Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
File: ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft (raw, json)
Hash identifier: Bg9zqCrql/VQZpCLnJukfF93YtHHpABKAWrDF0bo1OI=
Subject key identifier: E1:44:FD:FB:E1:81:C6:4D:37:91:71:82:FE:69:80:E3:34:E2:3F:E6
Authority key identifier: 8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3
Certificate issuer: /CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3
Certificate serial: 019A725C3B77D6C5E7F26178495F0743AA40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
Manifest number: 066E
Signing time: Tue 11 Nov 2025 10:00:38 +0000
Manifest this update: Tue 11 Nov 2025 10:00:38 +0000
Manifest next update: Wed 12 Nov 2025 10:00:38 +0000
Files and hashes: 1: 1iEj79HjJmqaWkGf361U7nZQikY.roa (hash: 94aaNrCAEDrHjoHsfGX3cHWK+s0OW99qZZJRJsNm9lg=)
2: ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl (hash: NqtYcF6ZxfhQDU7Vu8FokH6qwNt3RXNB40ezrv0QGXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:3b:77:d6:c5:e7:f2:61:78:49:5f:07:43:aa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3
Validity
Not Before: Nov 11 10:00:38 2025 GMT
Not After : Nov 12 10:00:38 2025 GMT
Subject: CN=e144fdfbe181c64d37917182fe6980e334e23fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f4:89:8d:16:26:dc:b9:a3:dc:58:30:41:59:
61:11:1f:46:10:dc:3a:c8:2f:b7:4d:b7:a2:e6:ec:
ca:5b:88:03:45:00:57:0a:d5:04:13:42:72:36:cf:
97:15:77:13:59:5d:15:8a:56:fb:3d:b1:24:df:47:
83:6c:1c:e9:5a:da:78:90:a1:e1:35:cc:0c:e3:1a:
74:2a:f8:4e:56:3f:1a:52:da:92:04:e7:e0:0e:15:
7b:c4:5f:e9:eb:ae:f9:9f:9d:43:d7:f1:8a:dd:9b:
41:cb:c1:a5:66:3a:b1:4a:95:d5:d2:04:b8:f8:ce:
18:e8:50:d3:bd:4f:ad:5a:b3:9f:50:95:ed:45:6e:
bb:fa:67:8c:43:fd:d7:2d:93:4b:b4:50:e4:b1:db:
f5:4a:21:c3:7d:dd:2d:3e:57:f3:2b:f4:2f:49:b6:
34:3b:01:d6:58:8e:c7:55:2c:00:54:54:6b:c3:43:
53:d6:00:7b:bd:e8:ba:d3:db:dd:ea:d8:95:8e:77:
f6:0d:13:cc:11:95:3a:3b:c9:c6:e9:a2:8d:7e:6a:
0c:f5:ff:93:1a:fb:5b:df:1b:e9:9c:90:48:01:b6:
cf:65:db:cf:9a:79:66:9a:d9:6d:dc:b2:d7:56:fb:
9f:fd:a7:00:35:7f:2d:16:1f:75:b1:85:9a:32:6b:
5a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:44:FD:FB:E1:81:C6:4D:37:91:71:82:FE:69:80:E3:34:E2:3F:E6
X509v3 Authority Key Identifier:
keyid:8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a7:62:ff:39:d5:70:4e:08:7c:18:58:fa:72:88:f4:24:f3:
5b:53:a8:d1:ee:e5:7c:e2:4b:6d:d4:77:99:e7:cf:46:4d:df:
72:66:9d:64:f5:e3:6c:55:73:10:66:ff:d5:52:6f:21:25:6a:
a1:05:b5:3a:68:9e:8d:c7:8f:a5:d3:2d:9f:c7:ca:73:a6:94:
77:b2:d3:5d:ad:b6:fa:ac:a5:27:45:a4:4a:59:2b:e7:c8:58:
e6:bf:25:e3:5f:c9:1f:d1:28:33:9b:b2:9a:65:32:c5:bc:08:
bf:e5:b3:15:e8:ae:6b:8a:52:84:1e:fe:40:64:43:d1:f2:f1:
c0:96:b7:b3:90:91:2a:97:28:c5:9c:09:5d:9d:9a:84:3c:7b:
b9:42:22:3c:c2:fb:ff:39:31:c3:9a:21:2a:7f:54:52:7c:09:
e7:24:e4:a9:3c:64:07:0c:5b:ee:53:f2:09:69:5c:b7:00:dd:
0e:f3:5a:f8:25:e2:f7:05:a6:d1:6d:95:10:ea:40:43:e7:81:
d4:b5:50:bb:db:8f:2e:e7:18:bb:54:d8:44:2f:c2:33:ea:06:
9b:6b:21:02:96:e5:92:ba:fd:b1:ee:ff:0b:0b:46:2a:f3:c1:
69:4a:40:a6:45:6e:1e:25:55:fe:87:dd:65:a7:15:28:2b:ad:
04:0c:b0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:47 2025 by rpki-client