Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
File: IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft (raw, json)
Hash identifier: YoAINn4RuIHWUkHog6N5zsvuY8M/Tb0szGHRBZGh+5o=
Subject key identifier: 20:8E:BE:2A:98:C0:64:6B:ED:04:12:30:10:CA:E6:F7:47:FD:7E:BA
Authority key identifier: 20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
Certificate issuer: /CN=200585361d51a72e7ba6308c0ceb160244831178
Certificate serial: 019A706E8C3BEFCB1E8043692B91295DF782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
Manifest number: 0851
Signing time: Tue 11 Nov 2025 01:01:24 +0000
Manifest this update: Tue 11 Nov 2025 01:01:24 +0000
Manifest next update: Wed 12 Nov 2025 01:01:24 +0000
Files and hashes: 1: HbRQpBgObvXEU2PlNrEx4IzYigA.roa (hash: Zv7kNMXOsdDw3zZwNDMjdGrZy1Nvjep0YaEbodwv3Qw=)
2: IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl (hash: ekOCvinQTM9F0QVRtcnNLMbwDhKzI86SP3mH6e3vFYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:8c:3b:ef:cb:1e:80:43:69:2b:91:29:5d:f7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200585361d51a72e7ba6308c0ceb160244831178
Validity
Not Before: Nov 11 01:01:24 2025 GMT
Not After : Nov 12 01:01:24 2025 GMT
Subject: CN=208ebe2a98c0646bed04123010cae6f747fd7eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e8:8e:a5:9b:d5:5e:57:a9:80:2c:0b:fe:f8:
ba:fc:7a:8b:32:31:1d:7f:14:ea:f3:c8:be:08:2e:
31:3a:55:a7:3a:79:e3:4e:02:df:42:96:45:13:c8:
85:95:9c:30:bd:96:2b:53:f8:81:07:53:69:48:49:
f8:d6:cb:30:f1:d2:1b:f0:dc:24:e2:36:d2:46:55:
86:0a:e8:ec:d5:5f:72:2d:fc:bb:3e:94:84:c8:4d:
1f:4c:a8:bd:2f:99:10:b1:9a:f0:9e:30:0e:fe:52:
cf:97:88:eb:40:46:21:a1:e0:12:a0:92:e1:6e:39:
64:26:2d:4c:4e:9b:a0:56:1e:c7:0f:26:b3:94:60:
38:ff:12:26:d0:15:e1:94:83:a2:e4:bc:f3:cc:ec:
db:fb:1f:b3:ce:df:19:48:cd:0a:fc:a0:ed:0a:15:
03:d8:cf:6b:75:55:37:3f:cd:27:29:b2:cf:a0:cc:
3f:03:1e:bc:2c:2b:be:96:18:82:27:c8:21:b4:4a:
af:78:52:4e:e3:af:01:03:ce:e4:34:99:de:e3:67:
89:2e:d7:58:be:4e:37:2f:c4:2d:9c:8b:c4:0a:27:
21:b4:b5:01:ba:dc:6a:9d:7f:ed:d4:b8:1b:b9:93:
e0:4c:f7:4f:84:87:0e:ad:93:2c:50:a5:a6:eb:de:
d0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8E:BE:2A:98:C0:64:6B:ED:04:12:30:10:CA:E6:F7:47:FD:7E:BA
X509v3 Authority Key Identifier:
keyid:20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:aa:3e:bc:c3:0b:20:ac:8d:18:e7:0f:3d:68:84:ac:48:6c:
d5:cc:06:f6:36:db:6e:20:0f:e6:89:06:1b:24:33:84:9d:c2:
3b:95:66:1f:9f:f8:22:33:fc:86:19:81:5b:93:c2:bc:18:42:
19:ce:46:35:82:62:16:e2:8b:4a:8e:e8:e9:95:d9:d6:74:39:
de:c6:e6:76:15:6f:ff:8a:8c:87:fd:e2:35:80:b4:45:dd:51:
fc:58:40:c7:74:91:b5:62:8f:40:2b:64:30:00:ec:88:3a:f2:
d5:8e:56:50:8b:09:63:cb:24:7b:a3:4e:a2:15:0b:7f:21:a7:
c7:18:6a:c8:c0:15:9b:f5:ee:d1:8f:2c:c8:34:55:1b:ad:35:
11:98:1f:cd:f7:75:35:ab:57:b4:c8:45:ed:34:6b:ba:31:19:
f4:84:47:eb:cd:67:59:7b:d7:e1:0a:c0:0a:b1:af:89:63:5b:
71:a4:cc:7c:2d:7d:54:17:6a:3b:28:30:54:52:9e:bd:08:34:
1f:26:8b:f2:44:f6:c2:fc:59:9a:df:91:e7:32:b3:7c:6d:e4:
ad:cc:19:b4:3d:a1:eb:35:7f:4b:00:0e:96:c4:b5:c4:8b:5b:
23:b3:1a:78:0b:54:db:a9:ba:0d:5c:b5:6c:7f:55:af:77:b1:
4d:a0:28:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:53 2025 by rpki-client