Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
File: I7oexPA1py36OekwrY7FQ2jrevQ.mft (raw, json)
Hash identifier: 6dvQKxBUngnLTFehG3ilm6OFkdrXdjBcKR7704bYvhw=
Subject key identifier: 06:D0:92:27:E6:CE:54:98:50:02:7F:D1:91:7B:0F:4C:C1:E8:E7:79
Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Certificate issuer: /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Certificate serial: 019A71B88A558CB4B0C919C62BC840025B29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
Manifest number: 1725
Signing time: Tue 11 Nov 2025 07:01:50 +0000
Manifest this update: Tue 11 Nov 2025 07:01:50 +0000
Manifest next update: Wed 12 Nov 2025 07:01:50 +0000
Files and hashes: 1: I7oexPA1py36OekwrY7FQ2jrevQ.crl (hash: KpMMq8P4YK65N4dwqAchvzhJVgsRBVOleTIEci0OXoQ=)
2: LrVwKiIfML7mAYKSwQjrFc9mp0A.roa (hash: pqGsuXC48BK/nJrmWeripHJL6964Try+bgZKQC5cMuM=)
3: bKwA7ygctFGfYxj37Ulrjy4h7wc.roa (hash: wDr01UuqGpYUgCW7TRCxOE6weB2OEkQge2nt3Tah0ms=)
4: b_MmvUZfA5ZZF4bFCypyK1p5UMI.roa (hash: 9E4PGJ6w5hYLiKvYcuEqwE8eKmB9cOnevFWIyVMZhgE=)
5: wmfmaFsDhu27cNgPElAJRkA9d2A.roa (hash: jsS53vdJzXk5aLl615moQFBVWf7IQgXR2RroQvAW/zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:8a:55:8c:b4:b0:c9:19:c6:2b:c8:40:02:5b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Validity
Not Before: Nov 11 07:01:50 2025 GMT
Not After : Nov 12 07:01:50 2025 GMT
Subject: CN=06d09227e6ce549850027fd1917b0f4cc1e8e779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4c:e7:78:cd:e3:1c:91:86:fa:cb:1f:19:d7:
81:dd:23:07:da:4f:b6:d0:a8:a7:7c:c9:17:35:61:
70:d8:62:3d:30:dd:a8:64:25:15:d5:f1:b6:fe:af:
ac:fb:fa:0d:5a:52:c0:b5:49:ed:0f:5d:d0:fe:82:
50:b5:ec:53:b4:1c:24:34:dc:1a:52:1b:2b:33:32:
8c:f4:85:c5:e2:90:c6:bc:d6:1e:46:ab:5c:b7:35:
9e:44:c9:c8:82:d2:f7:9a:67:02:77:76:a4:08:a5:
4d:88:c8:7c:6e:04:0d:06:55:3c:fd:ad:82:1c:a3:
af:1e:a3:e2:4b:64:cf:75:0a:02:72:2d:6e:fb:94:
df:9c:53:27:6c:e7:52:dc:dd:07:50:85:f9:31:5f:
0b:d8:b9:b1:9f:f4:5c:25:4c:fd:f9:bf:c8:44:5d:
e4:f6:2f:99:bc:e9:a8:32:ee:97:20:7b:51:1e:15:
ff:08:ea:0d:38:6a:56:d4:8f:6c:b3:eb:b9:06:a0:
68:ea:b6:ea:44:ce:64:fe:63:6d:2b:c1:74:02:cd:
34:73:24:a6:73:59:24:a6:6e:c2:5e:0a:9d:d6:38:
29:71:27:f8:71:4c:fa:7f:d9:88:a2:33:2e:1d:fb:
86:4d:84:a3:1b:7c:19:d3:83:ed:aa:8f:04:24:fd:
e7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D0:92:27:E6:CE:54:98:50:02:7F:D1:91:7B:0F:4C:C1:E8:E7:79
X509v3 Authority Key Identifier:
keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:9e:ad:b9:22:6b:cd:54:d8:6b:fa:4a:a5:ec:5b:61:3f:26:
c9:85:c9:88:2e:8c:68:8b:23:0e:62:6a:cb:be:40:20:fa:d6:
d5:0b:46:7d:b7:84:fa:d7:05:43:25:45:85:bf:1e:56:93:81:
f4:df:21:c5:89:61:28:de:96:95:da:4e:4c:3e:56:a3:40:92:
53:79:b3:73:5a:1c:90:6f:60:42:80:cd:5b:82:54:20:8d:09:
38:ac:d9:96:86:6c:9f:f1:ce:fc:32:e6:20:06:16:88:a4:f9:
f6:df:c4:4b:b1:61:8d:20:0e:53:6d:c6:f7:58:7d:64:9f:dd:
96:7d:d2:c6:b7:0d:5b:42:a3:1e:26:11:e5:87:f3:7c:4b:9d:
e4:82:59:6e:47:15:2e:c8:3b:e4:79:d1:34:85:3f:6f:3e:5b:
39:cc:24:77:09:0a:76:ca:d4:f3:14:c0:cb:f7:e1:7e:0c:eb:
eb:37:1d:f3:d4:98:01:de:2a:a0:4a:42:27:cf:fb:2c:1a:d2:
c6:af:79:c3:ee:de:1c:e8:1c:97:e5:c8:7e:76:5f:2d:6c:d1:
0f:4e:02:08:f8:30:a5:a4:59:56:3a:b4:06:2b:27:f9:bf:71:
68:0b:b9:69:fd:3e:eb:e8:2d:50:f2:84:9b:4f:48:c0:1f:de:
64:59:90:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:16 2025 by rpki-client