Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
File: IJejEXyhwdYpKuUpEbTwyk-OkBk.mft (raw, json)
Hash identifier: 9cDle/MyMhg7tgg+k9KUr+pu7cbRx7LLJY7+utLFbhI=
Subject key identifier: B1:1D:27:A9:2E:FB:71:74:73:16:62:F9:97:15:B8:DA:C4:20:61:4B
Authority key identifier: 20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
Certificate issuer: /CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Certificate serial: 019A4EF48963877ADAF83B0964CE4A79E271
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 13:00:39 +0000
Manifest this update: Tue 04 Nov 2025 13:00:39 +0000
Manifest next update: Wed 05 Nov 2025 13:00:39 +0000
Files and hashes: 1: IJejEXyhwdYpKuUpEbTwyk-OkBk.crl (hash: udBnwGzkQ0RoXjlCNP1GjlyAsI6qOD3X8CoXIHN/b6g=)
2: X26sGkQxHUd6ANya0fQeGbUaN2o.roa (hash: 72k/JceoXf+vjqY9cY+dmTPspA3n9C9nG7V6AU5QpNs=)
3: ph-_p4gT6KZB2Xgbs2zlGYIYtgU.roa (hash: 2iTmqWC/xN+Zadr2KJDlI5cxPwSqu9GxPi/bRx/hmlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:89:63:87:7a:da:f8:3b:09:64:ce:4a:79:e2:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Validity
Not Before: Nov 4 13:00:39 2025 GMT
Not After : Nov 5 13:00:39 2025 GMT
Subject: CN=b11d27a92efb7174731662f99715b8dac420614b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:37:6d:5b:8d:66:8a:de:fd:51:8f:3c:43:
30:d6:e1:07:3a:e9:97:22:bb:50:9e:d6:10:b2:82:
d5:c0:49:ee:4b:dd:8a:08:c2:a8:92:c4:d5:78:a8:
55:21:19:27:b2:d9:d6:48:19:28:00:d2:ee:81:35:
27:82:15:52:b2:34:ca:39:bd:e8:41:83:4e:e5:1e:
75:3f:a7:b5:98:9d:3b:21:16:85:00:dd:05:8f:5c:
31:19:3f:2a:a1:83:d9:bc:e7:4a:d7:c6:d3:06:51:
45:38:b2:d0:71:a1:35:44:07:b1:7e:14:14:cf:78:
b6:85:e7:24:87:77:c7:dd:2a:8c:64:c7:ca:7d:63:
c3:e4:ee:f7:5d:19:87:82:0c:dc:b5:d9:72:2b:3d:
11:4d:d6:93:29:3e:b3:69:ac:d4:4b:ad:29:69:44:
e4:3f:1c:56:9e:b8:d9:2e:0d:79:2e:64:5f:06:cd:
30:2f:fe:0d:9f:cc:68:87:85:16:2c:c6:f4:0b:94:
15:12:03:a7:b9:16:aa:ae:aa:b5:5f:61:59:8f:14:
35:93:59:cc:96:b5:50:c5:18:61:78:47:9b:8c:06:
1e:b8:87:29:2e:72:00:d1:13:1a:4e:b0:c1:a5:d3:
02:55:f4:a5:ad:11:cc:4d:ed:87:51:18:22:6a:ad:
ae:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1D:27:A9:2E:FB:71:74:73:16:62:F9:97:15:B8:DA:C4:20:61:4B
X509v3 Authority Key Identifier:
keyid:20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e3:9e:4e:e8:82:0e:f1:82:3d:06:7a:78:c8:4d:22:13:76:
e1:c4:3f:d0:13:d5:c3:ac:e3:1e:3d:de:45:f5:03:6e:52:6c:
c7:d3:c7:48:f0:a7:8a:95:98:1c:44:1a:cc:a6:0b:ad:ea:ab:
86:76:de:78:45:89:23:b0:81:8f:2f:92:8d:46:6f:78:d0:b3:
be:c9:f6:e6:28:6c:4c:63:55:05:ba:0d:00:d5:e0:c2:5a:89:
48:c1:39:be:95:2b:d8:f3:f1:29:a8:1b:63:f3:ed:7a:18:28:
46:15:6c:28:70:54:54:fd:ed:b3:fa:00:b3:b8:e2:5b:ed:93:
da:d4:4a:1f:45:d2:88:70:ae:1b:51:07:2a:1b:9f:ba:5b:78:
d3:1d:25:66:2b:25:1e:05:80:2a:8b:31:14:40:da:4b:77:f5:
ce:eb:2e:8e:75:1c:9e:9b:3b:fb:28:cf:a6:db:dd:99:fe:34:
8c:fe:5a:94:65:d2:ba:ad:e0:21:ef:0d:cb:62:96:78:b8:77:
06:c7:f1:43:90:af:9d:a5:69:72:73:cd:81:40:de:6f:7a:35:
db:fd:38:13:bf:c6:7a:e1:e9:77:ce:f6:4b:89:70:72:03:25:
12:d5:8c:a4:1f:03:1f:8c:cf:76:83:21:09:0b:fc:80:d2:ac:
fd:a2:d3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:50 2025 by rpki-client