Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
File: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft (raw, json)
Hash identifier: yABZkb+4ETFVGmTMz4FOMt2wjrFX9Gyb7mD6Xws38s8=
Subject key identifier: A4:F5:F3:2A:24:52:F4:75:E1:5D:D3:5D:B7:5E:46:AB:DB:FF:6C:A7
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 019A4C610FF2064B4CD7F133AE7D0A3F606D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
Manifest number: 15B7
Signing time: Tue 04 Nov 2025 01:00:20 +0000
Manifest this update: Tue 04 Nov 2025 01:00:20 +0000
Manifest next update: Wed 05 Nov 2025 01:00:20 +0000
Files and hashes: 1: 25GdIX8pGRrdAAaubJO0FxbYG-s.roa (hash: J7SjJPVMXuJzyuyQBNTx3E62SBRqK9gpWeifxFumUs0=)
2: 6WSzq5tklzrrb4CQ30LLV8NUx2g.roa (hash: UmnImARopszt+4WaNMMPCsufWGExd3hc37DvZdbg1tI=)
3: 8ROo1-f7zOJ7IGVOmN_RufzzbRg.roa (hash: 0g/v1GDnSb/mpf5pKYYz9HEAiGcoNER98ihb6wrQqWo=)
4: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl (hash: co2apmZx1FL4phR9RFQ0CJYDrDQIfSg9U8dSSakxxlk=)
5: OREDNoQ0vwPI3XM_zRsW3yzoE_A.roa (hash: 1cT3zKRDrAQDDxV5Rq7SD/mINGk0AiyR89E6Ur7LkVA=)
6: mQQXMqosDbrfiBBQFe3pss-9NtQ.roa (hash: qAb1oy5TaR+lNTajDgndtpEVHAu7ZMdgoTop9g6Wh6Y=)
7: uSaVwi6W5g3viY9NscHN3tqDzCk.roa (hash: t4D+qU5YVF27z4TGr3wG3ucQjp23my4+sKI2eFqOYYg=)
8: uumQQQ1viq_-gfcaqAufH6g_C7w.roa (hash: AM9mJlfYhSa7Wcw8Wx9nTWnnL8T0GQwXceLp5ft6/NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:0f:f2:06:4b:4c:d7:f1:33:ae:7d:0a:3f:60:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Nov 4 01:00:20 2025 GMT
Not After : Nov 5 01:00:20 2025 GMT
Subject: CN=a4f5f32a2452f475e15dd35db75e46abdbff6ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:92:90:99:c4:68:b3:40:f4:d2:61:60:eb:38:
9c:bd:d5:4d:af:60:64:88:2d:25:c5:2e:5c:06:3a:
cd:11:5a:2f:a5:ee:71:cc:3f:d5:43:8c:b2:ea:4e:
78:f3:91:41:dd:68:75:7d:d2:99:1d:a3:9f:bd:d1:
a5:93:61:f8:fa:85:a8:78:1f:a6:f5:cb:14:49:54:
dd:d6:61:53:5f:50:f0:f3:eb:ed:36:9e:d7:de:4b:
ab:28:4e:1d:04:bf:3f:1e:a4:91:a8:3a:9f:1b:4f:
66:69:b1:18:15:c6:d8:45:06:33:de:7d:5d:ce:e9:
4d:1d:44:b1:85:5c:5f:dc:83:08:49:e4:50:c1:55:
8f:dd:db:f3:21:33:1c:ca:ae:76:7e:6a:67:ee:25:
45:9d:d5:37:70:4b:9c:22:34:38:02:71:c4:63:f5:
41:35:88:d3:30:6f:f9:34:2a:c3:2d:24:74:4f:a9:
8c:55:68:a5:45:39:dd:98:85:21:2b:e9:c1:c4:00:
f9:a9:cf:f2:b5:29:f0:57:38:ac:e1:ea:c7:33:4e:
b6:24:44:dd:ae:1b:dc:f2:83:67:41:25:78:bf:49:
c6:7a:ad:db:3b:9f:31:da:9f:01:b3:6b:4b:db:5d:
33:4c:1a:5a:10:d9:d2:4a:ca:5b:4f:51:50:39:6f:
7d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F5:F3:2A:24:52:F4:75:E1:5D:D3:5D:B7:5E:46:AB:DB:FF:6C:A7
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:4e:a2:ab:53:bd:cd:62:0c:77:6e:d0:8a:6e:ec:44:a8:b8:
62:0f:3b:5f:ce:f7:5e:b2:ae:5e:b0:84:91:48:6a:95:e6:b8:
c1:87:01:e2:c3:a2:71:08:af:81:eb:e5:bb:0c:4f:d1:f1:b7:
d9:69:14:54:92:ff:11:6a:84:78:82:86:ce:de:e8:f7:d4:43:
b6:f9:3f:50:17:f6:05:66:7d:6a:64:24:ea:fa:34:e9:8f:2d:
8f:ed:ff:42:3b:4c:5d:62:aa:6c:35:d1:86:78:00:4e:4a:0e:
62:4d:14:10:82:29:ff:c5:d6:64:13:a2:45:4e:e6:73:65:cb:
47:ef:42:fb:2b:ef:d3:f4:dd:1f:c2:93:25:5f:81:02:22:b8:
1e:1b:29:3f:d0:12:ea:b8:84:07:ad:04:99:8e:46:ec:6c:a1:
fb:02:a3:aa:fb:f7:ed:11:61:62:1d:f7:be:60:15:75:0a:5d:
a3:83:ac:48:8d:5e:e9:fb:6b:d9:0e:4f:d8:91:35:ce:36:58:
dd:b9:13:90:53:89:02:aa:a2:59:8b:62:23:93:c3:a5:17:67:
c9:eb:bd:c9:1a:8d:7b:04:45:2b:02:a6:40:d4:c9:fb:7e:8d:
2d:8e:43:84:65:6d:cf:6f:a2:09:30:22:ec:cf:b6:a3:ac:48:
11:8c:e8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 02:56:13 2025 by rpki-client