Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
File: IjbtX1Yj7et5EKzTHV9u6B5csX4.mft (raw, json)
Hash identifier: OnxjHmtRTcpt1rCSCRVO1LTMjgThD5HZz2Oy5/q8G0o=
Subject key identifier: BD:6A:15:15:E5:5C:75:DA:44:E0:78:0A:12:0B:2C:79:A6:1C:AC:BA
Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
Certificate issuer: /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Certificate serial: 019A7149A084985470747C4D39E41AD35C36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
Manifest number: 0F05
Signing time: Tue 11 Nov 2025 05:00:41 +0000
Manifest this update: Tue 11 Nov 2025 05:00:41 +0000
Manifest next update: Wed 12 Nov 2025 05:00:41 +0000
Files and hashes: 1: 2aoaMcLeoHsRYMrDwR7GYBYfV38.roa (hash: jssRFClKzuPy7Bnng6eFWBTeCatBaCf3VHUaJ2d4iI0=)
2: DY_YBD7dUEwRu5f1VApN2Xto06Y.roa (hash: kRig8nqc2JDYyWblKNLJUeoM3OkrL2nvfEXQMIcNjPI=)
3: IjbtX1Yj7et5EKzTHV9u6B5csX4.crl (hash: 5vh1U8yQwg7se8vdB2oGa7XHuRZXu2So1gkO/mM03fU=)
4: oxqh0Vlunc9_jJzsSDgtivZ6iaI.roa (hash: O+sbnF0yUj4wLiTH2KtiKCTxn2FjAX1wiARhxbkhBM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:a0:84:98:54:70:74:7c:4d:39:e4:1a:d3:5c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Validity
Not Before: Nov 11 05:00:41 2025 GMT
Not After : Nov 12 05:00:41 2025 GMT
Subject: CN=bd6a1515e55c75da44e0780a120b2c79a61cacba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c8:d3:95:e3:03:32:94:16:e9:eb:ad:0e:f1:
58:2b:0c:da:6a:6d:80:27:b6:45:0e:99:67:46:f5:
5e:de:59:a3:58:58:93:fc:13:00:85:e1:d6:64:6d:
4a:4e:d3:3f:2f:ae:8d:fc:ec:bd:86:a1:4c:a9:98:
c9:8c:d8:5b:b4:2a:3b:91:5f:9d:d7:84:13:80:e1:
48:3d:7a:d2:7a:d0:ba:c4:e0:03:8b:8d:4d:b5:f5:
82:87:b2:b3:2f:53:8b:c6:3f:92:cc:fc:fe:7f:41:
41:ae:7b:ee:e2:63:32:62:b4:97:dc:45:0f:6d:cd:
4e:10:98:15:2d:6a:1b:ac:6a:b9:db:a2:c1:c2:6f:
b8:49:e8:97:e8:1f:a1:42:af:dd:18:12:ec:a3:b1:
c5:29:16:7c:39:6b:62:a3:99:7d:e2:d3:d7:83:eb:
fa:87:af:66:4c:f4:70:85:2d:f4:9b:b6:5f:14:88:
14:c8:63:51:a1:4a:0f:c4:9a:59:a7:e8:9e:fe:f9:
16:fa:6e:00:4d:e0:13:bf:d1:9a:d8:81:6c:74:9b:
08:aa:4d:88:61:50:3f:e9:a6:84:1b:de:c6:c2:da:
05:d3:cc:fb:81:d5:b8:6c:c1:b0:26:60:4d:c2:01:
49:b5:8e:47:93:55:b4:ef:e0:71:23:b0:cc:be:8c:
86:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6A:15:15:E5:5C:75:DA:44:E0:78:0A:12:0B:2C:79:A6:1C:AC:BA
X509v3 Authority Key Identifier:
keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7f:e5:8d:c7:d1:44:9c:4b:7f:bf:83:3b:a6:0d:68:da:77:
76:a9:12:40:a2:d2:51:c1:7f:c4:ae:1e:10:3c:c9:3e:73:ef:
33:b3:fe:87:c8:40:4d:4f:50:b8:31:33:54:0e:07:c4:8b:fe:
fa:ec:1f:f4:da:f1:3a:4a:fa:87:c3:15:22:f3:6a:1d:95:d8:
46:74:b2:01:6a:b2:c9:7a:42:ce:db:ed:3b:2a:7c:d4:a1:d9:
31:c2:bf:19:b9:73:d8:c7:ae:38:f5:63:59:eb:ec:37:d1:4a:
a7:91:98:65:e5:fd:c8:9d:e6:ba:cc:74:7f:1c:b7:da:e6:cb:
66:6c:5e:8b:3c:6e:ec:17:cd:cb:01:39:e1:ce:ca:03:f6:11:
b6:84:91:bc:98:b1:8f:1f:97:72:4b:17:13:25:fe:cb:71:81:
d6:5c:78:88:78:b8:30:a3:0e:d8:07:ad:71:7a:19:02:9f:af:
2e:72:9b:15:52:2a:16:83:82:d5:9a:ed:ca:9a:80:e3:cd:88:
05:d5:07:55:78:5d:ea:3b:c1:d2:09:3e:3c:c5:6b:8a:55:cf:
4e:76:d1:78:38:27:c7:b2:20:84:01:5e:15:f2:ad:0f:26:c1:
49:b8:23:e0:60:89:65:1d:1f:35:46:22:10:54:24:9b:d9:47:
a1:38:c1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:55 2025 by rpki-client