Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
File: irPpZch0fi-l3dEoV2c_BgQu-kM.mft (raw, json)
Hash identifier: 5ABoD00VD9Zks3ecetuMWKdKecZPdg37ZolQ+fZpcfs=
Subject key identifier: 65:CE:F4:B5:F4:F4:8F:A0:2F:25:6B:F7:C2:7C:BE:4D:28:74:28:D0
Authority key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
Certificate issuer: /CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Certificate serial: 0199C4FC2D690A611EA0DFFBC13A43EDD840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
Manifest number: 1659
Signing time: Wed 08 Oct 2025 18:01:24 +0000
Manifest this update: Wed 08 Oct 2025 18:01:24 +0000
Manifest next update: Thu 09 Oct 2025 18:01:24 +0000
Files and hashes: 1: 0R4cTom2N3Ffy-a36Ai0y_lwR7M.roa (hash: Nepk/Ut8yLvwSKOE+VPPTDkKY+eqYlx1ya61v2fExqo=)
2: DO5JxSipVW_jSyusVYE1KNyV5oM.roa (hash: fTaf/BSF7U37w4OYShE1QwyUlpAokZv3Xb6JIFlzFT0=)
3: MHydlao-1yBTTsCdp3bBe4bDnkc.roa (hash: OnwOrVTgc/R+eeJsST7imMdVV9F4opbfB++sLNDhiX8=)
4: irPpZch0fi-l3dEoV2c_BgQu-kM.crl (hash: /xczLdrS/JMr/X5uK/Vfza8OuAaiHsdKWgC+Zij0xPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 18:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:fc:2d:69:0a:61:1e:a0:df:fb:c1:3a:43:ed:d8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Validity
Not Before: Oct 8 18:01:24 2025 GMT
Not After : Oct 9 18:01:24 2025 GMT
Subject: CN=65cef4b5f4f48fa02f256bf7c27cbe4d287428d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:69:64:3f:6d:47:c8:1d:64:ef:2b:29:c0:f2:
74:0f:dc:51:08:8f:65:b3:60:c8:09:de:ed:58:aa:
49:99:cb:85:e4:30:30:27:f4:90:32:e7:4c:c9:ca:
01:34:bb:dd:84:b7:a3:ff:5c:73:8c:be:5a:b9:51:
1a:17:a1:86:ee:ff:44:13:c1:3c:c5:26:77:fe:47:
9b:63:1e:b6:28:3b:54:44:0e:84:fa:4b:a5:47:61:
7c:e9:9a:29:f1:25:0e:5a:c8:e5:07:cd:cd:7c:46:
6a:8a:09:32:06:c6:62:ca:2c:74:18:b0:2f:52:55:
83:98:0e:7c:71:c7:85:28:25:04:15:01:2b:a9:92:
de:e0:17:f7:ba:f2:b0:95:e4:d5:6f:4b:0a:89:0c:
b3:4b:01:ea:a0:92:e1:e2:3b:3b:85:70:20:ac:0e:
f8:4d:9c:82:88:ba:fc:00:12:00:1a:c3:ef:d4:08:
08:c4:fc:42:f7:8d:ee:35:9f:3a:5a:55:1e:89:83:
fa:49:e4:a0:c0:3b:3f:12:b2:99:3a:fd:58:3a:b6:
db:ad:1e:3a:49:ae:8a:85:28:88:07:34:7f:77:fb:
79:1e:e6:86:c1:91:74:46:c9:f2:0b:d5:cb:f2:19:
97:70:54:f5:9c:13:2e:09:5b:f4:26:c6:20:1f:16:
36:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CE:F4:B5:F4:F4:8F:A0:2F:25:6B:F7:C2:7C:BE:4D:28:74:28:D0
X509v3 Authority Key Identifier:
keyid:8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f5:1f:db:7c:95:97:54:b6:49:54:35:f2:86:af:d6:09:05:
d5:8d:01:15:15:a8:8e:04:b5:fe:39:9e:55:6f:57:b8:37:f5:
97:30:4c:76:10:74:20:55:57:78:7f:84:5d:54:ec:13:04:55:
e0:80:98:19:3d:64:19:f9:df:e4:04:bd:c1:30:d3:6a:04:53:
37:64:f3:9c:ee:f6:a1:cc:82:37:55:16:da:b7:51:1d:99:2e:
7c:b0:ff:a9:a2:f0:0a:66:67:7e:83:76:d8:45:01:67:48:e9:
c5:a4:e0:64:f5:cd:0d:90:59:cb:3b:7e:d7:14:4b:26:46:b5:
df:df:9a:be:0b:2a:11:d8:30:52:e7:30:96:b2:83:27:22:dd:
14:06:ac:e8:3a:99:f1:b4:1f:0d:33:b7:ab:50:60:54:fd:7a:
99:eb:3a:59:6c:98:29:38:dc:43:62:45:a9:af:5e:07:34:23:
96:89:c5:7c:6d:fc:b5:3b:39:f4:ba:19:0d:03:8f:6e:3e:98:
2f:d2:80:14:32:05:47:d1:6f:dc:48:18:d7:e2:31:ab:4c:f1:
bc:6d:37:fc:ce:54:c7:dc:63:44:53:7d:93:d9:53:4e:9c:47:
c1:86:41:e1:90:fb:7a:df:91:53:63:35:95:f3:8e:f1:19:53:
2e:0a:a6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:43:30 2025 by rpki-client