Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.mft
File: I08I-kIiU1wK8moNc0fb8XJUcZY.mft (raw, json)
Hash identifier: oACNtL5FwHZHSdLDko0q6uLrOem40ZlhaSa0YAprJLA=
Subject key identifier: 52:39:3A:90:DA:C4:AB:6B:92:18:EE:8D:A9:86:19:2F:13:FC:64:ED
Authority key identifier: 23:4F:08:FA:42:22:53:5C:0A:F2:6A:0D:73:47:DB:F1:72:54:71:96
Certificate issuer: /CN=234f08fa4222535c0af26a0d7347dbf172547196
Certificate serial: 019A722659C0BC3AC8EE555FDC2E0812B026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I08I-kIiU1wK8moNc0fb8XJUcZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.mft
Manifest number: 020D
Signing time: Tue 11 Nov 2025 09:01:47 +0000
Manifest this update: Tue 11 Nov 2025 09:01:47 +0000
Manifest next update: Wed 12 Nov 2025 09:01:47 +0000
Files and hashes: 1: I08I-kIiU1wK8moNc0fb8XJUcZY.crl (hash: 5Bs9qlxRS9leO3hq6IORqU0TTjRbs51Bx0wn/SeXszw=)
2: PMihf48EDZLf86f7BmXfYmZbV4M.roa (hash: kAi2yEZhpDZ5dFlA+0hzmB2XiAS3L8tb6zCyB/FGwDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I08I-kIiU1wK8moNc0fb8XJUcZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:59:c0:bc:3a:c8:ee:55:5f:dc:2e:08:12:b0:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234f08fa4222535c0af26a0d7347dbf172547196
Validity
Not Before: Nov 11 09:01:47 2025 GMT
Not After : Nov 12 09:01:47 2025 GMT
Subject: CN=52393a90dac4ab6b9218ee8da986192f13fc64ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3b:b9:af:8c:f2:b1:cd:d6:c3:a5:22:29:7d:
fc:b1:e8:57:c3:2c:88:0f:c0:f6:b6:f6:7d:4d:75:
5d:b0:4c:9c:73:69:bb:97:59:62:80:8d:08:3b:90:
d5:87:6f:f7:21:bc:25:d3:c6:9a:f9:a3:c8:2b:e4:
d3:7f:12:e9:c3:48:62:99:40:31:d2:45:db:5d:22:
ba:5a:1a:15:1f:f5:7d:bf:85:ca:70:59:de:17:a4:
66:4c:31:c7:9e:ba:7a:1f:63:fa:79:7a:9c:ba:e9:
23:56:74:32:f5:10:09:9f:f2:2c:25:85:94:e3:b4:
55:6c:e0:68:53:18:9f:a2:17:9d:77:de:89:1d:d6:
fb:77:97:a8:42:6b:7a:5e:29:4f:10:3b:45:e3:26:
2f:06:5d:b4:8f:a8:73:11:6e:81:e7:a3:70:b1:68:
b3:24:cd:c6:f5:c3:88:64:ae:e1:b0:28:76:4d:5d:
30:ac:f5:c2:9e:4c:57:c3:b0:e8:f1:81:7a:b2:e2:
70:74:1d:04:45:5a:52:59:bc:75:e0:5a:96:cf:54:
ba:fc:4a:c8:58:fd:9d:c7:88:88:f1:82:d9:2a:e8:
0d:83:2a:53:2a:67:25:64:81:46:d6:c4:91:b9:6e:
ff:ab:17:cd:96:42:5e:31:4e:9a:52:eb:7b:31:f0:
25:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:39:3A:90:DA:C4:AB:6B:92:18:EE:8D:A9:86:19:2F:13:FC:64:ED
X509v3 Authority Key Identifier:
keyid:23:4F:08:FA:42:22:53:5C:0A:F2:6A:0D:73:47:DB:F1:72:54:71:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I08I-kIiU1wK8moNc0fb8XJUcZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ac:24:39:51:e2:1e:69:72:f2:1b:90:02:80:28:94:2e:68:
eb:18:21:2a:72:4d:40:c0:e5:62:47:21:42:db:d9:b6:14:49:
30:42:28:e1:8e:48:aa:13:66:3a:c9:90:ed:28:ea:b0:74:b5:
77:95:06:d5:c1:0b:a7:9e:4d:5b:83:7a:58:00:2c:69:fe:e0:
80:91:6a:72:6e:3b:ac:83:79:5d:69:95:59:db:11:0d:ae:2d:
f4:1f:dc:45:a2:ee:db:76:66:97:0c:b8:5b:f7:88:0c:dc:12:
0b:c8:b1:25:5c:91:8e:94:5a:fb:72:79:0f:88:06:8c:3d:68:
bb:69:dd:5f:60:aa:1a:a0:7f:be:e8:05:9a:89:f5:de:61:7f:
ea:17:aa:75:ed:db:48:ad:1c:75:32:5e:b0:0f:0f:bc:86:27:
62:00:d7:6e:98:a8:4d:e2:5d:63:d1:73:36:c5:01:d9:c7:11:
9f:d5:a4:3a:90:8f:61:35:9d:55:17:16:5f:93:b0:14:81:20:
21:38:f6:1b:47:d9:7b:60:11:9c:3d:fb:c1:ff:db:f2:41:58:
19:b1:d8:f2:a9:6b:c0:86:a3:47:7e:2e:5d:c8:a7:b5:90:cb:
54:82:3c:e5:9a:9d:72:96:24:67:26:81:5f:67:e5:c9:36:4a:
84:75:2e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:21:54 2025 by rpki-client