Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
File: iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft (raw, json)
Hash identifier: gHrPBmmK36PSIwj46DYkeNEiftlwqIk7CGPmjCAzPik=
Subject key identifier: 74:9C:48:0A:10:8D:C2:60:E0:CC:54:96:CC:66:11:84:C2:FC:04:D7
Authority key identifier: 89:53:64:DD:8F:F7:30:A9:08:B0:9B:5F:99:13:C1:53:FC:16:AA:3C
Certificate issuer: /CN=895364dd8ff730a908b09b5f9913c153fc16aa3c
Certificate serial: 019A71B800F84D42EB6A6C46306ACD190BD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 07:01:15 +0000
Manifest this update: Tue 11 Nov 2025 07:01:15 +0000
Manifest next update: Wed 12 Nov 2025 07:01:15 +0000
Files and hashes: 1: iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl (hash: /iHyfsUczKpUhwmv2zbC/FaGPe8aTBVvgR89NBklL1o=)
2: vZncObou1n1Gou3XB_i7Ru4V5WA.roa (hash: iik1zhTFoCIgqbBLWbxX8UR2ffHIMvhG03bvL/Xp/YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:00:f8:4d:42:eb:6a:6c:46:30:6a:cd:19:0b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=895364dd8ff730a908b09b5f9913c153fc16aa3c
Validity
Not Before: Nov 11 07:01:15 2025 GMT
Not After : Nov 12 07:01:15 2025 GMT
Subject: CN=749c480a108dc260e0cc5496cc661184c2fc04d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:42:a0:8f:cc:e5:88:e5:39:28:b0:fa:10:4a:
82:c9:a8:5d:94:2d:ea:07:81:ec:97:2a:22:15:51:
d7:6b:ab:12:01:a1:ef:ec:4b:78:73:3a:4a:bb:42:
b9:ea:92:d4:68:8b:19:c5:52:07:d4:45:aa:de:f9:
2f:18:9c:6e:6d:b3:de:3e:c8:78:c8:57:d2:02:89:
ed:a3:74:65:5b:91:0f:8c:bd:0d:b1:df:ca:46:1c:
16:39:b7:38:6f:87:f1:94:2e:13:e5:5e:31:1e:ba:
7e:f3:29:06:e0:ec:04:51:a1:d1:09:70:c6:92:10:
86:12:da:9e:e2:dd:8f:d7:18:99:9e:88:cd:54:1a:
a3:88:5b:df:56:72:4d:8a:1b:67:f6:1d:2a:af:ea:
bf:f3:dd:c5:70:e8:ed:91:b1:fa:eb:f1:72:be:52:
6a:81:09:07:7d:3f:a7:95:fb:7d:e2:ec:a1:d8:43:
9f:4b:06:bb:9c:79:a2:47:46:de:51:5d:e8:39:47:
9f:5d:3b:f2:b3:7e:dd:74:91:90:3e:1a:90:64:46:
ee:8a:dc:e4:f6:3b:c4:c0:0c:1f:4d:ec:b9:0c:6a:
53:8c:b3:95:3f:cd:b0:f9:6a:51:f1:da:83:e8:23:
fa:11:c7:66:22:47:cc:25:12:53:ba:64:5c:85:27:
d9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9C:48:0A:10:8D:C2:60:E0:CC:54:96:CC:66:11:84:C2:FC:04:D7
X509v3 Authority Key Identifier:
keyid:89:53:64:DD:8F:F7:30:A9:08:B0:9B:5F:99:13:C1:53:FC:16:AA:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:38:30:ac:87:53:48:4d:d3:a3:ee:81:a4:29:c5:b1:dd:23:
0f:d8:bf:cb:77:e2:8a:b7:ac:37:13:20:c7:08:58:d7:7a:64:
91:a4:43:b6:0e:4c:88:b4:59:6a:aa:2c:73:37:69:b8:87:ee:
9b:56:07:a6:59:ba:aa:5a:8c:0b:81:48:cf:ef:b5:b1:9f:a3:
6d:da:6a:8a:9d:3f:29:b3:f1:46:c8:8d:ee:3a:ca:e4:64:7e:
3e:2a:16:65:d0:93:62:b8:f9:26:1f:58:bd:f4:c2:17:2b:3c:
5d:06:71:01:2a:93:64:e3:e6:7e:10:87:10:3c:bb:ad:a7:fb:
b1:42:48:5a:ea:5f:63:e4:c3:6e:60:42:ef:49:c7:23:67:7e:
89:ce:60:0e:c7:ec:b3:6d:ea:ff:50:33:1a:53:21:34:b2:80:
d8:fb:20:64:7f:5c:8b:81:d4:1f:a5:b9:60:d0:7c:41:d0:cc:
96:48:d9:d2:12:da:0c:2f:38:5d:46:04:dc:fe:44:10:4d:19:
91:74:aa:b7:14:47:fb:2c:ea:b0:fc:d0:77:c3:d9:0d:6e:d6:
70:70:6a:59:a6:ca:c1:b3:0f:50:5b:0c:ba:1f:a3:3e:96:48:
e7:c3:a7:86:29:3a:ba:d3:91:31:77:56:d8:56:c2:6f:c1:86:
a4:68:8c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:54:23 2025 by rpki-client