Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
File: IQ2p568B3nVEj0kGqsQb0pZOiEc.mft (raw, json)
Hash identifier: 7Nmgj8424P0FA2G0qjuI4GFfbCgVoWe62eubo7rLdco=
Subject key identifier: CE:16:83:59:AA:49:A2:D5:65:6F:E0:28:1C:A9:03:25:3D:1E:16:DD
Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847
Certificate serial: 019A70DC3A343D9DC51A70AEB8D50693CC6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 03:01:12 +0000
Manifest this update: Tue 11 Nov 2025 03:01:12 +0000
Manifest next update: Wed 12 Nov 2025 03:01:12 +0000
Files and hashes: 1: 84db03xfYelGerORYCPaE18sIuY.roa (hash: mGsmynBl7jLseJdNkmqKYTcle2kapG2/B7E0rIACZPM=)
2: DWb6WF8DjwRTU0qXDx46BO4zwgA.roa (hash: CzOBQqTqajUkprVoUPDiYGmEDab6x3jR9YCHnFVJudw=)
3: IQ2p568B3nVEj0kGqsQb0pZOiEc.crl (hash: qPbd68Y7u3h14n96nKn8N0csHSMvSHw46Jp2EG41FKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:3a:34:3d:9d:c5:1a:70:ae:b8:d5:06:93:cc:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847
Validity
Not Before: Nov 11 03:01:12 2025 GMT
Not After : Nov 12 03:01:12 2025 GMT
Subject: CN=ce168359aa49a2d5656fe0281ca903253d1e16dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:00:88:04:13:57:0c:6b:4e:fe:ea:0d:86:26:
12:86:a9:45:2a:c2:1e:de:73:1a:05:f4:e0:c6:42:
7e:43:30:90:5e:c7:9e:6a:5a:de:b1:04:0a:16:5f:
4f:ca:78:b4:cc:5d:13:86:6f:ce:5b:e2:58:5c:10:
a2:f7:29:cc:70:75:e6:6e:19:10:d1:92:d8:4f:53:
6e:f8:aa:b7:35:df:ea:cc:d0:e2:7d:8c:c6:3f:d3:
cb:a6:de:7b:2b:3d:10:37:23:63:13:c1:33:63:2d:
a1:bc:e3:fb:74:72:77:4d:3f:6e:36:64:fe:53:6f:
92:d6:bd:f9:0d:39:b6:79:db:9b:88:1f:44:8f:01:
75:81:9f:c4:cc:0b:6d:4f:3f:e1:e1:ab:86:c0:9f:
ce:31:fd:ff:8b:52:f7:2a:be:12:24:b8:8d:2f:45:
44:de:ab:bd:5b:a1:13:cd:bd:db:05:17:d7:cf:74:
c6:3a:02:fb:59:d8:ec:53:0a:62:65:5a:6c:ff:19:
fe:25:34:98:b1:cc:b3:35:cb:76:fc:d1:1a:6c:5c:
35:3f:b3:98:ac:1f:ae:c2:82:b1:4c:7e:33:8e:fb:
73:bd:b8:f7:f4:4e:fd:18:39:e4:e2:40:a7:4a:b2:
eb:68:55:d9:db:74:0b:b7:6e:01:2e:5e:ce:05:cb:
da:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:16:83:59:AA:49:A2:D5:65:6F:E0:28:1C:A9:03:25:3D:1E:16:DD
X509v3 Authority Key Identifier:
keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9f:f2:66:59:cb:f2:c6:71:ef:a5:fe:bc:50:d3:e2:5a:45:
9f:47:20:c4:73:68:9b:a2:0a:fa:7b:43:c6:28:ca:1b:63:5c:
b2:7f:52:46:a4:aa:7d:59:4c:63:26:db:2b:78:a7:5d:5c:19:
5f:03:f2:f4:33:09:0a:69:7f:4c:50:2d:43:df:90:2a:4d:f2:
fb:63:53:21:61:c4:ea:d6:09:60:60:7a:c3:91:4d:24:29:da:
be:fb:b5:58:e3:c3:06:ae:73:2e:a5:41:16:98:34:24:c9:a6:
ba:ff:7d:11:bb:7f:6e:4f:b4:f9:8d:d9:f8:43:6b:b4:6a:66:
03:3c:6f:eb:06:b4:b9:a2:f8:42:ca:5d:39:64:aa:0b:6b:a2:
ff:51:f0:1a:b0:5c:30:ca:0f:4c:f0:ff:66:ac:46:4a:3f:92:
b4:c7:41:3b:5e:ba:4b:5a:2b:d5:b8:d2:eb:fa:52:42:dc:da:
d9:7e:be:9e:64:e2:3d:0e:03:2d:31:da:15:a6:c7:61:c2:5c:
be:2e:81:86:8e:c3:13:27:36:33:40:e5:80:9a:d5:be:b4:56:
cb:9d:7a:91:0d:05:45:ca:e6:49:ac:64:f4:7b:67:2e:e1:c4:
25:1d:85:8c:a0:20:5f:8e:e8:71:31:bd:2d:cd:9c:c3:04:71:
86:58:c6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:25 2025 by rpki-client