Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
File: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft (raw, json)
Hash identifier: JjdLLDVuv/O3eX+AUlpwE1T+5hy6cFs8WSFqrqnzsx0=
Subject key identifier: AC:D7:29:11:45:58:C1:E8:C2:14:9A:B4:80:BE:E2:F8:98:D7:49:95
Authority key identifier: 88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
Certificate issuer: /CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Certificate serial: 019A71B7E382CA7A87E2B0C0BF0E881AD743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:01:07 +0000
Manifest this update: Tue 11 Nov 2025 07:01:07 +0000
Manifest next update: Wed 12 Nov 2025 07:01:07 +0000
Files and hashes: 1: YOyr4rKnnzDrXdmtMOktrTLMhdg.roa (hash: 9XaoEGH44aifrIE9gnosDm/sLWWt90nSBonwPhD6BKU=)
2: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl (hash: vqiT4fpcqQHoNOmv+FWkg7nLOqPucaqpAz3vhFOK3E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e3:82:ca:7a:87:e2:b0:c0:bf:0e:88:1a:d7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Validity
Not Before: Nov 11 07:01:07 2025 GMT
Not After : Nov 12 07:01:07 2025 GMT
Subject: CN=acd729114558c1e8c2149ab480bee2f898d74995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fd:9a:82:2d:04:8f:8d:65:2a:22:13:14:69:
ac:7d:8c:bb:04:e0:86:95:a5:de:1c:9e:a9:43:bc:
4d:46:29:75:92:c9:9d:66:35:95:2b:6c:cc:f8:f3:
7a:72:98:1e:cf:3f:c8:65:16:e4:1b:e7:a5:1e:60:
d1:2f:02:54:09:c0:37:9a:fc:d3:2a:ed:7a:ae:6d:
b7:7b:31:6d:d6:fc:74:02:e5:8a:24:42:12:ae:4a:
71:9d:73:67:02:13:e3:04:d0:ce:0d:b3:8a:69:82:
30:8c:29:29:2d:1f:d6:fd:e1:2d:64:0d:b7:44:35:
d9:2b:ca:55:94:fe:ea:57:ba:9d:f8:86:e6:31:bd:
35:c0:d6:bb:82:9a:62:e0:47:35:31:1a:ae:2c:3f:
77:b7:d3:00:46:c8:6f:16:54:26:39:16:0d:9a:27:
d5:45:12:6b:dd:c0:bd:b8:b1:4f:7e:be:ce:d1:e2:
e0:90:c8:13:10:29:da:69:31:f0:01:98:06:2e:d4:
7f:c0:0b:87:ad:22:f0:07:4d:21:ad:13:08:cc:d8:
69:01:15:83:f8:e0:3f:90:c7:38:d2:cd:1f:45:ce:
ef:6f:e8:71:a9:19:b8:64:1d:d3:9a:cf:45:42:aa:
77:ae:b0:86:bf:8f:7e:03:36:53:49:01:28:2b:17:
51:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D7:29:11:45:58:C1:E8:C2:14:9A:B4:80:BE:E2:F8:98:D7:49:95
X509v3 Authority Key Identifier:
keyid:88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:05:4c:aa:c0:a0:9f:d6:d4:02:30:f3:83:0c:be:4f:0f:7c:
52:32:92:ab:87:63:da:25:94:36:7c:7b:85:8d:71:c8:1e:a3:
d4:33:65:d5:81:69:d1:1e:a0:55:28:77:03:7e:e3:4c:2c:d5:
75:21:34:ee:a1:a2:13:9b:56:ce:d8:bd:a3:75:2c:7d:c7:81:
e4:42:2a:f9:1e:2d:aa:87:b3:74:96:41:31:3f:6f:b1:1d:9e:
3e:a7:fb:4b:bd:92:e2:05:5f:f3:e0:b7:80:f0:0a:3e:af:24:
04:a4:d0:b0:aa:8a:f2:50:28:37:c8:8b:05:17:e3:e2:4d:53:
f1:be:7d:47:62:7f:75:38:ad:91:e9:c8:f0:47:8e:cc:1f:55:
aa:58:13:b4:57:ff:d4:e2:82:b6:6b:01:3d:48:ed:5b:fc:37:
3a:52:93:ca:18:13:73:57:80:f2:91:b4:20:0e:06:66:c1:c8:
0c:a7:13:82:3c:48:fa:1b:32:05:22:18:04:8a:56:65:47:24:
a6:aa:0c:8e:4c:a3:11:28:75:8b:e7:9b:de:26:d1:f8:15:e7:
8a:95:96:76:59:08:6d:c0:81:ee:8f:48:85:9f:6a:c1:70:b9:
a5:4b:b5:38:52:34:df:1c:cf:e6:71:ea:b6:7c:52:a4:1b:b5:
ac:ba:1f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:52 2025 by rpki-client