Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
File: ijJOTOdpObTbV9XTUMKtAHtZgOE.mft (raw, json)
Hash identifier: xc6RP5obPNTnrhGoXOakOIY46+rKoq9Icg/RCaFTPSM=
Subject key identifier: A6:D3:44:CB:F6:DD:DC:0F:21:1B:00:3B:75:1B:9D:A4:17:97:44:19
Authority key identifier: 8A:32:4E:4C:E7:69:39:B4:DB:57:D5:D3:50:C2:AD:00:7B:59:80:E1
Certificate issuer: /CN=8a324e4ce76939b4db57d5d350c2ad007b5980e1
Certificate serial: 019A706DEF735419F32556EA7E63357785DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
Manifest number: 1154
Signing time: Tue 11 Nov 2025 01:00:44 +0000
Manifest this update: Tue 11 Nov 2025 01:00:44 +0000
Manifest next update: Wed 12 Nov 2025 01:00:44 +0000
Files and hashes: 1: SK-KQGjpFxAKGGZG9gSs78w75A0.roa (hash: /f4qVORCandIpf7G2G6ex0CoHR+bR91wiJ0+KeMblkM=)
2: ijJOTOdpObTbV9XTUMKtAHtZgOE.crl (hash: zYk99k8Fit4KxpEwtyiLhKvhF2yIOC+WvXgc9MC1qCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6d:ef:73:54:19:f3:25:56:ea:7e:63:35:77:85:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a324e4ce76939b4db57d5d350c2ad007b5980e1
Validity
Not Before: Nov 11 01:00:44 2025 GMT
Not After : Nov 12 01:00:44 2025 GMT
Subject: CN=a6d344cbf6dddc0f211b003b751b9da417974419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d6:80:61:e6:26:ea:58:a5:79:2d:28:63:bd:
c0:6a:3b:23:20:82:8f:f0:6a:24:70:2c:38:83:52:
9b:ea:3e:30:18:fe:ef:37:7c:32:dd:56:35:54:13:
6c:52:02:a2:fc:7d:1b:60:0e:6a:41:cf:4d:ae:db:
5f:5c:a1:0d:b8:f4:77:b2:91:15:f1:15:de:3e:4d:
cb:db:15:bb:d4:0b:f7:45:18:a5:57:b1:9f:44:1b:
48:2a:70:5d:06:7e:0f:90:1d:d2:b2:77:52:53:e7:
a3:b8:10:02:f5:1c:d5:ce:82:22:39:0e:55:e8:b0:
4f:e1:e4:7a:15:eb:c2:21:e4:57:4b:5b:57:ed:11:
5b:46:4d:3c:08:a3:9c:4e:db:7e:88:01:de:f3:92:
5f:7d:a8:20:e8:88:f3:60:20:4e:1d:ac:c3:19:b7:
9d:76:84:40:d5:54:aa:a0:f3:9b:91:81:6c:7f:59:
cc:75:43:9b:e8:e3:3c:e5:55:f9:5d:53:a4:00:98:
f5:11:3b:e8:0b:5c:b3:18:8d:98:71:66:8f:f9:60:
72:00:ab:f4:fa:14:51:9e:6f:d7:a6:6b:0a:44:81:
cf:fe:ab:8f:64:d2:57:c2:4e:72:e5:3e:e6:3e:06:
46:35:f6:96:61:1d:47:ad:47:cf:88:45:54:94:19:
44:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D3:44:CB:F6:DD:DC:0F:21:1B:00:3B:75:1B:9D:A4:17:97:44:19
X509v3 Authority Key Identifier:
keyid:8A:32:4E:4C:E7:69:39:B4:DB:57:D5:D3:50:C2:AD:00:7B:59:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:44:8b:fd:8b:06:3e:93:a1:6b:4e:fe:d8:be:02:85:d4:84:
8e:74:ef:df:87:3a:94:ae:b5:94:46:86:29:72:21:9a:44:a8:
c1:05:a9:92:47:fd:07:8d:bc:c6:31:7f:61:0e:07:6b:0c:e4:
e9:8e:17:6e:d8:52:79:33:a4:e5:dc:71:f8:45:f3:77:f6:20:
7e:ff:61:71:9f:8b:91:24:af:8a:e9:07:af:d7:d7:8c:03:cc:
a8:44:d6:ab:53:af:b0:86:b3:57:96:83:9a:e4:79:eb:25:83:
60:9f:f3:6c:a4:96:62:e8:cc:a3:c9:ec:db:94:2d:7d:c7:9b:
ac:6c:09:45:50:96:31:14:5e:02:84:48:57:e5:6e:d0:39:ef:
be:b1:f8:c8:b8:44:a5:b8:2d:67:e9:8a:7d:aa:63:54:b2:12:
29:77:bc:65:5d:2d:69:be:69:99:ec:7a:93:6a:81:01:69:86:
b2:14:13:b3:38:a3:ef:14:2b:10:48:29:8a:59:ec:ac:fe:ff:
64:c8:11:de:d7:c9:6c:90:ef:d9:f4:39:ad:d2:e7:4d:5c:bc:
43:ab:45:ef:5e:9b:85:ca:89:6f:12:56:b8:37:20:98:5d:e3:
bb:5a:8e:be:66:ff:f9:6d:8a:83:98:44:f4:6b:58:05:59:52:
a2:f5:6c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:13 2025 by rpki-client