Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
File: IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft (raw, json)
Hash identifier: 2NgP27Tk3+ORnINobVxjNqkyXBxZspb3EalaZ9womqA=
Subject key identifier: B1:4D:AD:DA:A2:9D:C6:A4:2C:12:91:C9:75:71:5F:36:6D:24:B5:44
Authority key identifier: 22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
Certificate issuer: /CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Certificate serial: 019A7149AB6018BDA4F94542B31D22DB302C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
Manifest number: 12FC
Signing time: Tue 11 Nov 2025 05:00:44 +0000
Manifest this update: Tue 11 Nov 2025 05:00:44 +0000
Manifest next update: Wed 12 Nov 2025 05:00:44 +0000
Files and hashes: 1: 1-nMAZc-5nMETLGR20qQodJXwzWs.roa (hash: eYA8AUyf83NJ/62tL4Gk8TX1qXmPj/b3h3AkumPPTzQ=)
2: 7PCtQ5R_w0udczv79LfUn6Szs8E.roa (hash: UeOrmKK9TH1L4E/SbRA8TvqgXT96VYfRkeusRGYVXmU=)
3: IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl (hash: QQOOWrK+38nHvWEuaIQ88+HKWBratjJD+5DOb4ETmB4=)
4: ayyHxivjLEoLFlxHs79jNQaOed8.roa (hash: QQS+fGK9P+7C6sfs4vGiJ9dFO6N+wnkemR+q8OHEfUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ab:60:18:bd:a4:f9:45:42:b3:1d:22:db:30:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Validity
Not Before: Nov 11 05:00:44 2025 GMT
Not After : Nov 12 05:00:44 2025 GMT
Subject: CN=b14daddaa29dc6a42c1291c975715f366d24b544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1c:fd:02:dc:87:7c:0c:0f:97:55:66:cb:7f:
b6:b5:ea:2b:83:8a:6b:10:51:65:44:42:90:19:d5:
2d:60:49:30:47:f6:ff:24:2a:54:93:b5:db:98:f3:
9f:9e:cf:8d:9a:f8:ab:2f:c8:4d:9a:42:b7:2d:bc:
20:d2:0b:6b:a8:d8:74:8f:1e:7b:8e:b4:4e:24:b8:
e8:fb:10:74:ed:87:32:e0:e0:7c:a2:55:bd:ed:c5:
45:6d:ce:ac:07:3b:b9:6b:ca:d0:93:85:77:f3:96:
7c:6c:38:21:d2:c3:0b:eb:c7:d9:10:ee:c4:3b:ae:
58:01:0c:32:63:9d:d9:32:8c:0c:08:7a:da:39:ac:
25:60:47:36:f6:e9:c5:bb:4d:1a:17:cf:e0:58:5c:
6c:be:8e:18:5e:6d:ee:06:40:6f:69:53:bc:f9:72:
4a:dd:e1:37:6c:e0:17:39:d7:39:16:09:03:e0:a9:
36:92:69:a4:b7:77:b3:54:65:bc:3e:29:0e:07:36:
09:2f:79:69:05:e5:80:ec:f7:15:c2:4c:c9:9f:f6:
70:26:17:59:89:41:22:8d:86:c9:b3:17:0a:b3:56:
14:e0:db:35:74:75:9a:e0:1d:6d:6c:89:7e:95:57:
76:a8:bf:4a:a9:91:82:18:57:5e:c8:9e:76:32:3b:
0f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4D:AD:DA:A2:9D:C6:A4:2C:12:91:C9:75:71:5F:36:6D:24:B5:44
X509v3 Authority Key Identifier:
keyid:22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b6:65:06:dd:c6:b1:1a:65:50:42:d3:04:2c:49:e9:2f:31:
33:4f:d7:27:c3:54:c6:60:6d:5f:20:14:0e:a2:17:9b:60:2d:
c3:00:9c:84:c8:0a:ed:3e:95:94:64:4f:87:bd:66:08:f6:de:
ba:1d:a4:db:b9:74:54:96:29:02:bb:36:f9:eb:0e:c6:48:80:
55:25:d1:d9:9b:58:90:b6:63:e1:86:43:80:20:20:c9:48:89:
f4:9d:63:d4:86:cb:21:8f:b0:fb:0c:a0:f8:33:a1:b6:37:9a:
d5:6d:9b:71:d8:de:be:58:47:23:1e:fa:ee:47:f4:a5:82:af:
f7:a0:94:82:0f:6d:a8:90:dc:fe:2e:ba:0b:44:4b:b2:da:27:
cf:8d:5b:e1:65:39:09:a4:b0:5b:7e:be:5c:8c:43:31:b1:99:
97:42:87:05:de:ba:aa:64:55:ba:8d:82:1b:c4:d1:7f:16:27:
20:d9:91:30:78:66:47:15:b2:15:6c:51:30:d4:06:ac:da:a5:
8b:0d:2c:5f:8c:39:21:fc:c5:65:f7:7f:f9:be:b4:a0:e3:74:
37:5c:5e:c1:f2:2e:30:bb:0c:00:85:86:f8:62:82:42:67:f5:
92:de:8b:43:85:8f:da:35:65:eb:ed:68:c2:2c:1c:83:50:ba:
70:83:45:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:13 2025 by rpki-client