Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
File: i0I-HXKxAwcL7VecQFl-0guEwW4.mft (raw, json)
Hash identifier: 8BaV6a3PgtB9bSgPWYYiGNq1+k2MIUq7jJWoOsr0Vcc=
Subject key identifier: 7E:3C:5E:16:89:CB:C2:26:1F:79:F0:EC:30:33:82:54:2E:6A:C3:5F
Authority key identifier: 8B:42:3E:1D:72:B1:03:07:0B:ED:57:9C:40:59:7E:D2:0B:84:C1:6E
Certificate issuer: /CN=8b423e1d72b103070bed579c40597ed20b84c16e
Certificate serial: 019A71B7AE1A52ED56E719EA59737D295A2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
Manifest number: 05A1
Signing time: Tue 11 Nov 2025 07:00:54 +0000
Manifest this update: Tue 11 Nov 2025 07:00:54 +0000
Manifest next update: Wed 12 Nov 2025 07:00:54 +0000
Files and hashes: 1: i0I-HXKxAwcL7VecQFl-0guEwW4.crl (hash: KkfM3SzJ6/GWkM40wJygwsHI/6k9rLauA2tHxUQd4+4=)
2: r5RExikwh9VTxHZbndQhO_XU-vQ.roa (hash: 9NeQ0bAnfg+NNUQ9+vUOpq7EYWJaPxwQiPdu/Cupofw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ae:1a:52:ed:56:e7:19:ea:59:73:7d:29:5a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b423e1d72b103070bed579c40597ed20b84c16e
Validity
Not Before: Nov 11 07:00:54 2025 GMT
Not After : Nov 12 07:00:54 2025 GMT
Subject: CN=7e3c5e1689cbc2261f79f0ec303382542e6ac35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:38:9a:20:f5:2f:8e:09:67:5c:56:0e:d9:b9:
54:50:52:5d:4d:89:a3:89:be:3a:87:50:4d:5f:86:
c3:62:b5:2b:18:6b:27:7c:b3:1d:c4:69:a2:b5:9d:
a4:c3:60:09:2b:d1:11:65:e2:32:c7:ca:86:56:ca:
89:1f:60:e0:f3:e6:9c:11:bb:bb:4e:eb:64:cd:b0:
21:ca:fb:d7:9f:c1:1d:89:98:a2:af:dc:c7:5e:03:
4b:eb:87:76:3d:ac:0d:4d:33:4d:14:1d:dc:34:be:
d1:03:7f:95:73:aa:65:69:6e:c2:eb:05:f4:ae:dc:
8b:c0:57:f9:46:75:eb:e7:06:f7:19:9e:1b:e4:4a:
c3:d5:1c:29:43:f3:1f:24:ba:3a:3f:73:ca:b9:44:
fa:c7:0d:fe:73:fa:45:a5:c1:3d:bc:f1:32:64:6d:
96:40:25:fd:c0:64:1a:16:68:30:2d:1f:5c:ca:8a:
7f:55:94:d0:59:ad:41:5f:85:f2:84:30:3b:3f:be:
85:78:a5:36:23:90:a0:4a:50:b0:f0:c0:70:d0:a7:
5f:5c:48:56:fc:a1:7c:4e:b2:ce:2d:bb:e3:ef:3d:
77:02:58:78:9f:99:8c:fe:61:18:53:81:5d:82:28:
17:66:c4:3e:7e:6b:11:1c:c4:e9:c2:47:ab:2f:8e:
5f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3C:5E:16:89:CB:C2:26:1F:79:F0:EC:30:33:82:54:2E:6A:C3:5F
X509v3 Authority Key Identifier:
keyid:8B:42:3E:1D:72:B1:03:07:0B:ED:57:9C:40:59:7E:D2:0B:84:C1:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b7:be:11:5e:35:ff:9a:5a:b1:d4:14:00:40:15:c3:84:8d:
97:08:44:8a:71:7b:bd:7f:14:41:db:fb:de:e0:64:02:2b:49:
39:44:94:40:a2:8d:9f:8c:fa:3a:a0:c4:a9:23:a2:97:b6:a2:
e5:03:38:2f:0d:1c:69:33:6b:86:a4:03:b2:b5:7f:2c:e4:08:
40:3e:0a:5d:13:02:d9:60:b8:1b:6a:ef:fd:22:b4:fd:fa:fe:
25:9e:46:ba:cb:5c:69:b1:65:cc:45:1e:3a:67:2b:58:fb:cc:
10:cb:96:70:19:81:6f:ef:f3:0f:2f:3e:3a:25:b6:ea:a5:77:
28:17:b1:5a:7f:77:1e:44:62:3c:6a:44:e6:1d:13:82:20:ce:
07:9e:86:ce:40:0e:44:eb:1b:4f:5e:53:72:8b:7b:b1:8a:c6:
13:c9:5e:85:5c:f9:55:8f:f1:25:30:a1:a5:9e:79:c8:5e:34:
8a:f8:c4:ec:2e:27:35:fa:ec:d1:c3:7f:05:8b:88:af:7d:2d:
85:32:7b:18:11:a4:c1:2c:c4:95:d8:0f:ca:fc:82:78:33:8f:
ae:6e:e8:4a:e9:1c:d3:fb:8f:06:1a:ee:1f:e2:f4:b8:de:13:
1f:5e:f6:38:7e:67:02:00:9a:9e:b1:c0:3a:ea:cc:1f:c2:a1:
94:db:da:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:35 2025 by rpki-client