Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
File: I0tEmJRYnRb2dr_ygqvtqlbMe40.mft (raw, json)
Hash identifier: 9DbfxuYwYzTG8iJnGFh+RSIMi7edZUgZgwRhqm6QVsg=
Subject key identifier: 6F:E2:C9:D5:F6:E7:F0:3B:17:EB:E9:93:1A:7F:2E:DD:CB:F3:F6:47
Authority key identifier: 23:4B:44:98:94:58:9D:16:F6:76:BF:F2:82:AB:ED:AA:56:CC:7B:8D
Certificate issuer: /CN=234b449894589d16f676bff282abedaa56cc7b8d
Certificate serial: 019A7225910F5A2240A0B80FF9F2174E2E3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
Manifest number: 075B
Signing time: Tue 11 Nov 2025 09:00:55 +0000
Manifest this update: Tue 11 Nov 2025 09:00:55 +0000
Manifest next update: Wed 12 Nov 2025 09:00:55 +0000
Files and hashes: 1: EBtcNhOJ92IGPVl-KdrFygnNVn4.roa (hash: Ykla49kgLw0fjmlAc5cpzOXx1fYgIVxrEDqc3yCSjAA=)
2: I0tEmJRYnRb2dr_ygqvtqlbMe40.crl (hash: 4fRAM1CT9QoCXX3PbrCnQOaU2azWFFOpnScXTrPWfsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:91:0f:5a:22:40:a0:b8:0f:f9:f2:17:4e:2e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b449894589d16f676bff282abedaa56cc7b8d
Validity
Not Before: Nov 11 09:00:55 2025 GMT
Not After : Nov 12 09:00:55 2025 GMT
Subject: CN=6fe2c9d5f6e7f03b17ebe9931a7f2eddcbf3f647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:69:7b:46:a4:52:9b:88:0a:5a:f7:12:bb:
a6:46:12:cd:d8:59:40:cf:bd:6b:0d:b3:86:26:5f:
65:d8:1e:7c:f4:0e:1f:97:1c:b0:2a:8e:1b:59:fc:
82:f9:d2:66:54:71:19:46:f4:9b:21:34:39:cb:9c:
89:b3:30:84:fd:58:cd:cf:8c:17:c5:3d:61:15:af:
15:38:4e:f6:6a:52:e9:e9:35:91:84:bc:63:23:e9:
ff:97:8d:0e:e3:73:45:dc:1c:cb:36:01:38:a9:b3:
74:b1:78:44:a0:6d:97:0d:53:8c:6c:5b:b4:ff:93:
3a:55:68:c0:e0:04:d9:2a:75:7b:ce:25:86:de:ab:
3b:9e:96:bb:4d:33:a5:0c:60:bf:76:1e:ef:a2:95:
8a:80:f4:59:0e:53:d6:e4:6f:d0:47:01:53:bb:e1:
73:94:74:e2:e2:60:7d:33:55:d9:8d:2b:5b:c0:2f:
5f:39:ec:e9:43:c0:8e:87:b2:87:ee:5f:fd:10:2b:
d9:0d:67:93:e0:74:af:48:c1:9e:82:e2:c5:19:90:
b7:35:05:ed:1a:05:1d:47:e7:75:bc:2a:08:7d:70:
b2:41:79:f3:d0:d6:7a:9f:c7:26:f8:96:b6:4c:f0:
e1:c1:0d:45:9d:28:4e:b4:9a:1c:91:04:3f:df:d4:
0b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E2:C9:D5:F6:E7:F0:3B:17:EB:E9:93:1A:7F:2E:DD:CB:F3:F6:47
X509v3 Authority Key Identifier:
keyid:23:4B:44:98:94:58:9D:16:F6:76:BF:F2:82:AB:ED:AA:56:CC:7B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ce:fa:b6:e4:a4:d4:56:26:c1:66:05:a4:7a:59:dd:7e:d3:
d4:a1:95:a6:39:cd:0b:f4:af:3d:4a:ff:f3:05:95:f2:18:f3:
18:7e:e2:0f:76:cc:17:77:c6:22:0b:0d:da:92:79:e6:9b:9e:
3b:25:8c:a6:86:36:24:15:8a:0a:60:b2:56:26:2b:bf:c9:22:
ac:6e:a9:1c:f4:34:5a:ea:69:93:8c:89:42:e2:02:8f:56:19:
73:e4:7b:f0:e3:55:b7:a2:d2:40:d5:c7:7e:e0:4e:a4:e0:a2:
69:29:eb:38:1c:92:94:61:2e:17:66:ac:de:f1:f7:df:7e:42:
e6:ae:d9:61:ca:67:2c:83:50:a6:b0:5f:ff:f5:18:50:9e:a5:
3a:cf:00:e6:58:27:93:4e:64:1f:3a:c9:53:de:58:26:2f:35:
af:7c:58:28:93:c5:c0:e9:e0:ec:8c:c7:91:1f:77:1b:e8:cd:
ff:6b:d3:26:99:88:02:82:dd:a4:9f:22:18:52:ce:db:87:51:
3a:b5:73:a7:c8:f7:92:73:c0:b2:a5:90:ae:98:c8:03:41:6f:
16:32:04:e1:50:06:8d:c3:5c:8f:0b:f5:15:df:f5:0d:33:a8:
4b:f2:b5:b8:b3:d0:e1:8d:db:44:35:7e:50:1a:8a:9d:83:0d:
9c:57:31:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:17 2025 by rpki-client