:8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:28:e5:97:c5:ee:63:b0:fb:71:2f:76:35:5b:d7:e9:65:bf:
26:56:b6:64:ac:1f:bf:d6:35:44:75:bc:57:48:fd:60:a8:ea:
84:8c:cc:d4:8e:6e:59:ad:6b:a7:70:7c:8c:46:75:bc:89:6d:
fc:49:af:27:37:62:69:19:0c:64:9f:7c:3f:ca:79:86:91:9f:
16:50:c9:bf:41:73:b0:b8:c4:22:30:05:0f:41:57:f8:af:a1:
b0:dc:71:28:c0:51:2e:42:49:fa:30:51:44:d4:c2:6d:85:73:
2c:94:3c:fb:f7:32:06:33:3a:19:28:a2:4d:4b:44:eb:db:4b:
de:1f:ae:39:26:20:d7:df:d3:67:35:84:0e:a4:28:9f:92:45:
1d:18:16:c3:73:e1:d1:18:66:da:4f:1a:5c:4d:79:25:8f:0a:
de:4b:32:b4:ea:09:cb:3f:f8:72:9d:bb:ee:6f:59:06:7e:be:
0b:ab:e8:e7:ac:be:1b:06:dd:2c:24:d6:9f:1d:f2:73:39:9f:
70:61:b4:ba:5c:85:96:cc:ba:6c:ff:1c:f7:ee:33:39:eb:9d:
b2:24:b3:99:e0:99:ed:b6:b1:07:df:ac:e2:9d:75:b5:9a:e8:
e2:09:a3:22:b1:ff:89:da:f8:6b:12:4f:70:80:7a:ad:b1:d6:
90:6d:84:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:52:29 2025 by rpki-client