Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
File: IacXNhMJ0pOTUcnYuiFz24MZqI8.mft (raw, json)
Hash identifier: q9Ap6i1q1K99jwmUO6J9XlS9tM3PzBWzSEsbbI5NZfQ=
Subject key identifier: 4D:36:D9:4B:D5:B4:C9:B6:C3:34:10:15:B6:F2:30:1E:33:D1:EA:80
Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
Certificate issuer: /CN=21a717361309d2939351c9d8ba2173db8319a88f
Certificate serial: 019A4BBC072C7149E376C9C68873403AAF05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
Manifest number: 0F28
Signing time: Mon 03 Nov 2025 22:00:04 +0000
Manifest this update: Mon 03 Nov 2025 22:00:04 +0000
Manifest next update: Tue 04 Nov 2025 22:00:04 +0000
Files and hashes: 1: IacXNhMJ0pOTUcnYuiFz24MZqI8.crl (hash: 6jGJ8WQqC8m0zQGkmS7M5CA3BHw9lL+04MEsNho1BaI=)
2: PeD0qOPxUYxeVA81pP9--xNVIzU.roa (hash: fJvgODfg2m2y6FUhDf+GL6D88mfLwM4rg59sQSq2L84=)
3: qwmmpmJft8mwuiEXYTlzhJQuep0.roa (hash: Q0Z/E8v8Q7W2fm0rXhwdPc4pFVbeDlufQTIsqxx5ZeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:bc:07:2c:71:49:e3:76:c9:c6:88:73:40:3a:af:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f
Validity
Not Before: Nov 3 22:00:04 2025 GMT
Not After : Nov 4 22:00:04 2025 GMT
Subject: CN=4d36d94bd5b4c9b6c3341015b6f2301e33d1ea80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6e:32:06:4a:23:0a:b7:46:88:ec:ff:33:45:
9f:5a:90:49:92:fb:74:83:4a:2a:82:53:b1:95:a3:
03:e3:3b:98:b8:31:9a:c2:fb:fa:3a:08:37:8e:00:
14:29:48:9c:41:2b:31:d7:9b:57:15:62:c2:b5:fd:
f9:2e:8e:20:1d:e1:c2:5e:af:96:66:14:59:7f:2a:
a3:b5:91:69:3c:e3:16:70:26:98:f1:26:05:15:28:
2c:42:03:c3:21:66:45:0a:0a:9b:4b:7f:51:72:bb:
cf:8c:22:0b:1f:2a:a9:b1:07:c5:f1:b5:4c:58:08:
77:74:32:18:25:ce:75:e6:e9:3c:05:a6:70:3b:04:
af:14:2c:c8:16:74:67:6c:8e:49:13:46:c1:b3:1a:
89:01:89:e7:a3:40:f1:d3:c9:03:e7:54:09:28:50:
ee:f8:e5:be:cc:93:08:6a:7f:16:78:2d:5f:c4:49:
fe:7a:1a:78:fe:fa:07:6c:7c:cb:b4:57:10:43:02:
7c:84:11:b3:ae:68:40:a8:e5:73:52:30:dc:aa:57:
c9:2f:44:ed:43:d6:06:29:8d:6f:ed:41:fe:80:4e:
5d:21:ee:6f:da:22:02:e0:fd:ff:58:33:7b:45:bc:
08:9f:b9:48:7c:22:f8:fc:1f:5e:75:29:98:82:9b:
03:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:36:D9:4B:D5:B4:C9:B6:C3:34:10:15:B6:F2:30:1E:33:D1:EA:80
X509v3 Authority Key Identifier:
keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1a:59:6f:84:2f:6e:84:41:7a:b9:46:96:d2:85:63:ea:46:
43:a3:14:d9:42:de:6b:3e:13:9d:91:93:a3:f4:57:ed:ee:d5:
f5:02:65:cf:e6:ba:25:45:ee:ce:77:82:d7:55:06:d1:0b:18:
94:d7:cf:cf:9c:47:34:44:a2:18:b8:99:3c:be:21:e3:4a:94:
a6:a8:9f:17:53:8c:be:06:ca:6d:12:5f:c9:f6:65:39:15:e9:
65:9b:a9:06:f4:35:53:9b:20:19:16:be:70:fa:ce:06:01:ea:
45:0a:a3:7f:c8:20:db:f8:81:7d:cc:ef:7e:d1:b8:61:8c:73:
a4:23:6f:a3:97:ef:b4:ec:83:bf:ff:19:2f:60:fa:40:46:40:
c8:4d:7f:08:ab:74:da:de:2a:71:4e:36:7b:b6:93:9c:54:05:
43:2f:b2:7b:03:c6:28:0c:20:36:20:f2:a2:46:3f:f6:03:c9:
29:be:99:fa:2c:1c:55:eb:6c:41:89:57:22:9a:1b:62:8c:02:
4f:07:25:3d:e6:38:05:bd:35:cc:75:90:6c:2a:e3:37:75:08:
b2:fb:6c:08:87:6f:93:89:56:e1:5f:84:85:31:0e:a0:33:eb:
40:f3:67:72:de:63:30:77:1f:62:59:f2:3d:7e:22:53:d5:57:
f1:e3:db:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:04:19 2025 by rpki-client