Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
File: iWqh8O1Flucz-LYtOeN7jeUIXtc.mft (raw, json)
Hash identifier: vF8COjLiVtQAYqLXRqQtsLBKx9ifbROIC0Al1HlEqYk=
Subject key identifier: 74:22:AD:40:57:05:9D:B2:10:91:3D:61:5E:36:DA:41:0C:28:DE:A4
Authority key identifier: 89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7
Certificate issuer: /CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7
Certificate serial: 019A7112DF80813ADF65236F252F7442ED20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 04:00:53 +0000
Manifest this update: Tue 11 Nov 2025 04:00:53 +0000
Manifest next update: Wed 12 Nov 2025 04:00:53 +0000
Files and hashes: 1: eVsPR_b5z2ja1nvgWZaFAJsxzV8.roa (hash: NL/nj7PiRruzzNoJXPrVqMifeH+fC4R4vqg0qPtnqLg=)
2: iWqh8O1Flucz-LYtOeN7jeUIXtc.crl (hash: LXOGxel5X5oF08IMKsx/nLX4oV3AkkUKMOH5riksd+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:df:80:81:3a:df:65:23:6f:25:2f:74:42:ed:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7
Validity
Not Before: Nov 11 04:00:53 2025 GMT
Not After : Nov 12 04:00:53 2025 GMT
Subject: CN=7422ad4057059db210913d615e36da410c28dea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c0:bd:3b:7f:dd:a2:3d:a3:43:02:32:ab:e6:
ff:46:da:18:7a:88:4f:dd:d3:59:20:5c:a7:d0:eb:
62:8c:09:99:c0:97:d7:84:d7:22:0b:16:f3:51:d0:
e4:e1:24:61:9c:b8:03:a1:d6:1a:20:b8:a0:13:db:
e9:58:80:9b:dd:ba:fa:79:b1:95:94:8b:2a:ea:83:
ab:d9:c3:af:34:08:01:5c:ae:88:39:b1:f1:57:7e:
da:c7:a1:3c:80:70:15:7b:ba:f2:56:b9:f6:82:71:
87:ac:ea:3f:60:b5:0b:7b:31:68:db:1d:34:7d:c4:
09:f9:7f:ce:9c:13:37:0b:c1:74:a9:03:e9:46:33:
35:48:53:6c:ff:83:00:c3:f3:e0:e7:f8:cd:db:19:
0c:8b:2b:6e:8b:c8:67:c4:4f:57:58:b4:aa:7d:6b:
27:04:11:16:52:bb:01:ae:62:d4:6c:2b:99:92:e0:
3c:0c:9a:e5:aa:2c:49:ad:ac:27:95:2c:af:33:0b:
a8:47:d0:e7:d5:35:8d:4b:b1:36:18:86:5f:4a:0c:
e5:11:ce:df:65:9e:6e:3c:c4:49:d5:6d:82:96:30:
b9:7c:b9:35:59:04:bc:12:f2:76:4e:cd:c3:48:c0:
86:8a:cb:0e:ac:a5:6a:ff:f4:10:90:02:13:c3:c9:
8e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:22:AD:40:57:05:9D:B2:10:91:3D:61:5E:36:DA:41:0C:28:DE:A4
X509v3 Authority Key Identifier:
keyid:89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ad:51:78:59:47:11:15:c0:e6:f6:1e:a6:fc:40:4e:75:97:
9c:1d:23:c4:ce:2f:37:ef:bf:e4:d7:24:97:a9:cf:18:77:34:
f6:dd:59:de:91:fc:1f:1c:c6:34:d0:ac:ea:a3:af:7b:9e:1b:
7c:83:69:93:3b:c1:5b:13:91:2d:05:41:5f:79:3a:55:f0:9c:
95:7b:07:a3:ca:df:b0:23:d1:51:cc:48:1c:61:a9:a2:6f:6e:
7a:20:11:64:ff:9b:56:53:df:70:07:47:90:dd:00:3d:13:8c:
b1:78:23:4c:a0:b6:0f:ef:fc:57:dc:ee:16:f8:20:ab:83:da:
41:6f:fb:7a:86:39:22:67:08:d5:d3:6e:e9:ab:9f:93:86:3a:
bf:e6:c1:2e:d8:f3:43:c0:75:63:e6:88:a6:c3:63:e6:d9:1e:
e3:16:c6:1f:fd:04:48:c1:e1:80:80:9d:31:87:74:80:2c:bc:
9e:6c:36:fe:3e:65:d9:27:57:66:98:5b:1a:f1:ed:45:e1:0f:
c8:7b:f8:42:48:e3:50:29:a2:06:3a:9e:59:1b:51:c7:0c:a2:
07:14:b6:91:c4:fe:f4:71:11:03:3d:fc:db:d8:b0:de:e9:d4:
b0:ae:16:b6:dc:13:38:76:c6:38:34:4c:b1:8d:47:c2:c9:1b:
e0:f9:49:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:18 2025 by rpki-client