Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
File: IW66tPRvJU2V9JZbhKjPJBlrnJU.mft (raw, json)
Hash identifier: qh+KEJveqUWg2sa4bFVdfKdU6JsKv5r+9NaDWbqKh24=
Subject key identifier: D7:C7:A5:24:72:E4:D2:A4:51:15:C1:8B:22:AF:D0:38:1D:29:52:F4
Authority key identifier: 21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95
Certificate issuer: /CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
Certificate serial: 019A4E862D87988235C2CEEB4DA867A28798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
Manifest number: 0626
Signing time: Tue 04 Nov 2025 11:00:07 +0000
Manifest this update: Tue 04 Nov 2025 11:00:07 +0000
Manifest next update: Wed 05 Nov 2025 11:00:07 +0000
Files and hashes: 1: IW66tPRvJU2V9JZbhKjPJBlrnJU.crl (hash: rLJQ6ZsGEDT50kopdRiWgEXuCgRI/oavqH8Mj3k/3jw=)
2: jevuz_hOgaa6W3MBuj-Sool4n-A.roa (hash: US9acN1N+sUj9TGOZu9sAfJQOkLuvKlT0/RKaeqAgXI=)
3: luM_lJTE2hly8-J3vWjwvVwVcis.roa (hash: GZ+X8TMn7AtOBR08KIlVoGK4dcs2JQzhXXW1m64U66U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:2d:87:98:82:35:c2:ce:eb:4d:a8:67:a2:87:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
Validity
Not Before: Nov 4 11:00:07 2025 GMT
Not After : Nov 5 11:00:07 2025 GMT
Subject: CN=d7c7a52472e4d2a45115c18b22afd0381d2952f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b1:00:10:08:0b:7b:6b:3e:91:1b:60:c3:32:
68:94:60:6d:65:cc:f2:de:60:90:45:4e:c3:55:c9:
8d:ff:93:e8:b5:b4:86:2c:49:1a:a8:5d:2d:d9:0d:
76:8b:b1:4b:10:0f:7c:30:32:ee:02:20:b5:ed:7c:
2b:f0:4e:63:fe:cc:aa:6c:4a:66:97:03:b1:b0:7f:
13:97:f4:a1:7e:84:24:3f:3a:ef:be:83:74:f4:28:
b2:42:9e:e8:ff:2a:3e:d4:f7:a4:f7:aa:12:2a:6c:
38:c8:e5:32:2b:10:f9:3d:f6:36:4f:b9:e8:bf:5b:
39:98:d8:2c:f2:f7:49:8d:64:69:6b:d0:5a:ca:94:
6b:9d:3a:dc:3d:b5:e4:60:1f:1f:da:e0:fb:93:40:
4a:7c:09:7d:2c:c9:6f:fd:7d:bc:4b:82:59:b0:4a:
f5:4d:5c:24:e8:fe:29:58:46:75:df:6d:1f:cd:d8:
58:dd:47:8f:ee:b4:17:76:4a:28:1f:b9:b2:95:f2:
6f:e7:7a:d1:a5:d4:31:73:45:f4:8e:a8:86:85:20:
24:4c:b5:a6:ed:01:1a:f5:d6:c5:d7:75:1f:31:b6:
89:bd:4d:2b:b3:28:e8:20:39:ec:26:8c:dc:28:89:
8f:96:78:18:f8:a9:23:cb:bc:0e:27:3e:9b:65:17:
d5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C7:A5:24:72:E4:D2:A4:51:15:C1:8B:22:AF:D0:38:1D:29:52:F4
X509v3 Authority Key Identifier:
keyid:21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:88:1b:b0:94:d2:35:2f:06:b2:e1:e0:cb:f4:28:11:1e:aa:
bd:25:4c:23:62:e1:0b:8e:26:ce:de:0d:9c:b0:a1:a4:22:8d:
53:6c:d7:64:b4:14:a0:3a:ae:39:7f:a0:6e:9b:5d:bb:ef:d4:
7b:27:a7:47:69:93:5a:ad:92:08:ea:c2:0a:56:82:ee:c1:f7:
6b:72:4e:7d:0d:4a:b3:73:e7:45:f1:0d:de:8b:69:62:3b:7a:
53:03:7e:df:57:20:50:92:13:6b:52:10:0e:45:1b:86:d4:bf:
e9:23:64:07:0c:ab:09:ea:7b:66:a7:02:23:61:78:47:b7:ee:
0f:2e:85:6e:7c:ad:8b:df:4f:0f:92:d7:bd:f0:bb:3f:e7:94:
bc:b2:39:89:5e:aa:ab:80:76:87:68:9d:5a:9f:7a:4d:fe:2c:
fc:fa:e5:3a:61:b1:64:f0:ee:1b:f9:c3:4c:33:49:a9:5f:b6:
b8:9d:d6:76:03:d5:fa:d2:1c:0a:8f:9a:d6:26:be:9b:38:b0:
64:b9:e9:bd:a7:b9:af:d0:ef:57:e6:37:35:a0:4e:e0:08:57:
f1:c9:9f:9c:1f:76:c6:8a:94:10:c8:5b:61:15:f6:99:43:cd:
e9:f4:38:4c:eb:5c:ca:ec:29:3f:c1:31:75:a4:ff:7a:c3:9f:
a0:8c:ae:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:52 2025 by rpki-client