Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
File: irW5qTaHl6hrrryB9iOz9OeG9Ro.mft (raw, json)
Hash identifier: v+3Y0c62XxbSWrlqAhC6u26GalcNbwjH6eXNYO68I34=
Subject key identifier: 29:83:56:0A:46:40:5D:0B:3C:A7:5D:55:35:61:BC:55:9C:12:2C:AD
Authority key identifier: 8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
Certificate issuer: /CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Certificate serial: 019A22C08A70EDD2932139A0A3DDB13CA03C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
Manifest number: 0B4D
Signing time: Sun 26 Oct 2025 23:00:34 +0000
Manifest this update: Sun 26 Oct 2025 23:00:34 +0000
Manifest next update: Mon 27 Oct 2025 23:00:34 +0000
Files and hashes: 1: 8Ztwq8Ff-jJd_sBf28s8lvQ9SqU.roa (hash: QWa/HtnKYiYQsWevU25s3knaSRBSQ+SLuyEHZRqaj0Q=)
2: RMQRbyTVfc3R_WDxvN9gz-bLDAA.roa (hash: yUAcbteBmeavQmfUpyblSFjPWzK2WK88NO5Ejqu8jfI=)
3: irW5qTaHl6hrrryB9iOz9OeG9Ro.crl (hash: U92ybehbUB0b4DXlIuDrlv1U1is5lQZVf9okm3SVZs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:8a:70:ed:d2:93:21:39:a0:a3:dd:b1:3c:a0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Validity
Not Before: Oct 26 23:00:34 2025 GMT
Not After : Oct 27 23:00:34 2025 GMT
Subject: CN=2983560a46405d0b3ca75d553561bc559c122cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:11:50:9e:7f:e8:cf:ad:cf:c9:25:37:24:84:
9f:16:07:0d:9e:4e:cc:65:44:c2:63:f5:19:5a:81:
6b:84:06:bf:76:e7:7c:38:a9:7e:0e:5d:46:01:66:
6b:39:e1:56:6d:38:a4:1b:d6:c8:50:a3:05:76:cc:
e4:56:d9:9c:8b:63:42:fc:43:ff:f8:df:d5:9e:0b:
8e:a1:eb:00:78:b7:02:c9:cc:9b:3f:50:c9:40:e3:
11:74:43:62:c4:8c:9f:16:fe:57:04:21:22:c9:5c:
5e:9d:6d:8a:4c:af:31:19:28:43:2f:c7:59:74:c0:
e5:d7:f1:b6:52:6e:3a:33:8b:be:06:ea:c9:f9:19:
1d:fa:7b:7a:62:76:3b:96:f4:59:4f:4e:96:ef:62:
19:a8:d5:1f:c3:4f:ec:aa:0e:59:d9:59:c2:ff:05:
6b:c0:be:db:8e:6b:68:3d:ab:ed:c4:40:5a:3c:36:
c7:3b:d5:47:0e:63:bd:f3:23:ef:90:03:1d:bf:b3:
fb:16:38:ae:c6:6e:f1:10:7d:b9:ad:99:df:12:b4:
2f:aa:72:60:b6:a0:51:48:67:90:a6:d0:87:cb:20:
df:4e:99:b3:5c:60:72:8c:95:5a:80:f0:0d:3e:c5:
78:8e:50:6d:f8:22:e9:e8:02:61:9f:09:95:d2:09:
9a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:83:56:0A:46:40:5D:0B:3C:A7:5D:55:35:61:BC:55:9C:12:2C:AD
X509v3 Authority Key Identifier:
keyid:8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d1:f0:60:a0:97:e3:65:39:75:86:c0:2c:86:3b:16:79:2c:
11:fe:e3:90:58:e4:ff:51:cd:ec:ca:bc:cc:2e:1b:6c:fc:96:
6b:64:a3:d0:da:4a:a0:3a:d1:3f:18:c0:06:b5:0a:7b:2a:90:
1c:48:b5:cf:fe:0a:58:71:ca:55:12:e1:de:2d:02:e1:2b:f3:
0b:cc:44:4f:c8:59:eb:e6:aa:67:9b:69:09:be:f3:e1:8c:cf:
ce:b3:74:cb:82:d7:81:39:bb:eb:00:c3:59:fb:6a:39:70:48:
ef:90:66:57:4e:67:b1:45:ab:3a:5a:f6:73:f7:4b:cd:0d:fb:
6b:d8:94:83:17:20:8f:45:21:cb:df:0d:1c:d9:00:8d:9e:b3:
f7:95:01:f7:d9:76:48:2b:af:41:ec:dc:7a:61:21:6b:cc:46:
3f:b2:e7:90:a6:1a:91:90:c7:ad:f0:4e:a0:ce:2a:ce:17:7f:
7d:88:96:d7:08:b6:18:d0:b8:d9:34:46:59:4e:13:ad:17:03:
8e:c3:06:13:ea:4f:d4:7c:d0:fd:9f:22:68:14:9b:18:da:8e:
4f:0c:26:3a:80:f1:53:72:a4:83:b8:9f:92:71:86:27:15:7b:
5d:fc:2f:4a:b1:47:39:62:d4:c8:7d:af:ea:ca:e0:bc:56:1d:
79:dd:af:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:13:44 2025 by rpki-client