Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
File: I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft (raw, json)
Hash identifier: iFsrJP5qS45x8xqhE4TkRSPR/KnaUiT+W3JedjRFzww=
Subject key identifier: 46:ED:B3:7A:61:B6:AE:5D:79:59:22:39:96:5D:4A:17:FA:AC:6B:5C
Authority key identifier: 23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A
Certificate issuer: /CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a
Certificate serial: 019A28C231DC86BD17574D2F7CFDAA905A4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
Manifest number: 03F2
Signing time: Tue 28 Oct 2025 03:00:06 +0000
Manifest this update: Tue 28 Oct 2025 03:00:06 +0000
Manifest next update: Wed 29 Oct 2025 03:00:06 +0000
Files and hashes: 1: I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl (hash: eSQzFbjiN2xdkBP3q4BGjjKopa6ZoUtI3kJyMDRavyo=)
2: j4EIa7tKAt7zUJqXstTzU7rzvAM.roa (hash: KBhYqMx9SY3f4s8BMjZo/0KJeCGNnKyC4D8ert+K2y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:c2:31:dc:86:bd:17:57:4d:2f:7c:fd:aa:90:5a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a
Validity
Not Before: Oct 28 03:00:06 2025 GMT
Not After : Oct 29 03:00:06 2025 GMT
Subject: CN=46edb37a61b6ae5d79592239965d4a17faac6b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ec:4f:37:6d:26:11:1f:ff:b4:06:89:6d:89:
90:37:91:e2:e0:a2:48:4d:7e:40:d8:bf:63:f3:bc:
e7:ad:a8:ae:e7:a7:82:2a:b6:26:db:3b:6b:0f:f9:
7e:b2:69:b0:52:6a:fc:54:13:48:c0:94:73:8c:31:
94:01:9d:27:d1:b2:3f:0d:f6:2d:64:cf:ae:58:54:
7f:2a:00:38:ae:21:7c:56:a5:d7:bd:80:bf:a9:46:
07:cd:7d:15:c9:e3:15:44:8f:29:47:c1:9e:98:4a:
1b:be:5c:e4:5b:03:10:5b:26:37:4e:02:6e:22:1e:
0c:ea:bd:73:4f:a5:c2:bb:5c:7e:85:3b:c3:78:8e:
c4:00:cf:05:30:fa:bb:fb:3f:8a:70:a6:c3:05:90:
83:33:6d:ee:dc:65:9e:05:b8:87:df:f6:7b:a2:df:
2a:80:0b:f9:53:b1:91:d1:f5:e4:67:e6:77:07:67:
f6:35:59:cb:e4:49:4c:64:6d:ee:0d:60:c6:1f:1d:
26:e7:c9:7a:98:42:5a:6f:9a:db:37:e1:e1:fd:d9:
81:e0:c3:2e:35:eb:73:ab:6a:47:32:21:5f:c0:24:
b5:c6:76:52:4c:0e:67:59:de:8a:77:3d:15:e8:44:
27:24:75:cb:bd:cb:f6:0c:44:87:d2:24:0f:0b:fb:
d2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:ED:B3:7A:61:B6:AE:5D:79:59:22:39:96:5D:4A:17:FA:AC:6B:5C
X509v3 Authority Key Identifier:
keyid:23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:75:7f:13:cf:ff:83:cb:c0:04:5e:7f:70:98:b1:7a:2d:f7:
cd:a3:b7:30:3e:dc:24:6e:9a:dc:fe:ff:2f:dc:15:ca:de:9e:
eb:de:39:66:00:1e:1a:8d:c3:3d:98:18:16:b7:10:49:9c:07:
a5:b1:7f:ee:ac:ba:86:74:40:bb:2f:8f:07:40:de:ec:0e:2c:
77:9d:5c:3e:a0:f1:6f:9e:14:28:84:48:dd:1e:7f:05:e5:ec:
cc:17:c9:fb:a1:9d:90:48:30:cc:23:89:f4:03:58:af:5a:2a:
64:76:bf:46:b6:99:92:bf:2b:c6:04:8d:13:12:ff:8c:fe:da:
2d:95:c7:99:34:a7:d9:d9:df:3b:8a:9a:90:8a:dc:60:53:10:
74:b9:e4:79:e7:cc:b7:16:b7:c4:2c:e5:c6:c5:9f:93:cf:ad:
47:2f:dc:a0:f9:30:bf:a4:cc:40:05:64:87:aa:9a:b8:8d:a2:
68:d9:0b:c3:61:d3:4d:db:f6:d0:8b:84:90:f4:b4:70:d8:ec:
32:cf:85:89:a9:e1:24:28:f1:1c:99:bd:c0:41:2e:f5:a1:89:
57:13:cb:55:c3:bc:ee:19:6c:76:fe:41:27:b9:87:9f:06:27:
9b:ff:f7:e2:99:0b:2a:0c:bc:68:55:ac:3a:e3:d1:a0:cc:13:
f1:90:c0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:34:55 2025 by rpki-client