Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
File: iiJ8Nfko2ci4_3wlch79R6kNy2c.mft (raw, json)
Hash identifier: yUh/wnSdDm9Gdzw8DkjDgKyEFCL+CV3ftNJMwywrb58=
Subject key identifier: 24:BB:44:4E:F4:00:9C:DA:DB:CD:20:39:8B:AD:E1:06:57:84:96:74
Authority key identifier: 8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67
Certificate issuer: /CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67
Certificate serial: 019A7113500FBEC9B8C86733CAF4B01595FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
Manifest number: 1426
Signing time: Tue 11 Nov 2025 04:01:22 +0000
Manifest this update: Tue 11 Nov 2025 04:01:22 +0000
Manifest next update: Wed 12 Nov 2025 04:01:22 +0000
Files and hashes: 1: K7N-hRXidANMpYlZJ_rYSwLoLCk.roa (hash: tqDwe1a97FYihn4sdeIxy/I7wKkMHB8gK4badlQZXTs=)
2: iiJ8Nfko2ci4_3wlch79R6kNy2c.crl (hash: WGmkGvTuKzwF04hg4Hlmht0QwV1CQm7/f2bCOlL8AL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:50:0f:be:c9:b8:c8:67:33:ca:f4:b0:15:95:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67
Validity
Not Before: Nov 11 04:01:22 2025 GMT
Not After : Nov 12 04:01:22 2025 GMT
Subject: CN=24bb444ef4009cdadbcd20398bade10657849674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a7:10:e3:cc:9c:78:75:32:d8:c8:9b:59:7a:
48:65:ef:3b:3c:0c:b9:2b:d6:8e:df:c8:85:79:85:
68:94:85:2a:9f:1d:6c:c1:1f:f2:54:d6:c6:b0:d6:
e8:e7:17:5b:33:8c:48:ff:29:00:27:65:44:38:b5:
e8:4a:9e:f0:a9:7f:b8:b0:7b:46:8d:42:20:0d:f3:
3b:27:e2:95:a0:33:cf:2d:70:54:29:0a:3d:4d:0a:
2f:ee:ff:4c:76:32:0e:27:8c:63:b6:8b:83:14:b2:
31:e5:f5:1d:58:73:64:6f:15:c0:ef:6c:dd:47:e0:
e9:2d:e4:c9:74:58:d1:38:30:1e:cb:d3:67:cd:79:
e7:66:5c:fe:12:fc:af:91:f7:3c:53:f6:f2:23:29:
b9:cd:74:75:82:75:f1:da:0a:8c:f4:69:04:2e:b3:
9c:33:fc:24:28:61:2d:6d:ea:86:c8:6f:01:ff:cc:
08:a7:bc:5f:37:00:6f:69:a8:7f:52:5e:7a:50:94:
f4:7e:fa:f9:54:c5:8e:9f:10:9d:b8:a6:7a:55:dd:
37:dc:e6:4e:90:cf:01:f2:fd:d6:64:0f:a8:c1:7b:
68:74:28:d7:92:14:79:5c:0d:31:02:75:1a:63:49:
df:8e:d7:cd:70:48:03:18:52:5c:f2:f8:fe:34:68:
00:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BB:44:4E:F4:00:9C:DA:DB:CD:20:39:8B:AD:E1:06:57:84:96:74
X509v3 Authority Key Identifier:
keyid:8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ac:3d:a2:cc:51:70:0b:16:14:34:65:a2:56:2d:ea:4a:e2:
dd:74:7d:71:29:43:be:fb:9b:1a:07:83:74:97:4e:26:b6:0f:
1d:e2:73:a6:3f:b5:14:12:91:d9:d9:ab:b3:75:f3:cf:a6:f4:
a8:1b:2f:de:57:ba:0a:72:c8:2a:2a:2e:af:3f:e9:68:77:e5:
b2:fc:4d:76:e2:32:2a:e5:d3:2e:2d:0c:fa:72:24:78:78:80:
47:39:5f:88:58:59:28:3a:d8:95:07:9c:15:3e:9e:ad:cc:b9:
db:93:84:33:2d:62:93:c7:13:0d:96:39:23:b0:9a:cc:d1:aa:
2b:72:90:cc:59:54:36:fc:20:43:54:3b:94:b1:ea:66:1e:c6:
2d:d4:31:6e:b9:bb:e1:50:65:b9:14:a3:34:a9:1f:05:56:f4:
1f:7b:53:81:75:f9:11:09:10:86:d0:22:ae:75:15:f4:1a:f5:
9b:ac:9c:e9:92:b9:96:22:12:4f:14:56:f4:2c:88:bd:7e:f3:
82:7a:87:ee:a1:51:13:93:cd:de:3f:c5:72:dc:d7:d5:7e:df:
82:08:e6:23:38:68:d6:5d:eb:2e:90:ca:42:53:41:00:6e:74:
b9:0d:94:88:d0:c3:13:7c:f8:3c:bb:c6:5d:36:e8:9d:d2:77:
31:57:85:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:36 2025 by rpki-client