Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
File: iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft (raw, json)
Hash identifier: 1uLNZeqqh6fZpCvnGZ8IwahTHmzxZDfkupffAcFwjS0=
Subject key identifier: 86:FB:79:53:55:B2:80:FF:81:48:12:BC:7F:1C:9B:EC:BA:0D:5A:ED
Authority key identifier: 88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
Certificate issuer: /CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Certificate serial: 019A71135C5A580F44FB21DF1DA9FD060E50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
Manifest number: 1672
Signing time: Tue 11 Nov 2025 04:01:25 +0000
Manifest this update: Tue 11 Nov 2025 04:01:25 +0000
Manifest next update: Wed 12 Nov 2025 04:01:25 +0000
Files and hashes: 1: Qv6t4wP7j-uLsxcfTWHv2ZFQWD8.roa (hash: eR47NrGWjMdNEp9FBa07vBAWwdqKIDeSc8imYvJOwfI=)
2: iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl (hash: RJE/fHX7ETQw50B8PF5dxMzK8C70/RRXau0k6WuPMKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:5c:5a:58:0f:44:fb:21:df:1d:a9:fd:06:0e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Validity
Not Before: Nov 11 04:01:25 2025 GMT
Not After : Nov 12 04:01:25 2025 GMT
Subject: CN=86fb795355b280ff814812bc7f1c9becba0d5aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:32:da:84:dd:c1:9f:e7:e8:04:f6:e8:1b:48:
89:7e:20:7b:83:bc:a0:f4:39:11:4f:67:46:6f:47:
a8:d5:b1:39:8b:85:22:19:c4:2d:26:da:7d:69:d1:
d6:43:77:3e:14:da:0b:48:7b:b9:76:f9:61:da:f1:
e8:87:de:8f:76:30:09:a9:5d:42:f6:7e:2f:7b:f4:
d9:e2:69:e8:b9:bc:00:40:9d:92:8c:0c:68:b3:dd:
1d:33:10:83:0a:f6:39:68:87:27:31:af:95:6b:5d:
8c:d8:31:a4:67:91:c5:2b:87:d5:ba:dc:87:dc:02:
1e:2f:3c:4b:0e:84:3a:bf:98:0e:95:6d:0e:af:8f:
c9:98:7d:66:02:9d:63:b0:59:f3:06:84:61:5f:38:
1f:99:56:e3:93:17:23:37:e8:2d:37:76:a7:ba:c9:
03:b4:b8:a5:e2:66:93:c6:6b:ad:61:2f:d1:fe:ff:
33:af:2f:7c:7c:e9:69:df:52:d3:5a:b4:c7:d6:2c:
28:be:d9:f4:7e:79:17:f3:ca:55:ec:f0:2e:85:66:
52:0e:cc:b4:1c:d8:89:7e:f9:0f:90:57:cd:d7:81:
28:cd:e5:fb:9b:5b:95:9c:ba:5b:3a:12:e3:d7:e0:
da:f6:7c:9c:71:00:df:86:f6:ee:51:6b:be:b9:09:
d3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FB:79:53:55:B2:80:FF:81:48:12:BC:7F:1C:9B:EC:BA:0D:5A:ED
X509v3 Authority Key Identifier:
keyid:88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:5f:e8:fd:78:da:a5:fd:6c:95:73:ab:c5:0d:f2:43:cb:a6:
bc:4c:87:e9:7b:04:b6:a9:d8:fb:3d:07:fb:76:ce:92:0c:ee:
ca:b9:d0:2d:50:b7:ae:a3:8e:60:de:26:d7:e6:11:18:b9:60:
ac:83:46:1d:a1:90:2b:10:bb:d9:ab:89:1d:0d:f7:87:39:c0:
aa:d1:d9:46:5c:ba:c0:83:25:f0:5c:e4:3b:ce:a5:88:06:a5:
70:7f:63:fb:e4:99:17:aa:2d:4f:cb:a8:9b:da:02:75:09:ff:
22:d4:d4:c9:ed:a7:9d:c4:2f:02:33:95:9f:02:24:52:ba:18:
4b:8b:9b:5c:9a:a3:f4:71:98:1f:03:04:77:97:fb:35:bb:15:
85:bf:08:fe:16:0c:98:31:ee:9a:ea:cf:ef:21:28:6d:76:6a:
87:09:4d:ee:03:95:54:27:01:d5:3c:bc:c1:c1:09:86:cf:a6:
4c:7b:b2:f4:d7:36:a2:ee:65:df:5f:48:ae:5b:0d:56:6b:35:
1f:2a:e1:82:97:41:9d:1e:7a:d2:e9:8f:50:9b:d4:6e:ff:f2:
2a:ab:48:6d:65:b1:95:80:f7:fa:7a:4e:84:29:34:fe:0a:db:
65:f4:ae:28:38:a7:57:51:25:80:42:36:1a:68:3e:2e:49:70:
96:b1:d6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:27 2025 by rpki-client