Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
File: cIR_giGJfW6VLobqLDOauqzBMfU.mft (raw, json)
Hash identifier: gblr6zlkDE7uWHhS0aNZgQ4zue4K5UTn2SRBSsGXTME=
Subject key identifier: 95:EA:67:20:B7:E6:DC:A1:EB:D9:73:F8:DA:06:D7:9D:CC:4A:7A:91
Authority key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
Certificate issuer: /CN=70847f8221897d6e952e86ea2c339abaacc131f5
Certificate serial: 019A2667C337A5E3337E683B62B9C3EAA777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
Manifest number: 1002
Signing time: Mon 27 Oct 2025 16:02:05 +0000
Manifest this update: Mon 27 Oct 2025 16:02:05 +0000
Manifest next update: Tue 28 Oct 2025 16:02:05 +0000
Files and hashes: 1: 349zjBrXxWXdbWEBD0TY_PcES-4.roa (hash: dTkBBehXJumOuwcY3aMRaxc4m1QE9Au6OaxONrVwqa8=)
2: FGloAOGdHctONwf864BFw9r6804.roa (hash: idNgzg92xFKVGDg8Q8+8kqcQjJU43tGKLwcMZ1BO8+8=)
3: QeA9h5gc7h5TROkBqdTQKlfxGiI.roa (hash: wvC6P2mkgiV/WDCXbKURUPeQIyZPZgtW7FSvBfEWp/8=)
4: cIR_giGJfW6VLobqLDOauqzBMfU.crl (hash: 6nbjsor6pY+HF8ETIrPq6oEgPVMtpfX+sAE66GhQQZw=)
5: f4DXZiMB_Ff_0JwzJIxf0LcmHB4.roa (hash: BYRfPeQZzgZNAMB4knpfUfsNVjUgJWJmqeqw3IISPlY=)
6: rguLiIijQORjnghvpZcGDmu1SjU.roa (hash: JNesrlv42ZJgaFQwOxaZT3TmKgM6sVVqVrh2EttTKxs=)
7: zWJS9qIiKhPDTGBp07EnN-zc5Ok.roa (hash: UIbGdiKmqLamnBzWNetbuRIAxAE+Pp02kC9Gg2VRxdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:67:c3:37:a5:e3:33:7e:68:3b:62:b9:c3:ea:a7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70847f8221897d6e952e86ea2c339abaacc131f5
Validity
Not Before: Oct 27 16:02:05 2025 GMT
Not After : Oct 28 16:02:05 2025 GMT
Subject: CN=95ea6720b7e6dca1ebd973f8da06d79dcc4a7a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:86:06:94:5f:64:01:27:60:9e:ae:8d:b6:9d:
cb:34:1e:b2:60:c2:c3:93:f0:e8:c5:fc:44:e5:2b:
68:03:0d:86:00:a5:44:4c:da:2d:1e:c1:e6:27:4b:
d0:4e:71:13:db:5d:f7:3e:da:9e:24:06:7c:87:ff:
63:31:a1:a2:29:b7:4b:12:b8:91:ed:d5:05:64:f1:
cc:15:62:66:c4:af:0f:33:ca:f9:b1:0e:8e:f3:86:
36:4f:27:b0:58:f0:ed:4b:93:ec:8e:26:61:73:aa:
9f:c3:af:d6:e6:c2:9e:e3:ae:fa:a8:cb:7f:81:95:
42:a1:5f:3d:bf:e2:5e:8e:0b:02:22:09:de:4f:a1:
f7:7a:cb:45:d1:64:b0:7e:6d:6d:4a:dd:76:b8:06:
75:a7:e9:7f:96:5a:48:5d:71:41:c8:3e:b0:1e:8c:
e4:16:75:0b:02:e6:37:29:cb:f4:30:e9:30:79:ae:
f3:fc:c5:d1:8d:ba:8a:e1:75:44:eb:1d:66:87:6a:
75:48:c1:9c:2e:d1:ee:48:e5:c8:61:82:5e:b3:a8:
8b:80:29:e2:ec:cf:d2:6d:33:85:a7:46:20:81:04:
85:c8:a8:6c:f9:76:3b:2f:17:16:83:62:f3:de:f8:
bd:22:8c:8d:05:f6:cc:43:14:02:b2:2e:99:27:12:
27:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EA:67:20:B7:E6:DC:A1:EB:D9:73:F8:DA:06:D7:9D:CC:4A:7A:91
X509v3 Authority Key Identifier:
keyid:70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a2:cd:69:e2:77:ec:4e:27:1c:51:c7:26:49:ba:2b:c4:e9:
b6:b8:c0:2a:46:d4:c8:d9:13:84:9a:4a:ab:b3:9f:0c:74:f8:
4f:81:df:3a:00:94:17:96:05:e3:12:38:44:3f:54:7e:03:3d:
c6:0f:c3:da:ad:45:f6:d9:cf:21:1e:a0:ec:bd:7a:19:b1:8e:
af:34:bc:74:2b:1f:5e:ba:63:0a:8c:be:1b:e4:0e:a1:57:6e:
1f:66:bb:cf:ac:4c:c5:3a:23:98:ed:49:67:0b:b8:5c:16:1e:
85:41:2c:6b:67:d6:46:4b:b4:b3:6f:bf:b6:29:30:ba:42:b0:
c3:c4:40:6c:6f:32:f8:6a:7d:cf:70:95:ea:18:7a:f3:98:82:
fa:f1:29:49:14:7e:85:89:3e:ad:65:62:5c:78:66:d7:3a:9f:
74:ed:62:e8:ac:c2:f5:b9:58:43:75:74:d0:76:3c:56:fe:5c:
dc:58:d6:a1:df:47:7b:24:bc:04:00:1d:4d:eb:ee:d5:53:9a:
86:2f:30:ba:ad:a2:99:18:35:ce:bf:21:dd:a4:df:2f:08:a6:
70:27:37:9a:84:b0:ea:1d:5d:d3:b2:bc:ea:fc:13:56:e9:5b:
b6:6a:07:f3:49:3d:68:a3:1f:52:3e:77:be:32:23:b7:7b:ee:
b3:3f:8c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 23:38:50 2025 by rpki-client