Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
File: I50GV-qu8Ja-yUsR9NadDT7QTOY.mft (raw, json)
Hash identifier: N01anQmELdgAY4ZygJS0pICsj/3YFeSBnYil5MQ0enQ=
Subject key identifier: 19:F4:13:CA:C8:DC:F1:B2:6F:4B:7C:0D:C3:07:76:23:B6:38:F5:BB
Authority key identifier: 23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6
Certificate issuer: /CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6
Certificate serial: 019A725CDD416C1EC298A7B1D9B53468A4F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
Manifest number: 1464
Signing time: Tue 11 Nov 2025 10:01:19 +0000
Manifest this update: Tue 11 Nov 2025 10:01:19 +0000
Manifest next update: Wed 12 Nov 2025 10:01:19 +0000
Files and hashes: 1: FciKzBJuJmXxMHbhg7vtxvJaFpg.roa (hash: LJXoq9acQBnheF7twxm9ozyA/I0gm87jr1W8PivL0eA=)
2: I50GV-qu8Ja-yUsR9NadDT7QTOY.crl (hash: fK1RA2DzSHTdq4xz0S7Ls+WdHr7oLfii43E2aB892CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:dd:41:6c:1e:c2:98:a7:b1:d9:b5:34:68:a4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6
Validity
Not Before: Nov 11 10:01:19 2025 GMT
Not After : Nov 12 10:01:19 2025 GMT
Subject: CN=19f413cac8dcf1b26f4b7c0dc3077623b638f5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0d:5f:71:5f:c8:c1:3f:5a:d6:c5:17:83:83:
21:8f:d5:47:35:53:a1:fe:00:c4:7a:28:58:8e:97:
d5:25:27:f2:86:6e:be:57:f5:d8:99:18:b9:52:29:
d5:17:0f:84:7b:a8:bf:12:f6:e3:e7:f6:27:6d:0c:
b5:ce:b8:04:f0:43:58:b3:7d:17:24:d9:6d:a1:51:
aa:7d:3f:80:b1:61:97:bb:20:97:33:0f:2a:b2:16:
de:1b:69:4c:b6:79:0b:19:1e:bd:07:a5:aa:39:ea:
1e:df:43:f0:f8:2e:fd:9b:85:68:a1:fc:31:af:ba:
87:58:40:ac:c0:6f:86:40:a2:6f:05:45:65:d4:06:
d4:8e:5b:b2:82:3d:69:6f:f8:ac:40:c6:3e:28:a6:
74:32:9c:e0:6a:11:4f:09:95:9a:a5:fe:c9:1d:17:
18:6c:7a:0d:69:dd:9c:d0:8d:b2:e9:4d:c8:da:5f:
74:8a:b7:56:ff:d1:37:03:52:40:ae:94:f3:05:56:
b9:97:da:ef:74:b0:7d:3e:5f:a8:1d:70:55:e3:cf:
0e:0f:00:46:c7:d3:a3:15:d1:01:da:63:01:67:27:
37:df:4a:d2:ba:fd:3e:e8:f7:83:58:be:a9:e4:32:
67:f4:a2:98:d8:21:4a:a5:f0:48:31:f2:c4:51:55:
a7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F4:13:CA:C8:DC:F1:B2:6F:4B:7C:0D:C3:07:76:23:B6:38:F5:BB
X509v3 Authority Key Identifier:
keyid:23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e6:77:aa:42:08:6f:1b:81:f8:a0:35:e4:15:5e:3c:f4:cc:
d4:97:50:89:4b:ab:49:05:ff:c9:c7:6d:69:75:96:ee:09:54:
ac:17:9e:b9:2f:63:3c:d0:8a:10:a7:3f:e9:2c:86:10:4a:7b:
6f:67:ce:e5:97:a9:7b:51:f0:c8:d2:84:b7:19:ba:f0:ef:d6:
12:f6:0e:1a:41:e2:89:15:fe:e0:c4:1f:c1:0e:b9:41:78:b3:
d3:d4:c5:4a:de:0d:75:63:98:58:f8:52:5c:94:fe:db:cc:d6:
80:8a:99:a6:42:c0:a7:d2:d4:80:86:a7:39:19:0d:99:71:8d:
b0:0a:28:da:fa:89:3d:47:d2:e6:a4:f0:55:dc:83:ac:0c:7e:
9f:7f:07:68:e1:bf:83:ce:28:bb:01:df:72:ff:01:15:cc:88:
8d:a6:dc:af:8f:87:b1:f3:ca:d2:26:10:6a:8b:c4:e2:dd:45:
01:4a:bc:0b:b8:56:a4:0d:2f:34:e4:62:31:47:dc:5f:d5:5f:
a7:60:cb:3d:b4:e9:3f:e3:86:f7:38:3d:a5:cc:d2:34:b0:7e:
fc:e1:5c:a2:a5:7b:a2:7f:79:46:d0:52:11:de:94:c9:1f:19:
14:43:12:8b:4c:46:d4:7e:a2:60:d5:d1:d9:4b:bf:5c:30:de:
3f:08:a0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:51 2025 by rpki-client