Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
File: ibMy1XzhT6sevXRoF91wEGLHSog.mft (raw, json)
Hash identifier: 4zzZkMAgP1wqEQQqEh0BcG4/x4q7KmZ2yoCjVWKMGZE=
Subject key identifier: 6A:D6:FD:92:1C:2A:DA:E7:2B:F3:35:08:22:EC:D1:31:E2:DB:6E:E7
Authority key identifier: 89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
Certificate issuer: /CN=89b332d57ce14fab1ebd746817dd701062c74a88
Certificate serial: 019A4DAAF3A4AF73916066761B3A001B361B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
Manifest number: 1716
Signing time: Tue 04 Nov 2025 07:00:40 +0000
Manifest this update: Tue 04 Nov 2025 07:00:40 +0000
Manifest next update: Wed 05 Nov 2025 07:00:40 +0000
Files and hashes: 1: YfIFhU0ONooUeM5LYDIwujefT70.roa (hash: FzOwlF2eZufoM+/Vg+xA3fNm2T39ptzXccEUItomPVo=)
2: gPT7sW4G2ZN9UNmphmg_hk0jbRw.roa (hash: PHxlHQzqJqhF3hMVVWjePq2Bjc4OfaYNDTan7+Vo8UQ=)
3: ibMy1XzhT6sevXRoF91wEGLHSog.crl (hash: UOmYA1TRQg+d814fbtY6h38NBLjvCQDP+aoso+iRIXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:f3:a4:af:73:91:60:66:76:1b:3a:00:1b:36:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b332d57ce14fab1ebd746817dd701062c74a88
Validity
Not Before: Nov 4 07:00:40 2025 GMT
Not After : Nov 5 07:00:40 2025 GMT
Subject: CN=6ad6fd921c2adae72bf3350822ecd131e2db6ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:68:e9:17:25:81:cc:ee:57:e1:75:ac:fa:c0:
c6:bb:b1:01:0b:56:a7:2e:79:c1:50:b7:51:87:b7:
75:09:42:a9:c9:bc:5b:5c:44:e2:ca:42:e9:86:83:
1f:c1:5e:95:98:f1:95:10:6d:0e:17:2b:39:35:3a:
6f:4d:91:2a:07:57:1c:5d:2e:5c:91:e3:34:6e:90:
01:e8:f1:2a:5e:1e:bc:82:4a:1a:f1:3f:30:d2:57:
61:f0:3d:a2:a4:70:70:60:9e:6b:29:d4:58:6d:32:
98:dc:dd:14:f0:b8:99:79:33:ce:df:97:0b:af:60:
04:f4:53:7d:8c:f1:12:f5:80:d2:07:cc:ec:a7:a8:
37:ce:07:8a:1f:af:57:57:4c:0c:b5:e1:0e:ae:16:
ed:3e:96:44:40:3a:f6:b0:dd:b3:ab:7f:9c:fd:e1:
18:0e:a8:de:e5:41:15:03:c1:24:57:e3:38:ca:0e:
0e:99:9a:a6:5e:12:80:d4:c4:62:7f:52:d7:b0:ca:
12:89:76:53:a1:f1:cf:77:55:cd:1f:d4:83:22:b0:
dd:de:09:e9:5d:92:a5:4f:3a:1f:ae:33:d0:71:3b:
2d:a9:34:a7:31:c9:fe:0b:55:c4:8b:4e:14:92:04:
0c:e7:27:76:ca:11:97:95:02:43:39:47:49:ca:3b:
fe:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D6:FD:92:1C:2A:DA:E7:2B:F3:35:08:22:EC:D1:31:E2:DB:6E:E7
X509v3 Authority Key Identifier:
keyid:89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:8c:75:c0:6c:44:ab:e8:e2:76:e2:f4:63:dd:9d:bd:a1:f1:
63:07:36:3b:47:cd:5c:21:ea:c5:8f:07:01:7b:9b:04:e7:3a:
c6:4e:fe:8d:5c:a0:9b:c8:e0:f2:8d:66:f3:65:ad:ed:25:11:
6a:67:53:64:d6:90:b7:4e:45:43:cb:7a:4e:b6:3b:ed:9f:4c:
95:f4:72:c9:fd:eb:94:f0:27:ba:19:b6:35:40:a3:7a:1b:d2:
0d:32:ee:6f:c2:63:aa:92:0d:38:18:cd:a6:b7:0b:2d:a3:73:
a0:dc:24:8e:44:59:ed:0f:b7:8d:31:5b:57:b4:23:24:4f:47:
db:02:31:94:2a:c2:d1:a3:54:89:16:0f:65:53:ba:3e:a2:58:
72:23:8f:f0:a5:0e:f1:38:a7:78:6d:e4:5b:6b:60:cd:f0:25:
3a:1c:7f:ca:e3:24:ea:27:2d:cd:bc:77:b3:00:07:b9:09:15:
c8:ba:f7:49:45:b1:db:aa:59:e7:63:71:80:a5:4c:dc:5a:6b:
89:b9:2e:1c:17:2c:60:91:f3:01:d9:2e:b5:c0:49:04:c6:01:
99:e1:3b:65:3b:09:6e:01:ae:7f:58:e7:f6:b1:1c:73:2d:bc:
63:bd:b9:d2:ff:00:89:15:d8:ea:7a:61:e1:64:c1:07:ae:70:
5d:1b:c7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:38 2025 by rpki-client