Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
File: IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft (raw, json)
Hash identifier: 7+6gfALl23f7ZgFQYQ7hG0cEXGVu8KvWqL3DXEHX2JA=
Subject key identifier: 8C:E5:75:62:DC:47:7A:19:C7:31:89:2F:D5:25:7A:44:F7:DE:67:49
Authority key identifier: 22:B2:7A:B0:D5:5F:8A:E0:DD:A8:6F:DE:F1:C3:57:24:E1:88:5E:4F
Certificate issuer: /CN=22b27ab0d55f8ae0dda86fdef1c35724e1885e4f
Certificate serial: 019A725C3C4A192417E15B6E82B44C71C8DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
Manifest number: 06A0
Signing time: Tue 11 Nov 2025 10:00:38 +0000
Manifest this update: Tue 11 Nov 2025 10:00:38 +0000
Manifest next update: Wed 12 Nov 2025 10:00:38 +0000
Files and hashes: 1: IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl (hash: wjKeA2khw8ArAwYSl+4eTsg5A/Luq9eISer0vFiYS7Y=)
2: zXLMwVTkvtRtqBEEK8m7kFIV-bU.roa (hash: t9hVNP/nAzK1Dyce9djTLoexqpTbWSAapAI0vD+z2PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:3c:4a:19:24:17:e1:5b:6e:82:b4:4c:71:c8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b27ab0d55f8ae0dda86fdef1c35724e1885e4f
Validity
Not Before: Nov 11 10:00:38 2025 GMT
Not After : Nov 12 10:00:38 2025 GMT
Subject: CN=8ce57562dc477a19c731892fd5257a44f7de6749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:28:81:1d:06:6e:75:9a:dd:d2:5d:00:ca:29:
dc:9f:13:b5:2c:86:23:18:aa:6f:38:eb:a0:7c:ab:
0c:9f:4d:d7:99:58:48:5e:ff:bb:aa:1d:64:f0:b3:
99:da:bb:28:97:1b:9e:45:ad:bc:21:7c:78:6d:20:
4c:f8:79:aa:ab:71:01:f6:62:78:e2:67:a7:b1:ff:
d1:e5:61:39:16:ed:e6:15:0e:8d:00:56:d0:7d:0e:
c8:af:f9:41:03:8f:13:7b:14:05:9e:71:31:dd:1e:
4e:f7:3a:41:a7:34:f7:ba:c4:d1:cd:fa:5c:c1:94:
8b:ee:5b:b5:94:bd:0c:fb:82:52:17:88:bc:d5:80:
80:07:38:7b:fb:74:a7:53:37:93:1f:47:ff:6b:cb:
ac:d8:46:19:f1:cc:f3:6a:a9:d2:6b:b7:b3:b4:5d:
5a:72:d7:20:5e:04:5f:59:b5:82:4d:7b:ef:ff:fd:
f7:ef:be:45:4b:8f:34:17:a2:c4:44:76:f3:67:24:
ab:dc:3c:1f:18:b1:bb:fc:09:62:ca:b4:e2:2d:6a:
4e:25:77:f4:d5:e5:67:36:92:25:88:c9:c7:8a:13:
a4:7c:7c:1b:78:5c:45:56:d6:37:1a:52:00:7b:82:
71:c1:67:81:2c:45:25:a4:aa:d2:cd:4d:e8:d9:99:
dc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E5:75:62:DC:47:7A:19:C7:31:89:2F:D5:25:7A:44:F7:DE:67:49
X509v3 Authority Key Identifier:
keyid:22:B2:7A:B0:D5:5F:8A:E0:DD:A8:6F:DE:F1:C3:57:24:E1:88:5E:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:53:53:96:3a:df:c7:39:b0:e2:d9:b5:27:7d:d0:37:c6:65:
ce:fd:fb:bb:17:f2:fc:f3:f1:0c:71:90:60:c5:79:cb:4f:66:
fd:43:34:10:7a:6a:d5:3e:54:d2:61:2b:1b:1d:44:57:14:85:
30:1f:e0:05:22:52:5d:6e:f9:1f:de:df:ef:37:2d:94:bb:95:
1c:7d:87:45:29:63:e3:41:2b:e6:a1:f0:70:58:ef:57:e3:fe:
ea:c8:7b:24:70:f2:34:19:88:e4:18:c6:13:b6:b9:8f:64:53:
75:bd:c9:f4:a2:b8:8c:ea:15:0a:b7:1f:82:16:d6:ba:84:fd:
ea:f4:60:e3:5e:b5:9b:25:6e:4d:69:f5:a0:68:ca:c1:ff:31:
0f:81:7a:86:d7:e7:6b:e8:30:38:76:b1:d2:f7:72:19:9c:97:
8e:fb:13:ea:1a:d0:74:17:07:d3:27:7c:27:4d:1d:28:77:ba:
6c:6d:8a:29:f6:42:f9:99:fc:26:e8:91:39:4a:f3:17:17:b3:
53:c7:6d:62:ca:ee:ca:2f:18:d7:c1:38:c2:51:4f:15:69:bd:
f3:55:8b:08:64:73:e0:0e:17:10:fa:8e:3d:b2:6a:c2:10:45:
9f:8f:6c:65:be:18:45:3a:e1:80:0e:75:51:7f:73:80:8d:d4:
a5:d5:97:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:12 2025 by rpki-client