Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
File: iP4ZBc16825jraY2bBR7Ydhcnys.mft (raw, json)
Hash identifier: ySGpdtkSJ717ZZEIj/Kk1K8VJqhniYkxuUVgvaXeAOs=
Subject key identifier: 16:E2:91:F9:CD:93:40:AF:11:9E:FD:DB:F4:9A:9F:FF:39:FD:E4:6C
Authority key identifier: 88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
Certificate issuer: /CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Certificate serial: 019A4D3D4C00D764DB8FCA2CD0774E11491D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
Manifest number: 084E
Signing time: Tue 04 Nov 2025 05:00:53 +0000
Manifest this update: Tue 04 Nov 2025 05:00:53 +0000
Manifest next update: Wed 05 Nov 2025 05:00:53 +0000
Files and hashes: 1: DSjiByReVAFtGenTha4D-8dSQJA.roa (hash: LTaqsJLmNorNuR9w6MCAPY47C39e6eSxiN8KzBSficg=)
2: N3Ms1tO5Rc3q58ZodMbwcW3QRxA.roa (hash: QeEjLFu1bfyi8L5wOE2F/BxSn3Wihpq/1jEicr1OiIU=)
3: iP4ZBc16825jraY2bBR7Ydhcnys.crl (hash: oGW2dWlgTaqwETIPzYivO4KOqbrdxWI3xMzNRQNUAqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:4c:00:d7:64:db:8f:ca:2c:d0:77:4e:11:49:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Validity
Not Before: Nov 4 05:00:53 2025 GMT
Not After : Nov 5 05:00:53 2025 GMT
Subject: CN=16e291f9cd9340af119efddbf49a9fff39fde46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a0:c9:b0:74:ff:17:d3:25:20:4c:1a:c0:96:
99:62:c5:e8:67:ac:4a:b9:28:4e:70:f4:04:1e:21:
36:da:12:47:19:8e:c7:d4:75:11:96:e9:b7:99:a1:
9d:bc:4b:38:1e:71:75:0b:c6:39:ac:6e:77:3a:bf:
3a:2a:28:ab:92:f8:11:5a:6a:ea:13:ee:11:80:e7:
9c:4e:aa:bd:6a:40:32:0b:03:ed:7a:a8:1e:2b:01:
2b:bd:1a:7f:07:06:e7:c6:4c:2a:ef:f5:d8:38:d2:
61:11:48:ba:55:23:b8:34:ce:2f:e3:3a:3e:5a:62:
4a:ed:23:cb:94:dc:28:9c:62:b9:6e:97:cb:ba:db:
1c:12:83:53:22:c5:96:5e:24:67:ef:e6:1f:b4:10:
cc:52:d0:eb:7d:bb:c6:31:32:95:da:d2:00:f6:5a:
73:70:18:bd:96:a2:10:b3:19:ea:ec:98:4a:a9:13:
58:79:34:2d:ce:81:3c:39:cd:d9:d7:84:29:5d:58:
f3:a9:ba:de:2f:01:17:b7:c7:86:fe:e9:da:7f:47:
24:9e:11:96:b5:69:3e:64:4e:de:b7:c8:47:6f:b0:
52:1e:cf:ca:11:7e:71:ea:97:5e:38:b6:2c:57:12:
52:c2:42:b8:bc:93:84:bb:d5:c5:c9:4a:bf:9f:87:
26:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E2:91:F9:CD:93:40:AF:11:9E:FD:DB:F4:9A:9F:FF:39:FD:E4:6C
X509v3 Authority Key Identifier:
keyid:88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:cc:14:42:fc:75:8b:a5:d6:ba:7b:0b:48:7d:dd:ac:cd:dc:
c2:51:2d:f3:8d:e5:a0:22:7a:28:1d:04:4e:f7:99:71:f1:49:
13:50:d7:5e:10:41:b0:8d:0d:2e:62:d7:52:e7:5a:dc:19:69:
e5:9f:ab:41:18:3b:51:32:54:0f:ab:a7:56:1e:aa:b0:2a:c3:
ab:15:aa:bf:a7:3b:25:b7:26:72:57:d0:96:0c:64:cd:ed:82:
83:62:6c:c8:98:01:68:70:fe:e9:49:7d:c6:cb:2c:9e:0d:61:
2f:9a:fc:ef:d9:72:ee:b3:cc:27:35:9c:c2:a2:27:a5:be:1e:
aa:4e:4b:80:26:e5:1e:73:86:86:17:66:fe:1f:6d:62:92:e5:
20:89:bd:a5:59:71:6e:30:ef:f5:6e:fe:9a:97:67:8c:3b:1e:
49:bd:b4:ad:86:52:6b:e5:f8:6e:92:5f:ef:4c:c1:5c:a4:26:
c3:60:fd:a8:26:7b:cb:c2:78:d3:b7:ce:71:95:71:6c:58:b3:
02:91:3c:d9:30:a3:43:83:6d:a1:1a:1f:69:c2:92:5f:39:56:
8b:22:e5:24:3f:83:57:b0:3f:13:5b:28:91:8b:a9:f2:a6:6d:
93:bd:33:60:2d:33:5c:6c:c1:67:95:32:46:f7:11:ff:85:76:
ea:af:84:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:12 2025 by rpki-client