Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft
File: i5sBY-7p55KqoWt9UQXTRyEfMSM.mft (raw, json)
Hash identifier: IwxZ7UilvPPI74tm76VUhG4t3YtZkV4joizlRzC2CI4=
Subject key identifier: 20:11:A0:F2:54:64:B8:56:A0:7D:C3:AE:13:3C:C3:15:96:C0:11:0D
Authority key identifier: 8B:9B:01:63:EE:E9:E7:92:AA:A1:6B:7D:51:05:D3:47:21:1F:31:23
Certificate issuer: /CN=8b9b0163eee9e792aaa16b7d5105d347211f3123
Certificate serial: 019A741485DFA2853650116DDDDFEA4DEAB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5sBY-7p55KqoWt9UQXTRyEfMSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft
Manifest number: 0F6D
Signing time: Tue 11 Nov 2025 18:01:33 +0000
Manifest this update: Tue 11 Nov 2025 18:01:33 +0000
Manifest next update: Wed 12 Nov 2025 18:01:33 +0000
Files and hashes: 1: 0SrGSoxm46KHk5s_SkJdGCE1HAE.roa (hash: JwOVM2pq6uVpoEw0ksou2dKNGwx9rwOtGk9iEkBHbFc=)
2: Fj752bkxuJMKiLz6DxiNHNPGnCc.roa (hash: igeXZDlVZiFGBhSeEn8vHaUr4m/y63zRGTprEOmyBsQ=)
3: i5sBY-7p55KqoWt9UQXTRyEfMSM.crl (hash: xi0Ua9l4WHSuAAiySXoKxDb3+ZxJZsyFRZkLszRHUHU=)
4: t9CNJf3eXwpeMjr9B2y5JwU1fgQ.roa (hash: 1VYdgaCmthgCjQEP8F7ZlA1j3DUuIWlR2jF27HX+0/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5sBY-7p55KqoWt9UQXTRyEfMSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 18:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:74:14:85:df:a2:85:36:50:11:6d:dd:df:ea:4d:ea:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9b0163eee9e792aaa16b7d5105d347211f3123
Validity
Not Before: Nov 11 18:01:33 2025 GMT
Not After : Nov 12 18:01:33 2025 GMT
Subject: CN=2011a0f25464b856a07dc3ae133cc31596c0110d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:43:66:b7:17:fc:9d:5c:a2:0d:81:d0:a3:c4:
a3:8e:d8:05:fd:21:31:d8:ab:cb:7f:fe:6f:dc:02:
42:d2:6a:23:1f:e0:79:ea:a2:41:bb:9f:0e:08:71:
db:5d:32:ba:f6:2a:ef:30:3e:25:2e:86:f8:7c:03:
ec:9b:74:65:d5:62:bc:59:05:ad:33:87:4e:32:de:
8c:4a:67:f3:ae:41:c4:57:bd:52:f3:69:0b:1d:91:
fc:11:51:c8:ba:ac:3d:d9:cc:76:e6:9b:5b:6c:e8:
b2:4c:45:55:50:ce:17:1a:51:20:65:79:27:86:ce:
8f:92:b4:55:51:39:41:4c:ba:27:e7:3e:33:fb:b8:
9c:55:35:a4:37:9a:27:22:0b:67:9c:7b:5a:22:4a:
6e:66:8c:fb:2a:ec:4e:d7:60:87:14:6b:97:0a:85:
a6:38:a7:c9:88:57:99:36:c8:63:3e:9c:50:e7:e5:
7d:5f:14:e0:48:cc:7e:ce:32:06:19:74:b9:09:62:
10:de:15:4c:88:e0:19:08:ec:b4:fe:7f:88:c5:62:
3c:02:c8:92:73:58:c3:94:a2:c2:d7:23:5f:1c:7c:
20:7d:c0:62:b7:5b:da:7a:bf:93:56:dc:d7:0a:03:
ac:c6:d7:96:5c:33:4e:e3:7b:63:b2:05:61:b3:3e:
2b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:11:A0:F2:54:64:B8:56:A0:7D:C3:AE:13:3C:C3:15:96:C0:11:0D
X509v3 Authority Key Identifier:
keyid:8B:9B:01:63:EE:E9:E7:92:AA:A1:6B:7D:51:05:D3:47:21:1F:31:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5sBY-7p55KqoWt9UQXTRyEfMSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:7c:52:58:d4:77:72:0c:eb:6c:ac:93:95:ea:3b:66:b9:f2:
ca:c0:df:12:f4:f3:54:15:70:39:9d:d8:8d:e1:a1:56:7f:3d:
90:bc:ee:5c:a3:6b:cb:84:85:83:23:1a:ff:10:65:e7:0f:46:
af:26:a4:54:48:e2:d6:29:f5:23:51:67:ab:f1:49:6c:83:96:
e6:93:82:9f:ba:e9:70:d0:8c:0d:65:1c:9e:26:ce:90:cb:b0:
7f:0c:1e:db:94:b0:33:d8:f7:18:26:a2:bb:8d:bc:db:02:f8:
94:50:64:50:d2:fa:96:6c:ab:88:1e:10:4a:67:8d:99:f4:26:
4e:cd:52:b1:d8:e9:e3:35:3b:90:7d:3d:5d:87:77:d4:2a:c9:
d2:9d:ef:2e:36:e4:ca:c8:77:be:cb:e8:0a:83:e3:24:71:f2:
8b:98:93:38:06:44:32:f1:04:f3:56:df:54:91:f3:df:64:f7:
42:07:ac:af:a0:b9:e4:a9:d1:c1:7b:57:20:2d:d8:ec:33:d9:
9a:a8:81:79:33:2e:b7:4a:71:ad:c1:91:09:a9:26:0d:58:84:
36:10:af:04:8f:a2:27:5a:bf:09:ac:11:c1:13:93:0d:75:aa:
66:62:f6:3e:a0:7e:48:cb:dc:e1:f8:c2:34:11:52:7b:09:36:
6a:d0:3b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 21:10:38 2025 by rpki-client