Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
File: ia6mmISBzqS5W2UTHMSYhPPtDj8.mft (raw, json)
Hash identifier: BdqqNbzU7QUZlMKI6Nw9uY9GFfaOm75ADZMM/lXlPg0=
Subject key identifier: 79:78:BF:88:FD:FD:B0:10:D1:01:89:F4:13:E8:DE:B7:00:6A:5C:08
Authority key identifier: 89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F
Certificate issuer: /CN=89aea6988481cea4b95b65131cc49884f3ed0e3f
Certificate serial: 019A4F2B5C3B2FB263D0D56F7DA136F9FF3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 14:00:32 +0000
Manifest this update: Tue 04 Nov 2025 14:00:32 +0000
Manifest next update: Wed 05 Nov 2025 14:00:32 +0000
Files and hashes: 1: Fl6pOlPLU-YJzCc-HkB3wwedcd0.roa (hash: jlDQ+VkQoTEiq8ZQ7EeJUmtKUn70x3pUuA4q7simdPM=)
2: ia6mmISBzqS5W2UTHMSYhPPtDj8.crl (hash: b1Be7x1GGJowtJ4PaCm0zEfN63WA6iYBL+WSCCWa9Lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:5c:3b:2f:b2:63:d0:d5:6f:7d:a1:36:f9:ff:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aea6988481cea4b95b65131cc49884f3ed0e3f
Validity
Not Before: Nov 4 14:00:32 2025 GMT
Not After : Nov 5 14:00:32 2025 GMT
Subject: CN=7978bf88fdfdb010d10189f413e8deb7006a5c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:8c:69:3d:e6:c0:a6:fb:cd:39:79:b8:47:
1a:d9:4b:6b:ba:46:9f:4c:84:68:55:cf:bd:f4:0a:
e4:e1:49:ec:48:d5:87:8d:6f:00:ec:8f:4e:f0:06:
df:68:25:91:79:9b:77:4c:68:72:82:d7:0c:8e:f7:
19:cd:49:dc:c0:70:9f:b1:68:6d:46:69:2c:91:bb:
89:b6:54:7d:02:be:10:5c:75:d0:3e:8b:e0:8d:32:
16:e6:c2:35:4b:46:a8:6f:7b:c6:2c:c2:d7:c8:72:
4d:57:38:85:9b:84:3f:f3:85:b2:f7:fb:23:53:17:
2e:53:91:b6:fe:bc:73:d0:d4:89:53:6f:02:93:2e:
f4:96:a3:c4:6d:21:5c:e2:66:d4:44:38:cc:48:93:
d8:b1:b9:63:6f:c2:06:b6:4d:d1:aa:80:68:54:66:
73:19:94:b2:ad:39:26:4c:d6:16:2d:0b:c2:44:57:
1b:9c:1c:f2:6a:d2:f6:45:fb:88:74:26:c7:03:45:
36:1a:4a:70:39:e5:23:ab:ac:bc:81:29:e8:d7:fd:
c3:db:e6:64:8f:57:c2:81:05:1a:95:13:eb:c1:a4:
f7:68:b3:36:5c:3d:d6:7a:e0:9c:61:17:43:84:e2:
33:92:76:4d:d0:23:86:6c:3a:4b:25:0b:8c:b9:88:
bc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:78:BF:88:FD:FD:B0:10:D1:01:89:F4:13:E8:DE:B7:00:6A:5C:08
X509v3 Authority Key Identifier:
keyid:89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:83:3b:41:83:53:cc:38:e6:52:b7:d9:93:96:14:16:43:b8:
b2:71:00:98:2c:4c:56:cd:1c:f9:2f:92:b9:af:4b:72:bf:d9:
ea:bd:03:72:3d:98:83:a4:b3:06:e6:90:44:a0:f4:1d:4d:22:
7d:dc:7e:40:f1:d6:17:72:0f:40:ce:a8:fc:7b:9d:4f:58:39:
1a:cf:79:63:b9:2b:14:e4:32:da:19:98:90:f0:ee:44:6b:e4:
4e:2c:e2:56:50:f0:37:26:21:78:be:2f:a6:a9:92:a6:b7:1c:
c4:5f:d6:e3:1d:d5:97:5a:e6:ed:94:d0:85:81:e5:7b:3f:4d:
18:15:22:75:a8:7b:c2:d0:d7:a4:03:4c:a6:8a:b9:2e:30:17:
ef:68:06:1a:95:54:cb:6e:3e:f4:32:11:ac:ef:c3:c6:3a:02:
02:29:87:7e:7b:07:53:6d:62:01:5a:b7:07:7d:37:5b:a9:36:
c4:1b:df:6a:01:c1:f0:e2:8a:c9:f6:71:5d:72:3e:44:87:1f:
3f:64:11:42:fc:89:22:89:63:fc:b9:d7:af:28:c0:a1:d1:60:
ce:98:bd:81:4c:45:c8:e1:8a:b6:43:d5:4f:43:aa:a5:d6:ab:
b0:15:7c:c3:8b:5e:8d:69:ab:53:26:ae:56:68:4e:16:94:af:
3f:3f:41:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:56 2025 by rpki-client