Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
File: I3CEcS_euxv8WowCYtkZqKpEBgM.mft (raw, json)
Hash identifier: XQxQQywMO9sboKQYW5jacnfN5Bj2+12+7zI4A9V92XM=
Subject key identifier: F3:43:D7:D0:29:64:8E:28:4F:B5:96:02:F5:6B:DF:55:B3:50:32:AA
Authority key identifier: 23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03
Certificate issuer: /CN=237084712fdebb1bfc5a8c0262d919a8aa440603
Certificate serial: 019A725CF894F30950A47C43D8B7F9A1636F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
Manifest number: 172B
Signing time: Tue 11 Nov 2025 10:01:26 +0000
Manifest this update: Tue 11 Nov 2025 10:01:26 +0000
Manifest next update: Wed 12 Nov 2025 10:01:26 +0000
Files and hashes: 1: I3CEcS_euxv8WowCYtkZqKpEBgM.crl (hash: 151obnrekpzdghGq8aEAHNt+ghYocIYSRQ3YlhFNglQ=)
2: VjhlG8a2ZawkNaB1appig3Nz2is.roa (hash: gke6BC6KbRZ7BZ8YEtQe4nlgcZZfU/kgtOMqrBXfKKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:f8:94:f3:09:50:a4:7c:43:d8:b7:f9:a1:63:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237084712fdebb1bfc5a8c0262d919a8aa440603
Validity
Not Before: Nov 11 10:01:26 2025 GMT
Not After : Nov 12 10:01:26 2025 GMT
Subject: CN=f343d7d029648e284fb59602f56bdf55b35032aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5e:9e:a8:27:85:6f:c1:a7:f8:c4:ce:95:8d:
f0:ae:b2:68:4c:f6:a6:58:a8:eb:3d:97:d2:32:d6:
18:6b:c2:08:39:9e:8f:d2:ef:8c:f7:39:17:98:77:
81:b5:ca:fc:cb:18:27:17:34:f9:3d:0e:50:57:d5:
e8:09:98:39:cb:fb:cc:32:73:c0:bb:8f:f1:37:4f:
21:a5:c3:ca:64:0d:20:49:69:f4:a9:99:c6:a9:54:
50:50:de:07:b9:c7:00:9b:9d:6b:07:9e:0b:e9:bf:
43:25:7e:74:13:f7:49:d8:f9:32:b9:0d:25:01:1e:
82:e7:f9:9f:ac:e5:a0:a7:51:8b:86:d6:14:6c:6e:
78:ea:9e:cf:5a:92:1b:12:b0:a5:ca:98:a6:2a:7e:
8d:49:83:41:27:f1:e0:a2:64:5a:24:97:fa:dc:b6:
83:c7:6d:b6:9f:64:c8:f2:16:29:ac:01:45:8e:0b:
3b:a8:99:6d:73:f8:6a:b7:af:63:c5:b5:fa:ef:6c:
0e:44:ea:df:14:fa:ca:df:a4:b1:31:ca:25:75:45:
b9:d0:d8:43:83:7c:13:1b:4a:fa:38:b4:83:86:a8:
c2:5b:25:ec:20:2b:41:10:be:8a:f4:be:ad:9d:df:
70:da:91:42:53:a8:a0:fa:0c:36:6a:24:7b:2d:3b:
03:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:43:D7:D0:29:64:8E:28:4F:B5:96:02:F5:6B:DF:55:B3:50:32:AA
X509v3 Authority Key Identifier:
keyid:23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b0:41:1e:ac:92:01:d1:58:81:c4:d2:fe:f6:ba:79:e7:c1:
b8:22:ba:86:09:dc:62:60:62:3a:6d:d8:be:c4:3c:3b:71:62:
25:cd:5d:d0:81:ae:4c:4b:e4:bc:8b:8d:73:03:fc:a8:77:a0:
fe:ee:58:fb:bd:7f:2a:d2:3b:0d:b6:6b:6c:ce:c0:27:ed:c4:
c6:84:8f:6f:a3:e9:ec:8e:76:b6:49:15:c4:24:71:11:f7:16:
77:59:c4:3e:f3:3b:1c:fc:76:ae:a9:d7:1e:ff:98:a9:e3:d2:
9b:b4:ec:ec:9b:13:0e:aa:f3:17:60:76:93:75:4e:bd:f8:7c:
63:da:d6:0a:50:d1:4b:32:03:81:50:9a:02:6a:da:9d:d1:cb:
58:bd:96:5b:46:4c:5d:75:37:be:83:b5:b5:88:b1:33:f0:f2:
22:ea:70:6c:c3:d0:09:2d:50:4d:b1:aa:0c:a8:e9:ab:9a:61:
87:d6:40:98:db:df:bd:2b:bc:eb:d3:56:73:52:d4:42:12:7d:
91:d1:dc:5f:ad:08:84:1b:d3:de:ce:04:22:2e:6d:c9:41:df:
05:3d:a8:bf:a9:10:c2:fe:81:d1:1a:17:f7:8f:07:43:2e:4f:
77:6b:70:d8:c0:ed:22:c1:83:c2:3f:14:19:0e:7e:c7:f6:78:
21:04:ea:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:50 2025 by rpki-client