Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
File: I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft (raw, json)
Hash identifier: xR0DKC5z7+rrEwTp9m0oEFGsEHODK/8goeOyj605o5A=
Subject key identifier: 4B:BF:1B:E3:67:F9:7E:CA:5D:38:EE:98:0B:D1:0E:04:E8:77:D9:CB
Authority key identifier: 23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
Certificate issuer: /CN=23607105955c764a813fd9524a7e41b940c56832
Certificate serial: 019A72264962CA12213736EAEE71655D1665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
Manifest number: 0322
Signing time: Tue 11 Nov 2025 09:01:43 +0000
Manifest this update: Tue 11 Nov 2025 09:01:43 +0000
Manifest next update: Wed 12 Nov 2025 09:01:43 +0000
Files and hashes: 1: I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl (hash: nPVWXXHJXCGnH8y4a68yrV6720R67XX7RFzCLTnrdnA=)
2: pL8DPUuY6V_LTawy1OdUwrIg01c.roa (hash: yxyfBx5vs5Lhayo07nTfHgtEaPhrWIe0WeuncjCeyYo=)
3: rPtueqwAgjU2IUHv5A02J4kLlys.roa (hash: vDBPmEjKrFXU2lnK2ZWnREJRhpJ1uOnxEsPQx6QBwFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:49:62:ca:12:21:37:36:ea:ee:71:65:5d:16:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23607105955c764a813fd9524a7e41b940c56832
Validity
Not Before: Nov 11 09:01:43 2025 GMT
Not After : Nov 12 09:01:43 2025 GMT
Subject: CN=4bbf1be367f97eca5d38ee980bd10e04e877d9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:97:27:11:d7:ec:94:0a:5f:08:cd:43:a8:56:
98:89:46:c4:10:39:8e:b5:4c:53:0a:b6:e2:d6:2f:
0e:63:43:6a:d8:5e:fc:08:72:0b:88:ae:07:74:be:
77:e8:98:e6:3c:bc:b4:dd:f8:11:a0:0c:30:e7:1b:
5b:42:70:d5:7f:ea:e0:35:c7:65:df:6b:e0:89:21:
06:cd:c9:c6:38:af:cc:a2:68:61:d6:46:76:93:e3:
1d:7c:9c:d5:25:08:f6:2a:ef:76:dd:1c:d6:0e:bf:
9b:39:e6:ca:5c:09:26:e7:8d:f6:47:95:60:e6:75:
69:27:c7:20:b1:49:03:23:d1:de:0a:c5:d8:62:e3:
87:cb:3e:06:98:1c:bd:4e:76:70:b1:61:60:cc:4e:
92:60:37:7b:76:7e:8c:d1:cc:f8:3e:b6:18:5a:cd:
86:ba:91:2d:af:ef:8a:1f:6f:4e:26:0a:87:9b:ea:
28:85:db:cf:5e:9c:69:b0:6c:f6:bc:a0:b0:f3:49:
80:63:3b:69:db:b4:63:57:bf:56:75:ab:3c:08:cc:
06:89:13:05:f6:55:77:ed:ce:ad:9d:22:ee:9e:2e:
18:c4:77:c1:b0:e7:97:f9:cd:94:b4:4c:7c:89:2d:
f3:46:7d:95:3c:62:51:58:20:7d:49:24:f4:95:1f:
28:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BF:1B:E3:67:F9:7E:CA:5D:38:EE:98:0B:D1:0E:04:E8:77:D9:CB
X509v3 Authority Key Identifier:
keyid:23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:55:18:7b:96:c5:7b:23:07:22:d6:cb:2f:31:9e:7d:39:48:
04:0b:09:fe:11:5a:2d:cf:34:b6:cf:a0:2f:71:19:47:85:be:
56:c6:5e:b7:c2:c6:1a:1a:98:e2:c7:f3:94:26:9e:ff:5a:55:
9f:9e:72:44:d2:72:06:bb:e9:03:f9:56:5e:1d:e8:09:89:4c:
57:d4:25:94:2b:e9:4b:69:e4:d2:3f:ab:e1:a0:04:ff:04:4e:
66:c0:cb:cd:1d:fd:1c:91:22:b6:16:e9:f4:52:2b:f2:3a:94:
4c:81:f0:50:93:02:3e:11:b2:4f:83:20:19:ac:46:68:85:f6:
20:4f:10:8d:b8:c5:1b:57:13:3e:05:eb:04:c8:76:fb:95:49:
13:86:49:2c:14:54:33:16:e5:62:bb:93:cc:84:bf:9c:5d:9c:
e7:0a:ba:96:d7:ca:28:ea:a4:65:2a:cc:a5:f1:ff:7d:51:a0:
ae:c4:20:dd:5a:cf:6f:37:de:a4:03:a4:40:b2:7b:55:3b:da:
77:07:11:1a:60:e4:ac:4d:80:69:0b:bb:64:91:77:25:77:ac:
48:b8:fa:49:7b:f2:88:b6:e8:2d:a2:e0:46:f8:0b:3b:9d:95:
11:6a:6e:c2:8a:e6:d9:99:e9:94:f8:3c:2a:5e:1a:4a:71:0f:
0d:48:84:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:46 2025 by rpki-client