Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
File: ilUqhuMbaeXVMg7egdNLsSikXO4.mft (raw, json)
Hash identifier: XJB0p0GXViWY2rl5zG07PmNslphSPjFqLfv9DuocJVc=
Subject key identifier: 64:52:87:B5:6D:3C:B9:46:B9:CF:C0:AC:25:A3:7B:7C:DD:BA:77:5A
Authority key identifier: 8A:55:2A:86:E3:1B:69:E5:D5:32:0E:DE:81:D3:4B:B1:28:A4:5C:EE
Certificate issuer: /CN=8a552a86e31b69e5d5320ede81d34bb128a45cee
Certificate serial: 019A70DC81D3CA652E4E046D805764A29B45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 03:01:30 +0000
Manifest this update: Tue 11 Nov 2025 03:01:30 +0000
Manifest next update: Wed 12 Nov 2025 03:01:30 +0000
Files and hashes: 1: gx1SCX17EN8yNFFOaZKqHyy38bg.roa (hash: y86l006aIRQbh6g6sMv1/V04L9sTmUKHfB0xrZAQk4Q=)
2: ilUqhuMbaeXVMg7egdNLsSikXO4.crl (hash: pdhHp1L6dzaosaQir5XS+l8H3bedArgNkRY/zQrdcLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:81:d3:ca:65:2e:4e:04:6d:80:57:64:a2:9b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a552a86e31b69e5d5320ede81d34bb128a45cee
Validity
Not Before: Nov 11 03:01:30 2025 GMT
Not After : Nov 12 03:01:30 2025 GMT
Subject: CN=645287b56d3cb946b9cfc0ac25a37b7cddba775a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0c:32:2e:80:59:19:96:7e:23:37:00:98:9e:
c5:94:0b:d3:66:c2:a0:71:71:73:7d:96:a1:77:94:
dc:f0:e9:e2:6c:84:01:46:d1:fa:61:c1:5d:1f:25:
0a:91:04:d2:60:cd:c2:7e:b7:55:e1:de:45:00:60:
17:c1:be:41:8e:1d:8b:af:83:f8:bb:26:f8:90:d7:
54:a6:46:3b:a5:cc:57:b8:dd:b2:41:f9:5b:1e:c2:
02:cc:db:3b:b4:f2:aa:4a:f2:1d:9a:c3:89:f9:fc:
0e:a0:c3:e4:b2:81:5b:bf:aa:6c:c6:1c:e5:d5:0e:
fe:22:e9:06:a7:ca:ea:93:55:c7:2c:7a:cd:59:eb:
09:63:a0:cd:20:c4:34:cb:d5:45:c5:b5:d5:4c:7e:
fd:cb:2b:ee:5f:98:d5:43:14:ae:07:20:0b:83:66:
ae:e6:78:6a:81:e6:d8:a0:91:65:52:af:a7:f8:00:
91:10:f6:90:35:94:2c:f8:ec:7c:f9:8b:08:e8:27:
ef:99:0c:2d:22:28:1c:6b:38:7b:99:80:0c:e0:66:
31:e9:d8:36:f3:7e:3a:2b:b1:34:40:1b:6c:7d:0f:
4b:cc:eb:81:fe:a8:18:1d:3e:88:3d:2c:ef:c9:02:
07:b7:03:5f:0f:4c:09:0b:6d:77:06:57:83:d7:81:
6a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:52:87:B5:6D:3C:B9:46:B9:CF:C0:AC:25:A3:7B:7C:DD:BA:77:5A
X509v3 Authority Key Identifier:
keyid:8A:55:2A:86:E3:1B:69:E5:D5:32:0E:DE:81:D3:4B:B1:28:A4:5C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:fc:8c:51:ea:0e:7a:c2:49:76:14:ac:a6:29:a7:20:69:a7:
03:95:fe:63:cb:a9:93:c3:8e:97:89:aa:73:61:b3:87:69:97:
36:7e:f0:ef:63:c1:de:f4:e9:26:04:17:9c:33:c6:b2:38:67:
eb:e0:ba:c0:de:eb:1c:d4:31:f9:30:25:65:3b:e5:6f:6a:18:
11:76:4a:38:a8:d7:06:74:e1:56:01:e0:02:57:a3:a7:c1:bc:
cd:a5:7c:ed:1b:b0:19:e7:b5:ba:64:83:6e:77:eb:2b:96:54:
68:f1:09:46:47:56:1e:9f:7d:13:86:f6:a5:c0:6c:db:ca:75:
c5:63:f4:00:82:d2:89:08:72:97:76:4c:cd:a5:b1:14:43:e7:
a9:50:ee:2f:45:37:57:e7:82:75:b3:5f:0a:9e:2b:e6:e3:7d:
5e:6e:f4:7c:3c:35:0c:8f:6e:ab:cf:44:73:12:05:b0:78:2b:
e2:d6:c3:f1:6a:2b:f0:19:eb:0e:28:23:c4:7f:71:f0:c8:12:
f3:9d:4f:1b:1b:4a:73:f0:2a:1e:3f:e4:2e:a7:dc:9c:89:ff:
1e:d4:ea:5a:20:83:99:25:3d:b0:8c:7c:53:d6:5f:93:98:0b:
3a:05:73:7b:bb:1f:32:f7:cc:e6:ae:62:e7:65:de:a9:d2:e0:
5f:c8:72:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:26 2025 by rpki-client