Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
File: i2E3lJJwULIlJatwCRg1QI7uTHk.mft (raw, json)
Hash identifier: YuTLhTcU4l14wAJY/XR+ZOuSjQdRLgeh/AM/WBKQeBk=
Subject key identifier: 70:51:1B:D2:E9:80:4B:5A:78:D8:DC:82:14:AE:FE:47:20:0C:5E:D2
Authority key identifier: 8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
Certificate issuer: /CN=8b613794927050b22525ab70091835408eee4c79
Certificate serial: 019A7301C7B7810BE68C0902C0355835AD90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 13:01:27 +0000
Manifest this update: Tue 11 Nov 2025 13:01:27 +0000
Manifest next update: Wed 12 Nov 2025 13:01:27 +0000
Files and hashes: 1: 8d7VpoBO27aN3dak4lAaxGgmHlY.roa (hash: nh1zP1FVrxhSUv/TNCc0ZubqPf+syGRj5kTxf6jPWNk=)
2: i2E3lJJwULIlJatwCRg1QI7uTHk.crl (hash: 81y3zGO7FUg0JI2/q01VgtHxpsxM/Ah10NJIqGq8teY=)
3: jr93hN4EhKSWYqIbECyoZXKfIBk.roa (hash: 73KNAqHLsWX0NkD2n0f2jQTbbkk8jmsVt6nVH9n8jm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:c7:b7:81:0b:e6:8c:09:02:c0:35:58:35:ad:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b613794927050b22525ab70091835408eee4c79
Validity
Not Before: Nov 11 13:01:27 2025 GMT
Not After : Nov 12 13:01:27 2025 GMT
Subject: CN=70511bd2e9804b5a78d8dc8214aefe47200c5ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:01:e2:de:09:37:ff:d9:51:75:bc:d8:b9:32:
cd:58:e2:a2:9f:39:8b:c0:f9:a0:ad:2d:28:57:15:
fe:b7:09:dd:83:ec:a7:cc:43:c7:2f:47:04:23:bb:
a2:14:f3:64:51:ac:16:11:89:62:17:c7:26:f6:00:
e2:6c:44:04:c4:06:47:38:b4:fd:1d:2b:32:cf:71:
64:24:51:e5:ba:2a:9f:ed:91:0f:9c:df:fd:f5:5f:
cb:2d:74:33:aa:4e:8a:b0:be:7f:aa:77:a9:32:84:
af:04:e9:01:c1:91:e4:13:0e:38:af:08:28:fa:e9:
5a:a6:2c:9d:af:fd:78:74:d8:eb:d1:53:1d:19:ae:
67:c9:d1:b2:4f:da:7f:9e:b2:9b:41:fb:17:54:48:
af:33:ed:1f:e1:8b:65:9b:e0:e1:c0:89:c3:83:3b:
62:c5:f4:bc:4b:c4:0e:f4:ba:df:13:70:10:9e:05:
61:d3:ac:ae:be:96:ad:b3:85:c3:f6:a3:15:81:81:
ce:d2:85:82:72:42:68:30:7b:f1:35:5f:a4:50:a8:
2a:d9:68:37:26:7a:c0:28:b1:bb:fd:b6:0b:bb:15:
2b:e9:d3:58:1a:fb:28:7e:7d:61:e5:d2:1f:8d:0c:
16:db:fe:cb:d6:58:20:dc:f4:07:f1:e2:20:35:1b:
b9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:51:1B:D2:E9:80:4B:5A:78:D8:DC:82:14:AE:FE:47:20:0C:5E:D2
X509v3 Authority Key Identifier:
keyid:8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:11:ec:18:e7:06:ad:eb:98:d5:4b:d9:23:5e:a9:9e:59:59:
3b:0a:b9:ae:2b:50:63:b7:02:bb:6e:71:bc:ce:c8:9e:c6:1d:
e7:3c:94:ff:c6:58:e0:03:95:c1:98:43:61:f9:76:5c:e6:cc:
65:e5:19:a3:a1:49:d5:ca:9c:72:b7:0e:10:38:a5:aa:13:45:
48:a7:33:2e:75:a4:a7:68:a4:fd:6d:49:b1:62:35:7f:95:9a:
cf:34:f0:b4:27:ab:b4:0b:69:69:74:13:0a:bd:e8:67:65:a5:
6c:5a:6e:f5:d5:08:72:25:59:4c:4a:e1:0d:96:1e:d5:b9:6d:
2a:c2:85:3b:8f:b7:ed:c5:bc:fd:f8:35:96:79:2d:af:48:6e:
cb:73:7a:34:c0:03:47:05:1b:a4:2e:01:68:4d:6f:8b:ec:a4:
0e:90:5c:c0:a7:6c:23:a2:a6:28:9c:fa:0a:e5:8a:95:c4:37:
30:46:22:d2:7a:0a:8f:e9:86:05:20:59:c6:9d:bf:d1:16:42:
a1:06:11:ff:a0:4e:08:35:5a:ea:fa:f1:b8:01:a5:2a:df:d6:
0b:e9:51:ee:22:39:30:2d:11:12:23:0a:96:29:9d:42:90:6d:
2f:43:d3:26:06:43:8b:9c:88:0f:cb:c9:99:26:c1:1e:85:aa:
aa:0d:71:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:37:56 2025 by rpki-client