Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
File: iP4ZBc16825jraY2bBR7Ydhcnys.mft (raw, json)
Hash identifier: OR06Qcp6oQ7kqMv75R3Sisi+jLgOP1RnRB//XHMTN0Q=
Subject key identifier: 6A:D6:ED:41:EC:D8:5D:25:AD:7C:32:29:86:F6:1C:5D:3F:25:5F:6E
Authority key identifier: 88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
Certificate issuer: /CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Certificate serial: 0199C60EAAC088E01CC97818C05C45567C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
Manifest number: 0808
Signing time: Wed 08 Oct 2025 23:01:13 +0000
Manifest this update: Wed 08 Oct 2025 23:01:13 +0000
Manifest next update: Thu 09 Oct 2025 23:01:13 +0000
Files and hashes: 1: DSjiByReVAFtGenTha4D-8dSQJA.roa (hash: LTaqsJLmNorNuR9w6MCAPY47C39e6eSxiN8KzBSficg=)
2: N3Ms1tO5Rc3q58ZodMbwcW3QRxA.roa (hash: QeEjLFu1bfyi8L5wOE2F/BxSn3Wihpq/1jEicr1OiIU=)
3: iP4ZBc16825jraY2bBR7Ydhcnys.crl (hash: xJ6MHwVHtrX7KiwjeLl95UWq0ei1XTQPuHof3tCZBkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c6:0e:aa:c0:88:e0:1c:c9:78:18:c0:5c:45:56:7c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Validity
Not Before: Oct 8 23:01:13 2025 GMT
Not After : Oct 9 23:01:13 2025 GMT
Subject: CN=6ad6ed41ecd85d25ad7c322986f61c5d3f255f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:75:e8:c7:97:a8:1c:23:fc:33:da:c9:df:36:
99:d3:4f:6e:ca:01:72:83:ac:85:39:09:48:8f:44:
ef:5d:b2:dd:53:80:51:1a:41:06:05:7b:0c:35:40:
5f:eb:ea:25:30:a1:0b:4f:bd:58:d2:2a:12:ba:c4:
4b:c9:22:4d:56:f1:d9:e8:25:3a:5a:a4:33:db:30:
f5:e6:7c:42:90:b5:59:ac:ab:a5:e9:31:4c:84:e1:
2f:a2:1f:bd:68:53:56:61:92:21:1b:3d:7e:c6:84:
fc:2b:a8:93:a8:43:be:61:39:14:90:66:69:5a:12:
33:a0:62:66:ba:55:7b:d7:e2:37:91:82:3e:28:29:
e7:33:53:57:7a:a3:a2:92:6d:bc:59:be:2b:99:3d:
a2:30:b2:72:d4:be:82:a5:9d:80:11:4c:81:1b:1b:
31:a0:85:7e:ef:20:2c:4a:92:66:76:14:a3:db:2e:
14:f3:14:64:72:63:79:20:4a:25:9e:7b:e1:9f:7d:
6f:62:7e:8c:92:60:82:ac:32:3d:dc:29:f4:c2:ec:
57:fb:a0:bc:cd:f4:b9:12:95:d5:d6:41:d9:01:18:
83:3f:81:86:f4:30:75:e8:2d:be:b8:16:40:aa:7b:
83:80:0d:0e:f9:29:e4:f1:a6:dd:22:20:7a:f8:e9:
38:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D6:ED:41:EC:D8:5D:25:AD:7C:32:29:86:F6:1C:5D:3F:25:5F:6E
X509v3 Authority Key Identifier:
keyid:88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c9:db:9b:b2:b8:8d:86:87:db:ad:98:51:1b:a7:c2:ec:65:
d9:1c:dd:12:25:95:5c:f7:07:da:44:59:89:ef:66:99:2a:ab:
37:2e:95:61:17:cd:b5:bb:e6:06:b9:66:ca:f8:0d:26:55:c1:
c4:21:82:f4:58:07:79:d5:a2:71:0d:d1:9a:b0:27:55:3b:74:
00:4e:95:46:40:01:40:a7:a7:e0:2c:c0:ab:bb:bc:6e:62:fe:
cd:41:36:f2:80:c3:3d:c2:35:62:91:8b:2b:d8:7c:04:2e:06:
70:40:8f:24:f0:0e:04:5c:86:e0:f0:b8:f3:97:9a:b9:f4:2d:
ee:48:41:6b:2c:c4:e2:b1:e2:5d:d4:b7:b5:9b:57:fd:cd:35:
42:8f:4f:d7:e2:26:fc:79:e4:0d:6e:91:a5:4d:1f:6e:a0:1f:
0d:3d:50:7d:d3:3a:7d:e9:a3:bc:d9:5c:c4:25:2e:d0:cd:47:
39:89:37:09:e0:3d:31:48:53:0b:ab:c6:d2:d0:c2:d9:5a:49:
59:d2:af:71:bc:c6:b0:b1:23:f4:42:a1:1a:0a:31:ff:cd:11:
43:49:2c:4a:48:b4:02:5a:29:0a:98:2c:fb:6e:b8:20:eb:e4:
52:41:84:87:d0:00:83:1e:a6:e5:15:1e:87:e7:72:38:19:e8:
11:42:88:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:21:55 2025 by rpki-client