Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
File: ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft (raw, json)
Hash identifier: xnGBvU7S5yj9MMKoL8UDrlenutFRQWYNgDzLcmfWNqY=
Subject key identifier: D3:26:52:B8:6C:6D:B2:E2:C2:C8:96:76:2B:69:26:D8:7A:14:60:A2
Authority key identifier: 8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
Certificate issuer: /CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Certificate serial: 019A71B821D2F1AC9197FEF1F99D9D6178C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
Manifest number: 104C
Signing time: Tue 11 Nov 2025 07:01:23 +0000
Manifest this update: Tue 11 Nov 2025 07:01:23 +0000
Manifest next update: Wed 12 Nov 2025 07:01:23 +0000
Files and hashes: 1: ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl (hash: VD//EtldBlzHNyQFT6C/rbT4UR6C/8pL5A07iFcfV8E=)
2: iwkNh3UdWwUz0vScU_NmxlT_kd8.roa (hash: qTLgYZEDj5/iSNL5ILw19yNSQMcWNUWUNm12d5bZdjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:21:d2:f1:ac:91:97:fe:f1:f9:9d:9d:61:78:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Validity
Not Before: Nov 11 07:01:23 2025 GMT
Not After : Nov 12 07:01:23 2025 GMT
Subject: CN=d32652b86c6db2e2c2c896762b6926d87a1460a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:45:53:ed:81:cb:2b:46:8b:8b:4d:4f:17:41:
f0:db:e3:3e:22:8f:55:a0:76:23:60:d7:84:40:8c:
41:b6:d2:d9:24:4b:de:0f:48:33:be:00:92:c1:a7:
a7:76:d5:bc:13:38:b1:79:c5:eb:31:02:fb:e8:ef:
b2:5a:e7:b2:65:5f:72:c1:91:05:01:a3:7b:8c:c9:
84:1c:75:bd:1c:ad:ba:dc:d1:79:71:74:68:fb:67:
31:01:af:c8:d6:d7:2f:8b:84:22:97:da:24:8f:d0:
dd:a5:b5:ea:f0:38:1b:05:e7:e9:4b:a3:02:4d:b8:
fc:33:58:3c:96:65:6b:2b:d1:b1:85:6a:45:e3:94:
6c:52:7f:69:80:28:65:92:83:c0:2b:68:e8:2e:68:
82:9a:6d:f3:32:2d:48:67:41:8c:f0:8a:5b:97:dd:
eb:9b:a4:0d:9f:49:50:a0:e3:f4:27:11:34:23:84:
30:4d:fa:2f:b3:3e:79:55:13:a0:8c:9a:be:3e:fe:
7d:cc:74:8f:9c:00:67:71:a3:e5:11:54:7a:ac:47:
b2:c3:70:97:dd:e2:c6:c6:cb:cb:4c:91:c6:45:b4:
71:df:07:de:67:8b:66:ae:7d:b7:22:8f:b3:e6:26:
b0:de:a5:1c:03:e2:54:5e:31:43:3b:e5:b9:2f:92:
65:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:26:52:B8:6C:6D:B2:E2:C2:C8:96:76:2B:69:26:D8:7A:14:60:A2
X509v3 Authority Key Identifier:
keyid:8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:13:ba:8a:38:5c:55:92:53:ba:39:8e:f5:a3:dc:41:f5:7c:
ed:42:e7:66:c9:1f:44:21:ba:e2:97:28:f9:cc:4a:04:f9:cd:
15:e1:2e:b4:7a:9d:a5:3d:4f:73:c8:3f:b2:ef:61:90:9e:91:
f6:e5:1d:ab:1f:5a:12:75:7d:3c:66:12:b3:78:33:5e:2f:55:
e4:3b:23:15:ed:c8:43:c2:cf:aa:73:58:93:f7:fe:0b:a4:a5:
03:4d:e0:5f:12:b5:41:15:5a:16:f6:82:5b:4d:f4:ff:87:d3:
30:f8:20:3a:57:0e:a5:22:8e:e7:8d:c2:76:86:95:6f:71:ce:
4b:4b:63:9d:37:4e:be:f4:f1:8a:9e:f1:cf:7d:af:aa:77:69:
fb:2b:2a:19:b2:17:08:81:d4:fa:35:12:43:af:d6:94:93:2e:
d1:62:06:6c:c8:85:3a:9f:c5:d1:a4:16:60:3f:c9:81:65:6d:
be:3e:e4:0a:32:40:96:db:c8:df:34:33:44:6b:8e:a4:a1:e3:
75:bb:d8:e3:b2:8d:2c:ff:f2:19:27:b8:72:c3:b2:8d:f8:11:
b4:8f:bb:38:cf:b7:4a:47:fe:75:f2:52:4f:aa:a3:d4:ae:ec:
5d:fc:37:52:ae:51:27:59:31:20:f9:44:53:93:e5:0f:7f:27:
c9:ff:74:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:46:43 2025 by rpki-client