Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
File: i992xUueaTXDCptMm6kwmsRw7AI.mft (raw, json)
Hash identifier: uBNyyyO2L0BItWPdIas/xDEFpijUz4TbPY8Ljw0CRkg=
Subject key identifier: 2B:F8:2D:76:47:59:5A:42:67:FB:3C:15:FA:7E:40:CA:64:33:D2:D5
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 019A4D73A992C0650470FC4DBB11CDAF5FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
Manifest number: 1444
Signing time: Tue 04 Nov 2025 06:00:16 +0000
Manifest this update: Tue 04 Nov 2025 06:00:16 +0000
Manifest next update: Wed 05 Nov 2025 06:00:16 +0000
Files and hashes: 1: FZWglvGe_EXLgfopqbYB40x-HmQ.roa (hash: ut7XvnhzAglW/JWhkP7fQs2fwTTxv/3p/HkYM/jFlBY=)
2: TfyeRFd3VCbgM2FKibZFqgYPaDw.roa (hash: /rru2Z/Tk7Ps+KGw08oWifW+xfVigUyNIXVBHMyf3JY=)
3: VmLWF2kLf7eTv8bwMXbk9b_Me2E.roa (hash: 1ItZnIffXoYbRBfY7mSWO6cvW2p6OOPwlCKSIhvogDA=)
4: gvPQ1buZOOV3g-KOPTV-IGXyfZQ.roa (hash: ky4dJJO59R27oJhhtVDGC/53OumEgsx5hY4cQRzqpnY=)
5: i992xUueaTXDCptMm6kwmsRw7AI.crl (hash: h4w9svEvsY2FHmIz8twBXSXX7unmjs8jwIK8OwsloLo=)
6: kJpnFfw8n78tH9D7HP7VhWn_yG8.roa (hash: zD2UT9UbAcs3fzfPASqcGZ6kYoQbvEM/+XTWIgqOIQA=)
7: oDDc4maMGFg6VaECYpUvaQj9RZE.roa (hash: yMwyHi5gWJ1kfutBi0VniZOe7Ci3z9TZluM+BsqvdSY=)
8: y33SBpnij0Kjvfz-rw1jNAzGe9M.roa (hash: +G4n27KUzm1afB/8sada6nItov0UFlI98LmgnjjGQ5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:a9:92:c0:65:04:70:fc:4d:bb:11:cd:af:5f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Nov 4 06:00:16 2025 GMT
Not After : Nov 5 06:00:16 2025 GMT
Subject: CN=2bf82d7647595a4267fb3c15fa7e40ca6433d2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:8f:65:82:97:2e:2f:70:5f:07:7e:ec:ed:
5e:74:e0:8c:ac:27:01:70:63:35:48:80:ba:82:e0:
77:66:15:0c:51:8c:48:38:b5:37:4b:1e:c6:62:a1:
8f:69:f6:a5:3b:35:bc:74:3d:41:6b:d4:17:4b:49:
09:cf:8c:20:ef:78:2a:5e:12:60:07:ac:5f:31:e5:
4c:79:91:23:ed:d1:a0:50:98:e8:64:f1:08:b5:2b:
f3:a3:c0:08:81:8c:5e:8f:8d:c2:1d:cf:07:c3:26:
58:1f:2b:80:e0:1f:05:ca:5e:a6:c1:59:e6:92:d9:
d7:4e:b9:01:7a:77:5d:19:6c:55:ee:e5:92:57:59:
06:ca:45:44:1c:b8:60:29:32:0e:66:2a:07:67:09:
41:19:b6:b8:a7:19:f7:c4:a9:d5:35:7e:c9:85:8c:
46:8d:75:40:8a:01:05:27:6d:bf:16:e2:8f:a5:f2:
f1:83:c2:63:31:98:e8:98:23:c1:5c:fd:e8:db:d5:
c2:fa:c4:0b:e2:a1:9d:45:11:b4:47:27:d8:a4:88:
63:66:3a:c3:e3:58:c0:60:fe:e3:b7:0b:9c:cf:0e:
01:29:4f:c5:7a:e8:db:7d:bc:97:37:40:9a:df:32:
db:96:cd:f1:8b:4d:2d:c8:03:a6:b7:30:ed:08:fc:
ac:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F8:2D:76:47:59:5A:42:67:FB:3C:15:FA:7E:40:CA:64:33:D2:D5
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:88:bd:4a:13:1e:2b:6b:18:8f:04:67:bd:b5:f4:e4:8f:fa:
4d:2c:f3:e9:b8:ae:c6:cb:a8:f4:71:47:a3:ec:18:2d:4d:79:
6b:49:31:93:fc:e0:f5:df:71:8e:32:bd:5b:89:7f:37:60:95:
87:3e:90:27:d8:57:bd:13:ef:99:3c:80:77:fb:e1:5f:eb:e6:
a6:af:b1:d5:e6:3a:d6:ed:95:92:45:4f:7c:97:b5:fd:d6:79:
5f:13:24:2e:46:95:bc:aa:cf:dc:81:2c:25:7b:60:0c:9b:25:
bb:84:46:2f:96:98:22:b9:27:1e:47:52:c1:bd:47:15:14:65:
07:1d:f4:52:7b:1f:d1:eb:d4:93:50:01:b2:22:f1:d3:b5:c3:
cd:32:2d:1a:23:10:0d:31:73:34:53:b9:3b:02:f3:96:cc:97:
4b:4d:f6:3e:f7:74:a6:0f:34:d8:03:03:df:0d:bf:5e:50:ad:
37:de:b4:03:5b:69:02:8a:70:63:64:04:9a:c9:21:8b:08:67:
8a:cd:3a:25:89:d7:7f:9a:14:6e:b3:5c:8a:a7:5d:e4:f9:2e:
f6:3f:2e:5c:d9:74:ec:b2:c2:8a:7f:d2:e3:d2:cd:4c:82:a4:
c3:8b:6e:ae:0a:ef:8b:dd:50:c5:fa:34:a2:7a:14:8a:51:cb:
9e:b9:c9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:49 2025 by rpki-client