Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
File: iXj_XaszxC2mX-Thq_vKTq-90qo.mft (raw, json)
Hash identifier: d/VA1lX/UDP4cqbkJnpgW8t9D3tl3mjp+zSkK7zXa8c=
Subject key identifier: 8A:EB:4D:F3:F1:F3:8A:9A:37:C3:DF:B9:4A:0C:D8:E7:46:E5:D2:7B
Authority key identifier: 89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
Certificate issuer: /CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Certificate serial: 019A4D3D17D7A3120B217757153B2B695801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
Manifest number: 12B5
Signing time: Tue 04 Nov 2025 05:00:40 +0000
Manifest this update: Tue 04 Nov 2025 05:00:40 +0000
Manifest next update: Wed 05 Nov 2025 05:00:40 +0000
Files and hashes: 1: 4nkxi3-lAvnol4KZpv_fbMO-o8Y.roa (hash: 7IJ8WtHdrV8cqGqjR8uILsd0Nv/W6isRILc3Ixuy+NU=)
2: 5-1oK7ZffFqStfo7QWXqKcGuZfk.roa (hash: ae86GvhPxW1Ea0shedYB3VtmcIvsIfxJLLLA1E/5h/A=)
3: iXj_XaszxC2mX-Thq_vKTq-90qo.crl (hash: nTkpsMSM2EqIcECPc6/d0xzH72PD44xUjXtw5NqdmYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:17:d7:a3:12:0b:21:77:57:15:3b:2b:69:58:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Validity
Not Before: Nov 4 05:00:40 2025 GMT
Not After : Nov 5 05:00:40 2025 GMT
Subject: CN=8aeb4df3f1f38a9a37c3dfb94a0cd8e746e5d27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a5:66:69:2d:ab:4c:a3:b1:5e:41:cb:d3:1e:
cd:e7:c2:f3:46:8d:f2:df:7f:fa:9a:3d:fd:d4:4b:
ff:2f:bf:83:2f:fa:a8:5e:62:b4:10:c3:04:45:dc:
06:3c:9d:3c:4e:5a:6c:62:1d:92:fc:0f:47:34:6d:
af:48:0b:70:4f:f9:60:9a:30:1c:0e:09:aa:59:0c:
e3:18:bf:ab:85:c6:71:c6:94:d7:0b:06:91:e4:5f:
97:f0:a0:bd:4d:3d:ae:06:82:9c:92:ee:3c:73:3e:
4f:ac:b0:02:71:9c:24:97:ac:67:7a:34:f7:b8:18:
6a:19:a5:3d:27:99:73:37:bb:0c:81:81:87:df:15:
8e:0b:5d:18:09:5f:34:85:03:f4:9b:42:dd:a2:0a:
02:45:b3:4a:a6:64:b3:10:f2:2e:d1:a3:44:79:cc:
4c:e0:3a:29:fd:f4:54:ec:bb:c2:24:65:96:e5:17:
b5:d3:31:26:dc:e1:21:20:aa:71:be:a2:2c:6e:c8:
a6:35:1f:07:b1:b2:09:81:df:df:70:ea:58:52:2e:
d6:4f:da:2d:41:2a:d8:20:5e:2b:b0:4b:a1:cf:32:
99:f5:56:34:f5:28:0b:e9:30:03:c5:0c:21:e4:e3:
9c:7e:7d:44:79:ae:0c:b4:7c:f2:ff:df:7a:e3:bf:
36:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EB:4D:F3:F1:F3:8A:9A:37:C3:DF:B9:4A:0C:D8:E7:46:E5:D2:7B
X509v3 Authority Key Identifier:
keyid:89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6b:60:aa:bd:f0:69:15:76:f3:29:ad:8c:13:73:86:e5:80:
6e:9e:fd:4e:1f:b8:90:ba:be:85:46:ff:f7:f9:3c:03:22:6a:
ca:5a:02:64:d8:0b:d5:60:db:dc:50:0f:99:00:27:d1:c8:04:
03:36:c0:82:3d:86:af:fe:34:1b:9a:39:f2:22:b3:8c:c4:5e:
26:76:90:aa:ff:4b:f6:8c:4d:d5:c7:7f:81:a2:97:33:18:d0:
02:3f:62:41:78:c9:c4:ae:b3:f4:1d:20:38:63:3a:f2:7e:f4:
e3:1a:d5:56:e4:41:de:46:08:cc:62:2b:c1:25:1b:e9:ff:dd:
71:c4:3d:49:79:db:79:4d:9c:dd:27:58:5f:f9:65:f1:ba:99:
9c:b7:25:6e:65:31:52:14:b3:5a:02:27:1d:70:32:f0:85:11:
10:2e:27:90:33:66:e3:6f:37:e0:67:b8:02:1c:b2:58:6f:8e:
73:0e:7c:cb:a4:6a:49:c2:35:33:7d:ce:57:02:51:56:ec:98:
1b:ce:02:4d:98:0a:4a:e6:a2:5b:80:90:85:50:34:75:23:e2:
7f:e7:34:58:df:9c:b2:af:83:53:06:3e:d3:03:d6:a0:68:a5:
e9:6b:8f:77:c6:97:7d:1f:f7:53:d0:43:b7:f1:5c:ef:c6:35:
32:d7:f1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:41 2025 by rpki-client