Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
File: iDa9j605PlExoCNykxWzVgFOZjc.mft (raw, json)
Hash identifier: FmqJvXYF3/3O0my6O6grRuPR+IJ6X2IDnjkzkeglfuU=
Subject key identifier: A7:B7:B2:F0:F4:61:45:3D:49:E2:69:67:98:6C:30:EE:F8:39:B8:74
Authority key identifier: 88:36:BD:8F:AD:39:3E:51:31:A0:23:72:93:15:B3:56:01:4E:66:37
Certificate issuer: /CN=8836bd8fad393e5131a023729315b356014e6637
Certificate serial: 019A5006EE809E97DF8E2285F8CE625815E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 18:00:22 +0000
Manifest this update: Tue 04 Nov 2025 18:00:22 +0000
Manifest next update: Wed 05 Nov 2025 18:00:22 +0000
Files and hashes: 1: UKX34TFCd0figIbF32wm6M0tdxE.roa (hash: BFLvjvBRECITaOdgL/U7OU6npGQVInzdalw4vhrK37A=)
2: iDa9j605PlExoCNykxWzVgFOZjc.crl (hash: r3Y0JvYD2ifWhln/PDJE4Ip1AsEGXhfQNej6hkmx14w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:ee:80:9e:97:df:8e:22:85:f8:ce:62:58:15:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8836bd8fad393e5131a023729315b356014e6637
Validity
Not Before: Nov 4 18:00:22 2025 GMT
Not After : Nov 5 18:00:22 2025 GMT
Subject: CN=a7b7b2f0f461453d49e26967986c30eef839b874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fc:22:fd:3e:eb:05:be:d5:7e:01:eb:ae:be:
0f:bc:08:8e:9d:1c:fb:b7:30:ca:32:31:ea:51:80:
43:5b:05:a4:0a:81:7a:de:a6:8b:15:31:4b:48:ca:
3e:93:c4:78:23:40:27:44:22:ba:3a:28:5b:60:77:
27:d6:13:8e:1f:fe:d8:53:8b:cb:db:f8:23:65:40:
6d:ee:cd:bb:57:67:d2:80:e2:9d:d9:dc:11:c3:d1:
8f:81:2c:03:56:ea:4c:91:93:ba:b9:73:b9:62:f8:
e1:1b:82:54:db:9a:81:16:59:2f:7f:88:55:48:8c:
05:99:cc:4d:bf:f3:c5:6e:08:02:79:97:3a:7b:23:
d0:6b:62:22:be:93:8f:c0:63:56:2e:2a:ab:42:ec:
f4:db:80:49:f8:13:0c:71:7d:ec:02:46:49:b4:34:
76:d6:91:f5:cf:6f:6c:31:be:6b:80:00:34:51:87:
f5:92:b4:a2:44:37:02:4f:96:a8:5b:6c:db:91:ca:
35:8f:d5:af:2a:27:e6:36:00:75:a9:d6:79:61:63:
d1:39:08:04:03:c7:d2:4d:61:b6:77:70:bf:9e:89:
54:4c:ff:e8:71:d6:2b:04:fc:5f:ce:88:2a:4e:44:
82:b2:18:72:60:92:d9:fe:59:87:49:e5:35:9b:b7:
dc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B7:B2:F0:F4:61:45:3D:49:E2:69:67:98:6C:30:EE:F8:39:B8:74
X509v3 Authority Key Identifier:
keyid:88:36:BD:8F:AD:39:3E:51:31:A0:23:72:93:15:B3:56:01:4E:66:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:af:f9:06:5c:e8:54:dd:73:cf:31:e5:47:39:a5:52:ca:f6:
90:44:71:c4:cf:4e:99:f3:1e:6d:a9:71:16:82:8f:b5:2c:0c:
35:36:81:4c:43:a9:a8:79:33:3d:4d:54:2b:cb:22:d6:8b:03:
ab:bd:e9:bd:f7:ec:02:b9:d2:c8:fd:0d:b5:cf:dd:58:61:0a:
9d:4e:07:c1:bc:a4:57:46:ad:50:c9:d3:e1:87:0c:fc:fa:14:
f2:c1:03:15:85:9e:38:f0:2e:e1:37:41:4d:d5:b5:ca:73:ee:
93:9d:a2:2a:b7:1a:81:91:f0:40:6d:ae:ce:69:4e:08:47:88:
a7:c8:0f:2b:03:c2:6e:c1:3b:be:46:9a:2d:8b:44:f2:96:1a:
16:f5:28:7a:3d:c0:7f:d2:50:a5:9a:e7:0f:65:59:c4:24:57:
cd:1d:45:9f:77:7e:b9:c4:52:f8:04:f0:d1:39:d1:b5:5f:29:
74:10:bb:9a:5e:8b:51:4c:cf:61:be:55:d8:8a:cd:98:e4:88:
cc:81:43:73:69:72:76:54:52:25:ec:7b:fd:de:38:b5:26:bb:
da:a2:1a:61:91:f5:7a:84:22:26:af:e7:75:ac:13:68:31:bb:
d7:ed:84:ed:dc:74:07:28:c1:4f:21:72:bd:ab:b0:f1:cb:07:
53:1b:d4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:48:40 2025 by rpki-client