Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
File: 1IVR4mFps7PhJPaWTicC6VdoJT4.mft (raw, json)
Hash identifier: sthP4q2e2gFROFdqbkkamwi7rOrffbSUpobTyhdHSag=
Subject key identifier: 40:F4:A1:77:34:B7:63:D9:14:2C:C8:9D:91:39:04:C0:F2:1E:56:BE
Authority key identifier: D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
Certificate issuer: /CN=d48551e26169b3b3e124f6964e2702e95768253e
Certificate serial: 019A2E205833358837F21ADB5F5A685152F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
Manifest number: 0717
Signing time: Wed 29 Oct 2025 04:01:02 +0000
Manifest this update: Wed 29 Oct 2025 04:01:02 +0000
Manifest next update: Thu 30 Oct 2025 04:01:02 +0000
Files and hashes: 1: 1IVR4mFps7PhJPaWTicC6VdoJT4.crl (hash: MG3Lm1T3n1+qC0faPUqXtI5HI4V6rqyY3kVyUKRHfLc=)
2: 1egEAWTQi1OcNU0W_rjr_CRLdbs.roa (hash: LHe616pBcv+bCNyg1cs6z4IxwstMXXlrnpuBdg2aZbs=)
3: 3ojh0vwmWGR8R130UvEk1Ukeno0.roa (hash: /WfyicFmwcjSGtw05lqyqsVoIK9F8QUQc2+NhhBmMwI=)
4: dwkbDumHfM-fJPhQnf3bRCy2PjY.roa (hash: aIk07HBkaBzs1F02NTAQLrtiIZZaDl8SPQXuogtqsw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:20:58:33:35:88:37:f2:1a:db:5f:5a:68:51:52:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48551e26169b3b3e124f6964e2702e95768253e
Validity
Not Before: Oct 29 04:01:02 2025 GMT
Not After : Oct 30 04:01:02 2025 GMT
Subject: CN=40f4a17734b763d9142cc89d913904c0f21e56be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:df:be:23:0a:5f:38:36:98:e2:d8:8c:45:ad:
3a:4c:ca:b2:ff:08:3b:34:8d:c1:0d:00:43:60:5a:
06:69:06:b4:c4:45:20:ce:83:a1:6f:46:c4:ce:ee:
f0:95:64:7c:3e:c1:5d:3f:7e:35:64:cd:4d:0d:2b:
ce:16:13:c3:72:2f:34:02:ac:5f:18:c3:86:d1:fd:
f1:90:6e:e6:6e:5b:54:5e:32:e7:77:d0:61:ee:ec:
7f:48:27:e7:d8:eb:a3:2d:09:b4:07:7e:ab:fa:0e:
9c:59:f8:2a:3f:08:aa:3b:65:31:52:e7:50:61:20:
30:9c:4a:22:dd:6a:32:56:5d:bb:a7:81:82:3f:38:
6d:16:60:74:7c:02:02:a7:99:3e:48:0b:ce:7b:b0:
c4:1c:a5:37:25:8a:b6:3e:a7:09:02:60:21:1d:3b:
ba:54:8b:fc:3c:1c:62:ab:de:02:02:70:ef:20:eb:
8d:95:1c:d5:a3:cd:2b:e3:45:20:11:68:03:f8:e3:
ab:fc:df:e9:7a:ca:4a:5e:8c:4c:d1:df:87:d4:fb:
9e:e3:b5:1a:52:de:76:4d:2b:81:99:02:22:2e:db:
62:ee:50:86:07:15:4a:68:e4:05:2c:89:2f:7e:5a:
f4:03:84:19:28:93:80:0a:29:cf:8e:ee:b3:95:84:
af:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F4:A1:77:34:B7:63:D9:14:2C:C8:9D:91:39:04:C0:F2:1E:56:BE
X509v3 Authority Key Identifier:
keyid:D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:bc:fe:db:1e:b3:f5:b1:d3:aa:81:fb:36:77:fa:6c:25:20:
83:76:88:27:6f:60:74:44:2e:6e:b6:68:2b:90:23:b6:cb:66:
dc:6d:ae:b5:b9:b6:32:15:40:8a:c0:26:f6:1e:1b:1f:70:ac:
87:8e:1e:56:af:cc:a9:c1:60:7d:85:3f:e4:c0:97:c1:95:02:
a8:8a:42:76:3a:39:50:cc:55:18:1d:13:38:18:89:d6:ba:1c:
da:e7:4c:2a:dd:de:2e:41:90:08:dd:55:4d:b5:b9:78:44:a8:
86:8d:b3:1a:e6:db:c8:9b:54:b1:d7:a3:36:24:31:d1:b9:19:
42:69:c5:4b:aa:43:56:d6:75:e9:d0:9e:be:75:e4:af:5b:fd:
69:f7:58:5b:b3:db:3d:43:8b:77:85:7c:b2:88:6d:82:b4:ee:
bf:40:ed:3d:a7:29:d5:81:9f:9f:51:e4:ac:96:71:c8:e1:b9:
39:b7:75:f9:28:9a:ae:f8:32:39:10:e3:d1:60:33:a3:e9:b9:
61:0f:24:7d:4d:5e:f7:ce:df:37:20:60:a5:c4:61:7e:28:4f:
9c:b3:26:79:e7:8e:7c:ab:ca:7c:1a:9a:e2:4a:b9:50:bf:12:
c9:8e:90:0a:0d:e4:a5:33:2e:11:5f:03:a5:fc:6e:3f:4c:fe:
6b:2e:fb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 05:49:58 2025 by rpki-client