Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
File: ixtym3XF-LLp0ViqKWOW1oC-cK0.mft (raw, json)
Hash identifier: v2jMEsIvbgtQHX9dOaU83IzalQlE98mRdxKcKHUrXdg=
Subject key identifier: 8D:7F:D4:D5:41:D5:02:D0:59:33:48:1C:44:BC:F9:18:E0:EA:1B:5F
Authority key identifier: 8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
Certificate issuer: /CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Certificate serial: 019A4DE1DF1C8E51C179189BC8D2769977C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
Manifest number: 0E34
Signing time: Tue 04 Nov 2025 08:00:39 +0000
Manifest this update: Tue 04 Nov 2025 08:00:39 +0000
Manifest next update: Wed 05 Nov 2025 08:00:39 +0000
Files and hashes: 1: VD1pOY6vP5TwIHzsVFu_IinabUU.roa (hash: cVzGsu9mooBFFczgcbG8J8W2oDgnSi/7QeWcMNjjuWQ=)
2: ixtym3XF-LLp0ViqKWOW1oC-cK0.crl (hash: H/lKyxZQcGqpkSoanHhg1r9tWUjmKUfdMnQg95qOk3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:df:1c:8e:51:c1:79:18:9b:c8:d2:76:99:77:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Validity
Not Before: Nov 4 08:00:39 2025 GMT
Not After : Nov 5 08:00:39 2025 GMT
Subject: CN=8d7fd4d541d502d05933481c44bcf918e0ea1b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d8:b6:c5:db:43:32:04:2f:99:6b:33:8b:c9:
31:be:83:49:b5:1e:87:ef:10:12:de:61:d6:07:ef:
61:60:48:b2:c6:d7:f4:0c:91:fd:8c:a1:f2:cc:81:
93:42:7d:14:17:eb:89:25:5e:ce:ae:11:9d:38:ca:
a2:7e:64:8d:d5:01:e6:12:4c:19:17:fc:c3:9f:39:
26:2d:dc:3f:51:fa:f5:e8:ed:f6:6d:52:38:80:fa:
21:ce:ea:b5:c2:6a:07:e4:16:78:18:f8:de:76:30:
98:f6:5e:a9:6f:54:2a:8b:11:18:29:f3:fc:dd:40:
8b:9b:30:60:a4:8a:57:a4:7e:eb:62:25:94:93:a9:
07:31:f6:98:f8:e6:93:9d:2a:a8:3b:b4:24:a2:eb:
8c:41:86:7e:3d:9a:7a:7e:3a:77:f8:4f:4c:be:08:
72:52:8e:94:0f:73:2e:3b:90:c6:87:75:9d:26:2d:
f2:e0:e8:17:eb:0e:3b:0c:2f:2a:2c:63:2d:05:13:
98:a5:12:06:40:9f:1f:86:b4:5b:ef:7a:b4:b6:c7:
c1:fd:a3:f1:e7:87:fe:82:b7:92:3b:36:8d:40:56:
b1:f2:91:4b:61:e1:67:ae:9f:6d:69:37:b2:95:96:
24:fc:ea:54:3f:49:ed:f1:53:da:98:63:78:4e:11:
fe:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7F:D4:D5:41:D5:02:D0:59:33:48:1C:44:BC:F9:18:E0:EA:1B:5F
X509v3 Authority Key Identifier:
keyid:8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c3:89:a4:48:f7:64:0a:cc:e4:a6:22:01:e4:30:51:17:2e:
69:a5:0a:e0:1a:1d:f3:76:60:27:e1:2f:4d:89:c9:4d:96:6b:
d5:0e:1b:c6:29:4e:04:d0:a9:8b:db:1a:aa:d3:22:0e:30:21:
ad:ea:76:10:eb:d0:20:b3:3b:a7:f6:64:26:50:3c:b2:6b:26:
0e:79:63:e0:7d:1a:eb:73:9e:8f:93:e4:de:9d:b2:6f:07:33:
40:b0:cc:a2:5a:cf:c5:bc:db:7c:24:c3:81:e8:0d:5e:d5:b5:
ba:f0:76:5d:42:d0:e7:5e:67:9b:5a:6a:87:c7:c1:6a:16:5f:
5e:ad:b6:1b:f1:2b:22:bf:27:f1:30:8b:5b:85:4b:bf:53:17:
c9:8a:99:98:55:26:78:6e:3e:56:41:ce:cc:b4:1e:4f:c2:2e:
f6:a6:af:c8:f5:e2:af:70:67:a7:84:e6:2f:2c:f9:30:40:37:
77:45:f7:65:fa:fa:a8:4a:d1:d3:7e:a2:29:ea:d3:ff:aa:82:
a9:d8:6e:ec:e5:f3:0f:db:a5:47:19:df:09:c8:1c:3b:b6:56:
07:d6:05:16:b9:00:e3:89:22:c2:25:12:24:f7:4d:bd:2d:d8:
ed:04:5c:1c:bb:54:04:12:50:4d:39:0c:eb:1e:aa:fb:5a:e4:
52:d0:41:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:38 2025 by rpki-client