Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft
File: iB4xmT-oWHVos_zeW3_ulttDqbc.mft (raw, json)
Hash identifier: zT6C9n10CilSPBAF/LUD52Y89O7cA9ku8scOU+aevCQ=
Subject key identifier: 96:70:7D:E3:A5:FB:12:17:36:74:0F:FC:EB:1D:E1:73:8A:FB:97:FF
Authority key identifier: 88:1E:31:99:3F:A8:58:75:68:B3:FC:DE:5B:7F:EE:96:DB:43:A9:B7
Certificate issuer: /CN=881e31993fa8587568b3fcde5b7fee96db43a9b7
Certificate serial: 019A71B79BED608808B3E797634172A3423F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft
Manifest number: 020F
Signing time: Tue 11 Nov 2025 07:00:49 +0000
Manifest this update: Tue 11 Nov 2025 07:00:49 +0000
Manifest next update: Wed 12 Nov 2025 07:00:49 +0000
Files and hashes: 1: 2CoStS1PhVOk0Xe0b76gr5yU3sM.roa (hash: kaUq6JiT8bLQt6omc8n9uCI1T0SxY0tZ3BmNCenDeRM=)
2: iB4xmT-oWHVos_zeW3_ulttDqbc.crl (hash: NsQ5iFBuMX3EYMs/Y6HMJNV5HoOH+4srq5CF21KSMis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:9b:ed:60:88:08:b3:e7:97:63:41:72:a3:42:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881e31993fa8587568b3fcde5b7fee96db43a9b7
Validity
Not Before: Nov 11 07:00:49 2025 GMT
Not After : Nov 12 07:00:49 2025 GMT
Subject: CN=96707de3a5fb121736740ffceb1de1738afb97ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c0:f4:4a:12:91:b2:b7:6b:76:ad:25:bd:60:
fa:ca:6a:6c:81:53:f1:66:53:18:e0:2b:02:9f:10:
e3:99:20:79:37:d3:a7:0f:c1:50:b8:b1:10:1b:47:
eb:d9:52:c9:f6:05:49:b2:18:00:b1:05:1c:6d:22:
78:1f:67:bb:0b:2f:90:4a:5e:8f:f2:9c:40:e5:72:
3b:42:f5:6e:d4:50:bb:d6:9d:93:23:22:3b:54:bb:
a2:ad:7c:d4:2f:69:41:fc:fc:c1:78:7b:07:a7:73:
e2:a4:56:e5:75:85:12:4d:d5:c3:61:a8:c8:66:d2:
8d:c2:6d:e3:88:c7:f9:dc:20:d9:0a:ed:52:c6:19:
ee:d6:72:89:55:99:71:64:c2:d2:09:b3:72:2b:ee:
84:f2:83:6a:d0:36:e4:bf:a5:f9:27:a8:e0:fe:90:
81:df:bc:43:b3:f2:a6:85:d9:b7:14:c8:30:f1:4c:
1b:6d:7a:a1:bd:7f:7d:7d:82:8c:94:47:15:d2:fd:
6c:d0:25:e5:3b:1e:8c:6f:63:2a:a5:6c:97:e0:eb:
72:dd:f8:83:0f:84:e8:7d:54:db:2b:53:bb:0d:49:
c8:94:4c:d3:ed:2b:08:6b:71:f9:14:90:c3:f1:5b:
36:d4:9f:29:eb:2e:68:6a:20:f3:54:41:21:dc:0c:
cf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:70:7D:E3:A5:FB:12:17:36:74:0F:FC:EB:1D:E1:73:8A:FB:97:FF
X509v3 Authority Key Identifier:
keyid:88:1E:31:99:3F:A8:58:75:68:B3:FC:DE:5B:7F:EE:96:DB:43:A9:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e4:dc:34:7d:76:a4:91:db:6b:20:68:4c:8b:1f:81:9d:34:
ef:30:ae:05:78:c7:10:7e:8f:6f:84:e7:f5:1f:9f:5c:35:df:
ca:b8:0c:8b:66:b7:61:60:e8:de:89:36:9d:82:b3:f3:3a:e4:
86:35:71:32:89:f1:4d:9d:d0:68:02:e5:44:4f:dc:1d:85:1a:
3a:16:da:f8:62:98:4b:d0:6d:7d:f7:58:94:ef:7b:f5:5e:06:
f0:99:0a:86:8e:87:6f:62:21:16:12:78:ac:3b:e9:cb:fd:81:
4d:a3:04:36:75:04:3e:81:99:14:f6:53:df:63:1b:e5:ff:6d:
69:70:c0:cd:cd:3d:26:de:f0:bb:79:df:2e:47:2f:05:01:e4:
f7:28:78:c5:83:6b:ea:51:e5:b6:ad:70:55:7a:91:bf:0d:df:
1c:c2:5d:71:01:8d:5d:da:58:37:d3:b3:8c:9d:5e:fd:1a:0d:
74:27:8f:05:2d:c5:fc:c4:f2:7c:e2:67:ea:73:9c:dc:d0:a1:
da:1b:da:96:82:a7:0d:b7:22:c2:8e:6c:8a:bc:f5:a9:06:5c:
6e:3d:39:a5:b8:ff:ce:0e:b4:b8:b2:4b:4f:70:25:a5:7d:06:
71:21:02:34:eb:42:35:25:a0:00:f7:4f:3b:0e:d3:c4:08:7c:
3a:2f:d6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:10 2025 by rpki-client