Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
File: ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft (raw, json)
Hash identifier: VRfNZwdZsTWyqXguyur9YQA/wLnXgcJLkIUcYFoGS2E=
Subject key identifier: F6:23:7D:9B:5D:B0:2F:D9:9A:76:6E:8F:F1:92:63:F3:28:86:C1:C6
Authority key identifier: 8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
Certificate issuer: /CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
Certificate serial: 019A7293E35AA6EE0EE4772B71FB74D44141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 11:01:25 +0000
Manifest this update: Tue 11 Nov 2025 11:01:25 +0000
Manifest next update: Wed 12 Nov 2025 11:01:25 +0000
Files and hashes: 1: SZpd9qPeF2_UcZ0BFTiD1uQx6CE.roa (hash: 4d7c/yFsOUlnwxOih4L4b458874C6mb5/7y63/As6E0=)
2: e6NTQMQbAc2rRpYIgSE0b5QlitQ.roa (hash: AW2JD/AMZP/3NkMYPVumCDsjg07AD98EjBhRoynRE5I=)
3: ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl (hash: 29jVNsteMCT2Td5+PD/UlHmavzOi33OpBJj2tv0H0Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:e3:5a:a6:ee:0e:e4:77:2b:71:fb:74:d4:41:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
Validity
Not Before: Nov 11 11:01:25 2025 GMT
Not After : Nov 12 11:01:25 2025 GMT
Subject: CN=f6237d9b5db02fd99a766e8ff19263f32886c1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f8:2d:6e:09:f6:3a:fb:a7:ad:db:42:15:74:
76:21:ab:e8:a1:60:56:0f:7c:d9:5d:b3:e0:f0:57:
d7:02:23:be:35:a6:f9:54:de:14:8b:9e:3a:43:ff:
ec:bf:86:f7:ab:ce:4c:76:da:15:53:c1:83:f4:1a:
d2:69:ba:21:eb:2e:66:62:39:8c:7b:76:6d:8a:38:
2a:82:58:84:5a:95:11:93:01:52:ea:34:16:30:38:
44:84:56:07:11:2a:6c:22:02:0b:2b:a1:7f:54:d4:
f7:e0:a3:ec:5b:87:87:93:2d:6c:dc:71:24:71:1c:
d3:b8:ff:5f:da:9f:56:57:a3:96:94:8a:67:74:3e:
eb:74:96:2d:5c:71:27:b7:18:5b:82:f4:22:69:48:
1a:62:b1:f2:b1:ec:e2:07:ed:48:30:85:ac:9f:92:
9a:fb:b5:eb:c9:be:24:49:f2:c9:4b:19:58:e2:91:
0b:e8:6d:99:2d:d0:fa:a5:12:8b:8d:b2:ea:71:40:
b0:2e:22:fd:52:a9:40:be:27:cb:1b:74:f2:fc:51:
fe:bd:ed:a4:20:ac:da:4c:dd:1e:ca:9e:b2:72:71:
69:12:55:29:41:f2:1c:98:c3:6d:2e:2b:b7:9f:1c:
0a:46:78:ab:a7:15:52:92:7b:51:b1:8c:46:ea:d2:
ba:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:23:7D:9B:5D:B0:2F:D9:9A:76:6E:8F:F1:92:63:F3:28:86:C1:C6
X509v3 Authority Key Identifier:
keyid:8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:7b:2d:4e:74:85:e7:36:a4:62:2a:84:c5:e8:74:b9:20:6f:
b6:5d:da:78:3d:39:10:57:1d:79:c2:7a:1d:d4:41:e4:53:31:
b5:4f:8d:62:d4:3e:02:7a:ec:27:74:82:0f:6f:45:d2:e7:0e:
43:3d:a8:2c:b0:16:f2:26:e7:24:48:3b:11:ff:a3:e4:f0:58:
dc:c7:2b:7c:7a:3d:3a:cf:ca:c0:0a:cd:63:1a:78:59:57:08:
d0:bb:4b:0c:8e:8a:30:45:dc:db:e3:f2:14:39:bc:d8:8f:63:
91:29:27:8d:ca:35:a4:f7:85:52:5f:48:1c:8c:f6:13:40:47:
32:d0:85:a7:0a:64:6f:85:5d:92:86:17:61:03:05:44:73:c3:
ba:86:f7:f8:b4:ca:3a:28:ea:5c:4f:b5:10:d6:b8:23:74:8f:
f2:bb:fa:68:f1:45:c3:44:ad:a7:d6:4b:48:86:71:f1:f1:b7:
71:dd:a0:56:88:5d:9b:e4:06:15:83:51:55:60:ca:88:a5:df:
35:43:d5:cd:f7:db:02:aa:1b:36:d6:e4:ca:6d:6d:83:3b:b1:
92:84:1c:ad:80:a3:e0:0e:57:54:e4:ae:76:8d:5a:d0:f4:cf:
2c:2b:1e:a1:ef:fe:86:dc:2f:c8:54:3e:be:c7:d3:76:8f:cb:
18:65:71:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:46 2025 by rpki-client