Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
File: ieXrHhIJiXh0XVQNypbP8N5HBNo.mft (raw, json)
Hash identifier: 90InKeOZD5WSWQPOpFvWYO6UGhGSVfmjgwofluTS5N4=
Subject key identifier: C8:D4:38:04:19:62:95:10:04:EA:19:15:2A:98:9F:84:13:7F:A3:2E
Authority key identifier: 89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
Certificate issuer: /CN=89e5eb1e12098978745d540dca96cff0de4704da
Certificate serial: 019A22C07308F85296251D5C6444D870DB1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
Manifest number: 0B6B
Signing time: Sun 26 Oct 2025 23:00:28 +0000
Manifest this update: Sun 26 Oct 2025 23:00:28 +0000
Manifest next update: Mon 27 Oct 2025 23:00:28 +0000
Files and hashes: 1: ieXrHhIJiXh0XVQNypbP8N5HBNo.crl (hash: UPO/Hh6a6G4ocV1VtZQ3b/o10JIEzUzeKGM2gGyMmKE=)
2: l-HFEGYP57VmF8aDDh7--ZbJBDw.roa (hash: z6foBKVqU7T5Yu/Dwks8ZalWU/MYlRsXoQCU7GPCUOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:73:08:f8:52:96:25:1d:5c:64:44:d8:70:db:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e5eb1e12098978745d540dca96cff0de4704da
Validity
Not Before: Oct 26 23:00:28 2025 GMT
Not After : Oct 27 23:00:28 2025 GMT
Subject: CN=c8d438041962951004ea19152a989f84137fa32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e3:5f:c0:af:b3:6f:35:79:b5:bd:4b:77:85:
63:0b:f4:c4:78:a5:8f:25:bb:c6:d1:64:d6:de:bf:
5c:52:6b:98:1c:c4:d4:6f:bc:a8:95:39:1f:ab:f9:
d0:57:40:f4:46:47:02:30:b7:50:e6:67:a1:da:ee:
89:f2:f2:d4:30:30:d4:0c:dd:da:b1:15:04:43:a3:
58:6d:c6:55:5f:41:35:4e:7e:5b:c4:5d:c5:f8:90:
42:3c:19:91:a8:97:33:b9:0a:e1:b1:fa:a2:f3:f7:
0d:ce:8c:0d:43:58:a4:38:ef:4d:78:20:81:86:6d:
5f:b1:57:66:78:84:45:2a:c2:df:fe:1b:c5:e1:08:
8e:2b:7e:79:8a:3d:ce:6b:e7:62:0c:51:75:10:8c:
a6:75:ad:dd:b1:c9:1d:04:8c:40:fc:25:cd:da:3f:
cd:a2:c9:e7:1a:31:02:5c:b6:73:df:ab:6f:da:77:
a9:65:b5:ab:0c:b5:ec:87:81:ae:a2:8b:c2:9c:fc:
73:92:b3:fc:6d:e3:40:17:19:fa:fe:6c:09:64:3d:
62:50:8d:0d:66:1e:c3:ff:01:27:5b:66:67:4b:31:
c3:b0:15:33:89:e8:02:ed:99:65:cf:e9:86:3f:fc:
3a:18:17:70:2c:c6:e0:ee:00:4a:87:98:8a:ad:92:
33:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D4:38:04:19:62:95:10:04:EA:19:15:2A:98:9F:84:13:7F:A3:2E
X509v3 Authority Key Identifier:
keyid:89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:50:42:49:5b:47:d1:7d:ae:9d:17:01:21:e0:8c:68:c2:bb:
54:94:11:f5:49:ef:97:bd:73:2b:24:03:24:54:e2:f4:6e:c2:
cf:53:8d:89:50:f9:19:04:7a:2d:9f:3c:26:ad:ac:7c:f9:0b:
11:f9:80:72:82:2f:cb:9a:32:b6:bb:28:32:76:49:42:83:31:
31:e2:7a:78:91:b5:2f:4b:ce:58:5e:21:40:b3:17:da:b8:61:
32:2a:0d:a8:c3:c9:37:f3:77:e6:60:fa:46:6e:a8:4a:26:e8:
40:03:33:e8:08:04:6f:6b:10:81:37:72:f1:db:6b:99:aa:c0:
a6:17:57:a7:65:28:8a:d5:d9:77:08:01:dd:8f:ce:c2:de:d8:
dd:46:ab:2f:7a:52:0b:d8:42:53:f9:a1:45:5f:dc:d5:49:db:
96:54:54:c9:86:bb:ce:e7:7d:28:91:f1:ad:39:a4:a5:3f:2e:
67:27:6d:ff:a1:ec:f0:68:36:44:47:2e:73:ae:1a:40:01:be:
94:ba:9d:04:4d:52:dd:21:75:cd:e0:f8:67:2f:29:ee:10:00:
b7:6f:17:9a:58:6d:0d:1b:8a:02:0a:a3:d5:88:ef:71:17:1f:
b5:f2:52:77:06:68:f6:61:8a:a4:83:40:d8:86:3f:fc:77:85:
89:13:f0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:24:41 2025 by rpki-client