Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
File: IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft (raw, json)
Hash identifier: DFanqKnQB1qGpP4j504UDK7eJu4g1loKp+MxOh8jbC4=
Subject key identifier: E0:23:3A:FC:B9:7E:C5:3B:B8:3C:69:96:85:41:F1:82:D7:46:C1:85
Authority key identifier: 20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
Certificate issuer: /CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Certificate serial: 019A5263472EA050BFD24B85384E55875CCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
Manifest number: 1480
Signing time: Wed 05 Nov 2025 05:00:29 +0000
Manifest this update: Wed 05 Nov 2025 05:00:29 +0000
Manifest next update: Thu 06 Nov 2025 05:00:29 +0000
Files and hashes: 1: IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl (hash: X9UGnCXm/Z2eRU9jYUIpVdZRmeNyFPiI0LkEo5jx2qE=)
2: Tj1VT7s8ilnWaRH5FDEx4ErgOfw.roa (hash: EAnVAxYXeZnLn3O7V7JRGZpaiw9YJLofd+adf3s7hWw=)
3: z8gJT3mWJvoCjNtGavez3w-sptI.roa (hash: rAtA37xRZ8BRiEnR3BviWDsE+vEFga17zSGIolCXdPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:47:2e:a0:50:bf:d2:4b:85:38:4e:55:87:5c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Validity
Not Before: Nov 5 05:00:29 2025 GMT
Not After : Nov 6 05:00:29 2025 GMT
Subject: CN=e0233afcb97ec53bb83c69968541f182d746c185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:37:6b:28:77:ec:1e:6a:7f:7e:4e:ce:67:22:
05:04:01:77:e6:3d:b1:de:84:dc:03:c1:cd:55:af:
37:20:1f:0d:32:73:30:94:e5:ba:05:c7:0b:a2:5c:
34:ae:e6:97:9a:bc:fd:94:c8:d4:24:44:96:de:1c:
29:df:5c:47:2b:c2:21:98:0b:55:9f:b6:a7:d6:7b:
d7:da:e5:a5:ab:2a:28:89:9a:20:f0:bc:6f:2a:fd:
8b:d9:d1:85:20:8b:8f:8f:99:5d:81:64:50:7d:85:
05:09:63:a5:76:f0:62:c4:ef:b9:3b:94:55:3a:1d:
76:3c:76:1a:c5:3b:bd:0c:ce:86:83:0a:ba:7a:2f:
44:62:a1:39:29:51:72:9a:93:77:56:34:49:fc:cf:
63:53:56:e9:25:d5:4c:24:b1:19:15:72:c0:fe:4b:
08:c4:e7:0c:b5:83:f3:54:96:0b:4e:2d:48:1b:52:
1c:9d:7d:41:ec:d2:02:12:b0:d1:7b:68:3f:9d:a9:
cf:2c:de:05:74:dd:79:84:01:af:3c:f0:9d:81:d5:
50:2d:e0:66:b5:d2:bb:ea:fc:b7:cb:7c:55:8a:10:
71:0d:fe:31:ab:bd:f1:ad:68:41:c7:f7:9f:88:de:
a2:fd:eb:2d:39:7f:6f:85:87:b6:2f:97:46:a4:17:
52:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:23:3A:FC:B9:7E:C5:3B:B8:3C:69:96:85:41:F1:82:D7:46:C1:85
X509v3 Authority Key Identifier:
keyid:20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e1:25:ed:00:c0:9b:69:1c:cd:58:c6:09:95:19:fc:3f:89:
88:cc:bf:d7:30:30:7d:bc:75:4f:aa:5e:a1:b7:b0:ee:65:28:
13:eb:27:3c:94:16:5e:eb:48:3f:3d:67:f6:3e:c2:6e:04:46:
eb:e5:80:2d:5f:ff:28:63:ad:60:b0:49:82:25:ac:0d:d4:5c:
04:2e:99:08:4a:0b:2a:85:ec:97:89:a3:a3:52:05:dd:89:46:
09:6b:cd:bd:5e:7c:e5:a6:b6:e9:21:bc:b0:eb:7e:7d:31:78:
87:cc:0b:5e:aa:f8:54:fe:a8:65:e1:7d:70:2b:b3:19:96:fa:
5a:b7:b8:49:ce:d8:76:0e:32:8c:40:97:38:5e:00:40:c3:ce:
79:b4:34:01:ea:ed:df:34:0b:a0:e2:c2:e3:76:4e:c4:d6:0e:
41:66:b3:1c:f7:1a:ce:c5:49:69:d2:6c:a6:0b:fe:15:92:b3:
ce:02:72:71:22:3d:1d:7c:c4:68:f5:3e:29:6c:ee:e9:b3:95:
b9:c8:9b:ae:ac:56:8d:93:25:e8:a6:44:e7:af:d0:40:66:2e:
e8:8b:de:5f:77:06:63:03:d4:f8:a1:c3:f2:6d:be:1b:5e:d4:
d5:9a:b3:81:72:e0:81:af:91:d2:5e:c4:08:74:0b:90:50:d8:
7a:df:2f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:04:29 2025 by rpki-client