Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
File: Ib-nezzXgpM-XyVURdQorfvcoOE.mft (raw, json)
Hash identifier: L4lz3gdtDV/Pj5AIyPeO47sCZtbufWVNphOE8gx51x0=
Subject key identifier: DE:D9:4D:12:39:0D:83:88:44:8D:96:2B:67:E0:1E:E7:CD:D6:A9:2D
Authority key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
Certificate issuer: /CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Certificate serial: 019A7149B68DF356B8317AEA01B39B56975E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 05:00:47 +0000
Manifest this update: Tue 11 Nov 2025 05:00:47 +0000
Manifest next update: Wed 12 Nov 2025 05:00:47 +0000
Files and hashes: 1: 4lN9UMCt9-jT04o2voesNzfPwGs.roa (hash: t3RT/PpcRecUqHyCeVTaRV/4YmAPhY6KAKsv8Og5F9U=)
2: ACmM5xMJG5d1YVOZ4RZKGVZYg9k.roa (hash: Fvp/3zg9VXW0brdKzJ0fdm3mkA4lR5zaksqsabjZcF4=)
3: Ib-nezzXgpM-XyVURdQorfvcoOE.crl (hash: zvUarZcnsc+eGHEbxOj3tCR2DJ/EJlZOhCjOp7neHvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:b6:8d:f3:56:b8:31:7a:ea:01:b3:9b:56:97:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Validity
Not Before: Nov 11 05:00:47 2025 GMT
Not After : Nov 12 05:00:47 2025 GMT
Subject: CN=ded94d12390d8388448d962b67e01ee7cdd6a92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a3:5d:f3:be:d2:d7:5f:c4:08:b7:db:aa:e3:
e3:58:33:e8:96:94:fe:e3:95:e9:89:f6:6d:2c:77:
c7:c2:06:12:56:03:9b:f2:93:25:42:d6:b6:22:5d:
d3:d1:72:52:7a:d3:1c:58:fa:72:70:89:0d:f8:3b:
2b:67:43:96:b9:18:a8:2c:e8:54:a0:b2:94:b7:b8:
09:f7:cd:a1:50:98:b9:e0:4b:1e:e6:82:20:d2:a5:
d4:52:48:bf:ef:4c:a3:49:59:fd:f1:1d:a0:bb:48:
8f:f7:b5:54:c2:d7:f1:5e:7b:d9:c2:29:f5:da:c6:
b5:38:d0:e3:02:bd:3b:89:24:6a:5e:5d:6a:85:c9:
db:9d:21:d3:5d:66:fa:e0:0a:ea:71:89:fe:1e:fd:
c3:7e:f7:5b:f9:d0:f5:4c:43:35:1a:c3:42:62:a2:
07:ad:04:5a:63:86:33:08:45:c9:97:d3:67:b0:45:
73:9a:0e:ac:56:e2:e3:c7:e3:8e:3e:bd:d7:09:02:
ba:89:21:19:4f:98:45:68:62:cb:f2:ac:05:b7:2e:
74:15:cc:db:b3:b4:66:59:20:18:b8:78:a2:5e:89:
6c:ec:c0:ac:91:14:b1:19:ef:da:38:ba:a3:83:43:
75:aa:f0:2c:17:71:9b:52:51:d3:ea:d9:48:2a:f6:
98:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D9:4D:12:39:0D:83:88:44:8D:96:2B:67:E0:1E:E7:CD:D6:A9:2D
X509v3 Authority Key Identifier:
keyid:21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:4e:2f:6a:0c:1e:6f:ba:25:1a:ef:f2:f7:3b:a1:b3:65:ec:
57:60:28:df:a0:2f:f4:83:0c:68:b7:a1:a6:a1:3e:da:53:98:
47:68:14:a4:b1:fd:9a:b7:7c:83:1c:1e:17:a6:ce:70:30:06:
e1:25:4d:b0:d1:bb:45:04:c2:93:a8:f4:81:70:a1:99:cd:7d:
6c:75:a4:e6:24:cf:25:d3:03:34:3a:48:6f:53:a8:75:c7:08:
10:06:60:ee:e3:e4:5d:38:37:e3:2b:77:a3:97:51:3f:fd:30:
50:b4:f2:0a:45:34:05:71:d4:ff:ae:66:59:b8:92:83:89:2e:
a9:80:ba:2f:a5:b1:24:a0:b4:60:88:e7:5b:9c:0f:15:d2:b1:
91:07:f5:c9:38:b3:cd:89:9d:2d:8f:5e:3b:63:82:88:47:45:
9a:d4:27:10:62:78:26:23:1c:5b:ce:80:db:07:51:88:fd:a1:
db:ed:4d:7a:52:2f:c2:ea:40:c1:72:ec:2a:ee:dd:f4:32:b9:
c1:fc:2c:43:2c:1c:01:8a:58:77:50:41:6e:29:72:8b:cf:56:
9d:f4:81:eb:d6:df:43:ad:04:c8:1a:ee:95:09:4b:d0:9b:f5:
d5:28:5c:09:9b:18:98:0d:c6:da:8f:c4:99:a1:5a:96:86:a2:
2f:38:45:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:20 2025 by rpki-client