Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
File: i0LHUqmwmDEos9KV5F6hazPuffk.mft (raw, json)
Hash identifier: T3EfiraEBVn4/SZcLUzY7bz8LC01+lO3EeQPcppIuYA=
Subject key identifier: D1:F6:DA:6C:09:48:4F:BA:60:40:F6:A7:F7:1D:7E:BB:44:B3:C5:3D
Authority key identifier: 8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9
Certificate issuer: /CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9
Certificate serial: 019A4F2B570549CF3D28BED821F6D1BD2DDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 14:00:31 +0000
Manifest this update: Tue 04 Nov 2025 14:00:31 +0000
Manifest next update: Wed 05 Nov 2025 14:00:31 +0000
Files and hashes: 1: deCTZwf8Lo4tPBt2V0GwD8QTdjQ.roa (hash: FyKYzrCJB3LXbVhWQRcS/ZI/wI5zOqLIDpvmKLMGaw0=)
2: i0LHUqmwmDEos9KV5F6hazPuffk.crl (hash: wPu9Zo8ag5gEfDdPVMmKY99vjVcit3mlO8/7KykEj38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:57:05:49:cf:3d:28:be:d8:21:f6:d1:bd:2d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9
Validity
Not Before: Nov 4 14:00:31 2025 GMT
Not After : Nov 5 14:00:31 2025 GMT
Subject: CN=d1f6da6c09484fba6040f6a7f71d7ebb44b3c53d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:10:ae:b2:b2:d8:e4:4e:bc:c7:ae:f9:7e:
33:96:e7:89:30:79:c4:ad:fa:2e:18:59:9f:70:db:
1e:b5:d2:83:3f:56:b3:f2:20:d6:d4:f8:87:ee:95:
e4:e3:5d:84:a6:12:dd:3e:1e:6e:d4:2b:11:a2:f2:
71:e4:27:2d:c1:a9:1a:ce:25:df:34:67:d2:aa:fc:
17:8a:52:dc:d3:7e:57:eb:65:ce:1a:9f:14:63:cb:
10:4e:77:7e:90:00:51:2a:2d:6f:6f:ee:cf:e5:ec:
ce:a0:1e:ec:20:cc:e7:d0:d0:c8:e7:50:d1:c1:29:
c7:53:82:39:d2:f7:7e:8a:18:c5:a2:58:5a:07:22:
2e:bb:13:ed:e9:dd:cd:50:8c:d0:b3:6b:a0:d7:c3:
f1:b2:8d:d2:2e:41:ed:cc:fa:fe:f6:ef:34:30:2d:
51:52:2f:12:f3:28:ed:10:db:c0:42:59:82:f2:b5:
0c:0a:c5:ff:43:66:93:de:a5:4f:cb:46:e3:08:2a:
87:91:27:1f:3b:0b:98:1f:09:26:db:93:fb:b3:ce:
cb:31:34:62:2c:04:0a:7a:aa:0f:6c:68:e2:03:bc:
28:29:06:f2:a0:13:d8:0e:30:23:d8:31:52:6f:c8:
ed:43:fe:77:98:be:fe:cb:7b:21:03:b4:9b:52:60:
72:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F6:DA:6C:09:48:4F:BA:60:40:F6:A7:F7:1D:7E:BB:44:B3:C5:3D
X509v3 Authority Key Identifier:
keyid:8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:fc:fd:1d:84:c3:01:1f:32:96:c6:d3:21:90:5f:20:9c:9f:
5a:69:b3:6d:10:2d:d1:e5:9c:52:eb:eb:ce:71:55:12:94:85:
b7:a6:10:75:c9:9a:81:69:37:f3:f4:5c:f3:04:5c:32:36:18:
f9:3b:04:d9:9a:57:69:a3:a0:c8:39:01:7d:97:a5:b0:e2:4a:
14:ac:f0:08:6d:f0:ef:97:48:ca:dd:ec:ec:0d:75:0d:33:60:
e0:c7:c2:64:ff:fc:da:5e:44:60:5c:08:66:48:c1:ee:51:6a:
12:71:a7:08:5c:58:8b:4c:dc:4d:0d:0e:5e:1e:cc:fd:b4:ce:
f8:a4:de:c3:99:ab:dd:b8:af:e7:f4:06:a2:00:45:86:60:0c:
2b:76:27:b5:f8:a8:94:b8:6a:f6:85:02:c6:6b:cd:a5:ed:ce:
5f:06:07:f0:0a:6f:ea:28:37:eb:02:05:6d:d8:c1:f3:80:23:
ea:8e:90:9f:90:32:06:e6:c8:48:91:1b:79:34:20:ac:d6:a5:
15:57:a8:65:b3:36:88:ec:dc:fc:7d:85:1c:16:b6:69:c8:13:
91:92:8b:8c:4d:6a:42:a1:6b:fe:b2:4d:f9:7d:19:a2:89:21:
8f:a9:47:41:b7:f8:a2:6b:95:36:f4:c1:c2:58:94:10:c7:1e:
e7:06:30:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:51 2025 by rpki-client