Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
File: I06fdccyb3ZciWbC7cAKmCpep_A.mft (raw, json)
Hash identifier: g+K1EG76lj8v8Y9mZAotrSOsLQXLPMKNk6AdLiJWI8c=
Subject key identifier: 81:4E:F7:9A:30:26:BD:70:5F:04:54:D0:D1:26:2F:54:28:4F:C8:1F
Authority key identifier: 23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
Certificate issuer: /CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Certificate serial: 019A71B810FAE84E626D9E89A0C619D1C021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
Manifest number: 148D
Signing time: Tue 11 Nov 2025 07:01:19 +0000
Manifest this update: Tue 11 Nov 2025 07:01:19 +0000
Manifest next update: Wed 12 Nov 2025 07:01:19 +0000
Files and hashes: 1: I06fdccyb3ZciWbC7cAKmCpep_A.crl (hash: bg42rmG08OJ+WOfDtyz4oeYj7psXGCa+Vmqy8iVD/Mo=)
2: _abtUqDmMxDQ2RmQqkGL8N8DjTE.roa (hash: CRHU3YWrzulAziPCk+beyoXQoDHAl8oOT3cyglDGbAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:10:fa:e8:4e:62:6d:9e:89:a0:c6:19:d1:c0:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Validity
Not Before: Nov 11 07:01:19 2025 GMT
Not After : Nov 12 07:01:19 2025 GMT
Subject: CN=814ef79a3026bd705f0454d0d1262f54284fc81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:84:c5:8a:17:dc:4c:75:40:bd:d9:c3:43:32:
44:e0:ed:3d:15:42:b1:85:97:31:91:82:62:7f:57:
cb:37:40:9c:95:7c:ce:d3:1d:90:ff:f1:88:62:88:
f6:24:0e:00:bc:b0:3d:29:d7:63:ac:f0:98:81:3e:
75:81:d3:7b:d6:75:9c:7b:1a:02:22:02:f3:92:f7:
fa:01:55:aa:79:d2:c2:5d:2a:a4:df:26:dd:76:33:
c2:4f:97:ac:8f:da:7a:0d:eb:40:c4:b9:09:58:c3:
fe:67:7e:69:5b:f2:73:86:9d:93:8a:2d:91:c9:54:
e4:b1:a9:98:97:7a:c4:82:48:9e:ca:21:1a:18:46:
b8:99:6c:fb:49:68:40:08:59:b1:71:06:20:bd:45:
c9:b8:f8:9a:e8:ef:2e:82:6b:bf:e4:07:f8:ee:c9:
11:29:2b:e2:4b:4a:1d:72:7c:6e:d3:14:af:54:c2:
5c:40:cc:49:2a:4d:b5:ff:27:9d:18:09:07:21:20:
c2:24:fc:8e:82:19:cc:72:1b:c9:ed:38:60:d7:51:
07:57:1c:d9:f8:6c:75:4d:9b:fc:68:7b:fb:3d:38:
10:8c:fc:d6:97:2e:bf:50:74:c2:f9:af:e6:26:12:
8d:95:10:73:d9:23:01:7e:50:60:26:74:41:c0:5c:
7c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4E:F7:9A:30:26:BD:70:5F:04:54:D0:D1:26:2F:54:28:4F:C8:1F
X509v3 Authority Key Identifier:
keyid:23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:02:ec:b2:10:95:8d:a2:58:54:a2:ad:59:14:26:bd:9d:22:
c1:bb:46:20:1b:4d:b1:c6:7d:bb:4c:b6:e2:53:5d:6c:8d:e1:
b8:50:97:d9:b7:03:47:ff:fd:ce:9b:23:97:9d:e2:83:f8:d9:
5b:57:9f:74:d9:54:f4:1d:03:47:12:4a:92:0f:5c:8e:fb:13:
85:02:84:69:6f:01:0d:61:2e:4f:65:1a:cf:50:c1:ea:6a:e5:
f5:37:d5:cb:40:e0:5d:70:18:73:20:ca:bc:78:6d:9e:2f:5d:
a8:ce:94:f3:60:c0:90:99:71:74:88:2d:13:46:58:66:1b:90:
69:a7:e9:25:27:c7:7b:5b:a7:83:84:94:b4:df:c1:77:49:42:
6e:41:29:a1:4b:7a:1c:13:c2:6e:5a:3f:9c:45:c4:80:9e:52:
02:88:f7:4f:96:31:8b:e1:b0:40:da:bd:f4:eb:ee:9d:b0:e0:
05:aa:bd:90:fb:ec:0a:df:16:73:f8:fd:0f:40:16:4b:48:80:
10:2e:1c:ea:bb:62:50:cf:14:f9:01:8f:de:2d:09:e2:09:a5:
cf:f8:61:5e:dc:93:f9:dc:be:40:ef:0a:38:c6:5d:90:94:39:
00:34:82:d9:27:0e:ec:3d:67:53:c3:b3:b6:79:c8:c2:99:7d:
79:21:b8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:31 2025 by rpki-client