Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
File: iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft (raw, json)
Hash identifier: TcAd9NdNaS5TsU+aJE/eFyT+cUOjF031TDXin05lGoM=
Subject key identifier: 35:75:1F:1E:82:58:4D:04:4A:86:65:4E:E3:51:84:F4:0B:2F:5B:CB
Authority key identifier: 88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11
Certificate issuer: /CN=88fc58875608970d9a728347d05ef00d0f1d5611
Certificate serial: 0199326D377B81CED851B6F799E1AF0A1012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
Manifest number: 0FE5
Signing time: Wed 10 Sep 2025 07:00:42 +0000
Manifest this update: Wed 10 Sep 2025 07:00:42 +0000
Manifest next update: Thu 11 Sep 2025 07:00:42 +0000
Files and hashes: 1: glHtLecTNUxeR4oxupaJRTlQLos.roa (hash: tjH899kftJHgu4JmkbHHTA84WKPpmWW00cLzLNo7wBg=)
2: iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl (hash: Hv0jpppXS7yJRgXbv9PUlvWy7stKBUcnKuuU3L5pbsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:37:7b:81:ce:d8:51:b6:f7:99:e1:af:0a:10:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fc58875608970d9a728347d05ef00d0f1d5611
Validity
Not Before: Sep 10 07:00:42 2025 GMT
Not After : Sep 11 07:00:42 2025 GMT
Subject: CN=35751f1e82584d044a86654ee35184f40b2f5bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:30:90:3a:2c:d6:9a:6f:85:68:1b:84:e1:3f:
a3:0c:b4:fa:fb:6d:d1:62:db:d0:6d:ee:a0:63:e1:
95:08:da:22:a8:a1:50:70:d8:33:86:bb:dc:47:46:
a1:f8:9a:f1:62:b4:56:2c:09:6f:ec:eb:59:e2:ef:
cd:da:3b:8d:9d:14:0d:85:c4:5a:e8:ae:b2:0a:58:
79:c4:61:60:04:f6:56:01:e8:53:a8:2c:27:58:b0:
29:a2:72:7b:16:25:e9:6e:90:0f:5a:03:ed:9e:14:
91:36:4c:75:4c:24:fe:6b:f4:33:e4:96:c2:f0:23:
92:7a:0e:ae:2a:92:3f:87:37:a7:52:44:1b:b1:73:
72:7c:17:93:47:51:b9:91:f2:d4:2b:9c:f3:33:3f:
c4:60:7f:34:a4:56:ff:95:7f:83:4e:d9:0b:de:b3:
60:3c:15:75:a8:18:7f:b1:ed:bb:28:23:be:5a:b5:
5b:06:72:7e:bf:99:0b:d5:e3:41:6f:fb:e1:82:a5:
e7:a1:8d:3d:af:e2:d6:4e:23:06:f6:00:91:ad:4d:
fb:c8:0b:1e:80:55:c7:40:a2:18:6b:7d:7a:d7:b0:
b0:bf:38:60:d6:bf:59:d8:ff:95:12:86:b6:d8:78:
c0:ae:42:b0:8f:f1:e6:7e:51:33:f9:2e:b7:d9:3c:
0a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:75:1F:1E:82:58:4D:04:4A:86:65:4E:E3:51:84:F4:0B:2F:5B:CB
X509v3 Authority Key Identifier:
keyid:88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:b3:e3:57:e3:84:80:bf:6f:5c:08:de:a9:ee:5f:06:04:52:
91:27:79:7a:d3:17:1a:05:33:c1:e9:fa:73:6c:13:b2:be:ff:
f0:23:74:65:1c:09:b7:92:fd:69:71:f3:df:ea:b7:45:83:79:
d7:29:f2:c7:75:ec:3f:cd:3f:f9:3f:a2:9d:d4:e1:39:34:df:
0c:c7:78:79:ea:9a:38:73:90:fb:4c:59:18:65:2e:08:16:9f:
27:05:60:ca:44:e7:b3:02:d7:fb:3e:b5:ea:9f:ca:29:24:47:
39:54:d9:d0:62:17:9b:08:e8:c5:c7:bd:a7:67:62:c1:8d:61:
04:d9:41:56:4e:49:f8:8a:db:71:92:31:8a:50:52:57:25:fd:
da:b0:91:7f:2b:cd:99:c1:a0:51:c9:6d:bd:ae:95:04:94:c8:
f7:0b:ce:8d:00:94:7d:67:ab:76:c5:20:78:f2:b1:67:ba:0f:
1b:fb:23:65:1c:16:16:c1:d9:99:7c:c7:8b:58:e0:3a:d1:5e:
46:49:b0:b6:9e:45:66:96:dc:03:c6:ce:5a:e3:0d:d4:93:9e:
b6:da:40:a4:6b:ba:00:58:c2:ba:fb:b6:fb:39:c2:3b:e6:d5:
c8:72:25:b8:c6:39:71:33:c0:b0:31:b6:13:e8:ae:0a:d9:bb:
17:83:4d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:01:03 2025 by rpki-client