Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
File: ioludoVA84eh3U_52qS4W6SKkG8.mft (raw, json)
Hash identifier: 9QjnMU1rq5a8RY1sCNnf59PSt55mtkHf0677uJg8wwc=
Subject key identifier: 16:7E:B7:A3:C3:BE:CE:56:FC:FC:A0:76:20:34:1D:EF:CE:65:ED:1A
Authority key identifier: 8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F
Certificate issuer: /CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f
Certificate serial: 019A71B8C80419F60DB7E5D0071A1EC9C57B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
Manifest number: 1062
Signing time: Tue 11 Nov 2025 07:02:06 +0000
Manifest this update: Tue 11 Nov 2025 07:02:06 +0000
Manifest next update: Wed 12 Nov 2025 07:02:06 +0000
Files and hashes: 1: hkbUVfjNOPVhJfq1uQFH-hPB5mE.roa (hash: tqCspEzEqiN+432BqUgHfq1nCv1kB3CNAbRtD1yo228=)
2: ioludoVA84eh3U_52qS4W6SKkG8.crl (hash: yoyDAKtc/oZozYtfYE7OWEX+ZjAoK4rm1IOAnB69Ge8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:c8:04:19:f6:0d:b7:e5:d0:07:1a:1e:c9:c5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f
Validity
Not Before: Nov 11 07:02:06 2025 GMT
Not After : Nov 12 07:02:06 2025 GMT
Subject: CN=167eb7a3c3bece56fcfca07620341defce65ed1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ba:13:95:ae:fb:37:fe:88:7e:f7:63:86:39:
50:f8:62:0d:9c:1e:dd:29:41:a1:6a:2c:78:e2:ce:
10:25:35:e6:c6:8c:78:89:64:2d:70:57:7b:d4:58:
0c:e5:b3:6e:5b:54:73:81:1b:c1:0f:4a:f0:f4:5a:
0a:8c:bd:6e:72:fe:6d:f5:86:30:48:44:5a:56:9b:
3e:1e:54:b9:af:d7:ad:d1:22:07:3e:cf:58:54:28:
5c:37:b0:4d:4d:a0:3d:6a:5e:13:b3:dc:c5:d9:38:
e1:9d:03:83:ee:09:af:4f:35:af:be:59:40:d9:98:
77:2b:b6:68:c2:2e:4a:c6:62:22:05:92:f6:6a:2b:
bb:95:62:94:c8:99:74:78:2d:05:b1:4b:df:c5:17:
ae:01:18:5e:3d:5c:96:bd:79:f3:bb:64:03:d3:72:
67:7c:d3:62:64:e8:d5:cf:5f:b6:2a:a2:a3:58:68:
65:7a:22:67:ff:bb:32:ae:48:8a:a7:8b:6e:b3:6a:
dd:44:30:c6:e8:2b:be:15:76:d8:5d:83:d2:d9:5e:
b5:cb:e1:9f:62:30:77:8f:ae:d6:0f:51:20:9a:96:
87:e0:5c:fc:18:48:8e:54:e9:a8:6c:c6:ad:bd:13:
8f:e0:3a:5c:38:37:38:d5:de:ad:75:22:f4:fb:e0:
99:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7E:B7:A3:C3:BE:CE:56:FC:FC:A0:76:20:34:1D:EF:CE:65:ED:1A
X509v3 Authority Key Identifier:
keyid:8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:76:26:4f:40:dc:81:c7:0d:e6:b2:55:6f:c2:6e:2d:da:66:
0c:0f:d5:33:ec:e6:fd:87:bb:9a:65:3f:5e:65:2c:87:cb:13:
71:2d:2f:df:db:96:40:a2:76:40:d0:4b:02:22:fd:0a:48:6c:
7a:39:2d:aa:e2:25:6e:7d:51:64:a7:7b:ee:ac:60:6e:89:43:
8e:27:63:75:0c:52:5f:98:b8:c7:86:52:ec:a5:5e:08:a0:c1:
8a:5f:be:e8:68:ae:79:90:11:e1:b8:15:d2:e4:95:0b:4b:09:
8e:c5:bf:57:29:a0:6d:3b:d7:29:b5:dc:7e:10:4d:d5:d5:0a:
21:bc:84:47:6f:11:b0:c7:22:19:c2:9e:d4:37:c3:e4:62:8e:
10:d2:8e:95:18:ae:8e:a8:c6:cd:b8:63:7e:c2:7e:d1:4d:41:
88:92:a4:27:fd:75:86:27:26:ec:ff:76:5d:37:15:8e:b4:b1:
73:88:4f:b1:4b:4f:d4:9c:4d:ab:66:b5:58:99:ec:db:0f:18:
92:e8:a1:fb:f9:c4:d4:ca:0a:cb:fa:48:ed:67:4e:79:62:d6:
c4:aa:6e:e4:c2:bd:c3:5d:c7:da:77:7c:8b:92:a3:ea:6a:56:
0f:36:3f:c5:85:62:e7:1b:de:f6:dd:71:d2:2a:75:67:e3:6e:
6d:cb:15:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:24 2025 by rpki-client