Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
File: iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft (raw, json)
Hash identifier: hKmdDYMa8JGUM9p6lCO2V/nbRrb7fIoURrsuitxvSVw=
Subject key identifier: 63:C7:46:70:B1:92:31:DD:D0:F8:4F:37:D8:FF:DC:53:5A:08:65:16
Authority key identifier: 88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24
Certificate issuer: /CN=8898db8cb861bbbdd1fb7562def4d77d8642c324
Certificate serial: 019A70A4EDC7346A363A3B7C69053E4835D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
Manifest number: 1440
Signing time: Tue 11 Nov 2025 02:00:48 +0000
Manifest this update: Tue 11 Nov 2025 02:00:48 +0000
Manifest next update: Wed 12 Nov 2025 02:00:48 +0000
Files and hashes: 1: hIJG4JYkLEhwraYEYvL-fraByuk.roa (hash: 5YFKdkA5FRK1IPjfHxOUcAbA5SZ2reBZq68WODkSIGA=)
2: iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl (hash: Fpe3pm677xh2pbFwUpen1nJU9bOAgyrVa02uJxtzKd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:ed:c7:34:6a:36:3a:3b:7c:69:05:3e:48:35:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8898db8cb861bbbdd1fb7562def4d77d8642c324
Validity
Not Before: Nov 11 02:00:48 2025 GMT
Not After : Nov 12 02:00:48 2025 GMT
Subject: CN=63c74670b19231ddd0f84f37d8ffdc535a086516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fa:ca:3f:4f:5c:ba:a8:66:3a:e9:8a:fa:60:
f5:04:89:3e:5e:82:34:38:36:24:1e:e7:8b:c3:fb:
70:d6:91:0e:42:6a:2f:7d:73:90:11:be:97:a1:5d:
e3:5f:ed:38:f0:92:f1:01:58:d9:67:ec:28:e7:ec:
57:d8:70:dc:c4:42:62:4d:5c:ce:4f:3f:43:fb:f7:
b6:da:38:1a:d1:70:18:53:b0:a3:64:54:15:8c:38:
4b:97:89:f9:5a:c6:14:79:85:43:ce:5e:33:eb:18:
bf:6e:9a:b7:47:3a:ab:77:b2:d8:5a:7f:e8:29:0d:
6c:d6:23:c6:f4:f9:42:5e:bf:2d:10:9c:a3:b5:27:
2e:a1:f8:16:1d:93:32:e8:17:6f:5e:fa:c6:38:54:
b7:50:fe:f0:20:64:e0:45:47:b8:00:7f:9c:7e:1e:
ff:e1:8f:ab:95:a2:01:ff:4b:cd:75:c7:f4:23:f3:
30:b5:96:be:be:4d:cb:1a:4b:98:2d:6c:13:e9:80:
21:e0:54:d7:33:73:bb:1b:fb:b1:63:87:97:81:bb:
dd:2b:57:72:72:74:e4:5b:0c:6d:14:53:6d:50:1e:
b1:12:3e:7b:6f:95:f3:92:68:8d:ab:d0:a6:81:4f:
a1:84:48:69:95:18:48:92:35:9c:15:e7:57:91:35:
8b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C7:46:70:B1:92:31:DD:D0:F8:4F:37:D8:FF:DC:53:5A:08:65:16
X509v3 Authority Key Identifier:
keyid:88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:26:eb:9e:b5:5f:ea:68:17:a0:3e:9d:7e:7d:7b:ab:cc:c8:
76:8d:70:1b:e1:fd:09:95:06:70:71:65:17:c5:48:94:5e:7d:
b2:95:de:fb:ff:be:c7:4d:ac:88:79:dc:5f:d9:46:58:16:8c:
35:60:df:78:7a:61:c5:19:27:87:73:f2:54:da:b0:f2:0d:86:
76:19:8e:6f:cf:05:36:95:c1:cc:43:c2:2c:dc:2f:3c:63:a0:
30:d8:a0:32:cf:48:c7:ae:d7:1a:8b:41:3d:84:36:ac:bf:3e:
52:34:9d:7b:d7:86:01:fe:95:3d:d8:6b:76:d8:75:d1:be:07:
30:fb:fd:24:3d:0d:15:7c:c3:91:3c:ec:7b:f9:ea:61:7e:a4:
92:bf:68:ee:35:a0:e0:7b:da:b9:b7:67:91:2c:57:2b:4f:c7:
33:bb:3a:33:c7:58:61:f4:fc:30:a7:f0:eb:0f:e6:49:05:2f:
e8:d8:1b:d3:4d:f2:f5:eb:e2:61:2c:84:39:23:ae:9f:e2:ee:
70:9e:5f:c7:ce:9b:09:93:f0:ae:58:3c:7a:44:44:29:8e:68:
74:fb:b5:ed:d1:4f:9f:75:00:a9:07:20:f5:d7:72:4c:b0:80:
cb:fe:3d:fb:c0:dd:74:e6:92:61:15:11:18:dd:fc:7f:d6:53:
71:2d:a4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:28 2025 by rpki-client