Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
File: Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft (raw, json)
Hash identifier: FYABSlDI/D7SOY3qAx6InTJxi2vxh28S6UfkU3ME6y4=
Subject key identifier: D9:71:B0:E3:B0:15:85:4F:8D:78:A1:4B:7E:93:8A:61:DD:31:AC:3B
Authority key identifier: 26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A
Certificate issuer: /CN=262f7322fbe9743eb471383a090b35b5296a2a8a
Certificate serial: 019A4E18876893E278E312531AA8CAD5BCBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
Manifest number: 1108
Signing time: Tue 04 Nov 2025 09:00:21 +0000
Manifest this update: Tue 04 Nov 2025 09:00:21 +0000
Manifest next update: Wed 05 Nov 2025 09:00:21 +0000
Files and hashes: 1: BQ2_9-ItF5dIDSCPAfxbIaGC5hA.roa (hash: +G1ycNpVwWYjvSoa5pj4YTiRmj97XRdNfodhiBjoJD8=)
2: Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl (hash: gB6cKkoMqqHls4SKElqCTiw4eWkwnFEsNxjlnZ+gEQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:87:68:93:e2:78:e3:12:53:1a:a8:ca:d5:bc:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262f7322fbe9743eb471383a090b35b5296a2a8a
Validity
Not Before: Nov 4 09:00:21 2025 GMT
Not After : Nov 5 09:00:21 2025 GMT
Subject: CN=d971b0e3b015854f8d78a14b7e938a61dd31ac3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:00:4a:f7:0f:21:2d:c3:d6:74:f3:10:4c:f4:
98:02:a3:b6:9c:64:d9:c6:4d:64:a2:29:6e:31:ac:
37:08:31:19:52:26:49:82:15:be:1e:76:9b:93:4d:
ca:a0:f1:e6:3c:e6:b1:f8:0e:02:be:76:28:22:9b:
6a:bf:f9:af:9a:ea:66:b1:c8:3d:fe:53:a8:e4:fd:
48:7a:e8:9b:5c:83:6a:48:f9:a7:63:5a:4c:54:cb:
45:04:fe:cd:f6:f1:3f:a8:b2:da:54:6a:eb:8c:ab:
03:c6:8a:4e:6c:89:cf:c3:01:97:61:28:df:1f:06:
cf:29:74:90:67:b8:37:79:ff:84:80:2f:e0:26:dd:
92:a5:4f:5d:b9:f2:88:f1:c9:3d:4c:5b:51:4d:01:
28:cb:b2:de:8e:ec:b9:eb:b1:82:74:2c:0d:95:ae:
8d:82:1a:7b:5c:2a:7c:27:40:a2:f0:05:da:0f:b4:
73:00:ef:d4:c2:cd:db:15:a3:cc:de:d5:4f:25:a5:
c0:ac:9d:23:5f:9f:6c:17:ef:90:00:a7:30:f9:df:
0c:4e:23:fa:41:95:93:a6:c6:60:c1:73:86:75:18:
63:47:d1:92:8a:b6:da:95:cc:14:2b:b3:fb:e9:69:
0a:a0:d4:1d:4a:b9:5a:19:0a:ed:c4:bb:9d:87:a5:
b7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:71:B0:E3:B0:15:85:4F:8D:78:A1:4B:7E:93:8A:61:DD:31:AC:3B
X509v3 Authority Key Identifier:
keyid:26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:4f:43:f8:99:90:98:40:1c:52:c2:e3:cb:b0:80:08:7d:83:
99:2d:7e:03:e2:06:c1:14:11:4f:79:28:ec:76:a4:6a:df:68:
75:98:11:8e:62:44:c4:bf:4a:21:39:d5:4e:7d:00:52:7b:c4:
69:be:d8:9c:91:69:bc:1e:94:df:c3:97:e9:72:1d:d5:84:c0:
81:30:e2:23:80:ca:fd:09:f9:bf:99:cb:c3:16:95:1e:53:f1:
90:96:06:c3:c5:30:c7:97:c0:a8:1a:f9:92:c4:0a:2a:5d:2d:
43:03:4f:82:94:51:94:7a:c5:b4:d7:b1:55:0f:70:71:e1:1b:
a7:a5:1a:a2:fe:d6:97:e3:98:4b:be:c1:89:9d:47:7a:d3:b2:
8a:47:1e:57:06:8e:9b:93:72:84:b6:fe:d4:0c:c8:06:bc:88:
23:e6:15:c4:18:be:c6:50:94:fc:e2:2d:47:f1:84:1b:86:f7:
e4:18:d8:4f:ca:2d:67:63:41:a0:5f:a7:a1:bb:40:fe:1c:4f:
62:01:4a:a6:c2:c8:19:a5:06:c3:ce:de:a8:54:81:c5:e3:2b:
6a:79:74:da:fd:65:7d:10:c1:ad:42:eb:1a:24:a9:b1:f4:ee:
c9:39:86:aa:18:43:74:1f:ad:0a:23:83:c9:a7:aa:d9:d3:ea:
17:91:cb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:19 2025 by rpki-client