Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
File: hI2YANad664Rt_gWHDzogYH957Q.mft (raw, json)
Hash identifier: HQjprcyRdBpaUlsOVVn+v3AejBfZnRLpLcJooJyvzys=
Subject key identifier: D7:7D:A1:78:09:93:84:AC:DE:B4:8C:68:EB:B0:81:45:DD:FD:23:91
Authority key identifier: 84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
Certificate issuer: /CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Certificate serial: 019A1F88A950233F8EB96595625CA9250D17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
Manifest number: 0AED
Signing time: Sun 26 Oct 2025 08:00:41 +0000
Manifest this update: Sun 26 Oct 2025 08:00:41 +0000
Manifest next update: Mon 27 Oct 2025 08:00:41 +0000
Files and hashes: 1: Pi13Jn_f8QNwlYweA6cENA4uaSs.roa (hash: UZD7c+7NUs2opXS6uWJEcxhLpAXCSZYdWwe68q1uABI=)
2: hI2YANad664Rt_gWHDzogYH957Q.crl (hash: f0QwGXimmjhDRu9moZ/kogcWMe+hAVWylPGl7jVxrt0=)
3: kSeV1NXuoW2kMAhRuEJXNL0G3J8.roa (hash: BCpFIjkEeCfOQHY9iAYyAPzCmQqEp82NEt+xGk7yxzQ=)
4: sXoE76O0g9HbvTQdsrTuLQ6BEGY.roa (hash: 2c9XhIaXdBcwGvuorQuJKcEG+b0v5OcuRLvlracJLGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:88:a9:50:23:3f:8e:b9:65:95:62:5c:a9:25:0d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Validity
Not Before: Oct 26 08:00:41 2025 GMT
Not After : Oct 27 08:00:41 2025 GMT
Subject: CN=d77da178099384acdeb48c68ebb08145ddfd2391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a8:40:c9:ac:c0:e1:43:12:72:c3:d6:c5:d3:
a4:02:46:15:e2:8e:68:a2:f0:fa:41:a8:9d:c1:92:
55:51:7b:48:04:9b:2a:f2:ce:05:53:2e:f5:01:e3:
6b:1e:14:2d:bc:d8:87:39:d3:dd:9e:99:32:d2:d0:
de:20:ac:3b:56:4f:63:dd:12:72:3f:2c:6a:0d:68:
7c:8e:03:30:28:41:5b:77:51:b5:80:59:75:c6:66:
08:05:ec:44:11:85:dd:4e:b4:f4:56:2c:63:7a:08:
99:c0:fe:63:79:84:19:9a:c4:31:ce:a2:4d:30:0c:
4d:a7:2a:6e:14:1e:00:3f:2b:f3:1c:79:27:02:09:
c4:78:c1:89:1d:15:19:d9:1d:94:3a:84:e7:eb:f8:
bc:ae:8a:6d:bd:ed:24:12:a1:03:27:87:3b:12:79:
32:d8:e4:57:f4:15:5d:35:56:96:19:96:55:15:49:
60:66:80:a6:e1:0d:ab:7b:a5:eb:a8:10:21:2f:e9:
30:e3:be:76:7a:84:d2:5e:2c:f9:14:9f:41:f3:58:
72:96:a1:7e:36:89:ce:30:27:be:4d:51:55:44:b9:
65:2c:3e:b8:67:d2:6f:6c:34:8e:a1:3a:40:d6:c7:
81:b7:4b:7a:65:c4:f5:d3:6d:ef:ee:ac:78:f1:d3:
ca:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7D:A1:78:09:93:84:AC:DE:B4:8C:68:EB:B0:81:45:DD:FD:23:91
X509v3 Authority Key Identifier:
keyid:84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:22:7d:77:44:4a:c6:83:7a:b3:ab:f3:03:45:89:17:e1:41:
a3:22:50:e0:0b:81:24:f3:3e:88:1d:26:7d:0e:f0:96:5e:02:
bc:cd:59:eb:f3:31:38:ab:45:d7:07:ef:e9:d7:ec:f4:ec:b7:
e4:8f:2e:22:68:ce:ea:9a:2a:d2:9c:06:75:df:28:f3:2a:ee:
6e:35:3d:38:0b:fe:5e:e3:97:5f:29:b3:b5:c2:3b:1b:c1:60:
57:27:70:a3:9e:77:26:9e:7b:09:40:0a:cd:35:ea:c0:03:ec:
2e:c1:bf:e0:df:19:62:a6:48:b0:cd:cf:af:4e:d2:d9:3a:2c:
8e:45:1e:ae:e2:bc:8a:5e:4c:82:b5:3a:60:43:fc:7c:61:c2:
91:99:c7:37:d4:ea:75:ba:81:93:b4:8c:23:95:bd:91:d4:f0:
8f:b6:63:6d:da:23:49:61:16:6f:2f:9f:ed:64:11:c5:bd:55:
42:62:92:d7:50:16:f5:b3:f9:e1:94:02:2f:92:c8:43:86:29:
28:ff:f3:01:48:58:27:c4:d6:d9:57:c1:ac:d8:e7:ff:0a:18:
da:3d:eb:f9:04:70:32:31:93:3a:96:b0:b8:ee:ad:2a:88:9e:
64:4d:12:b2:13:fb:f8:7e:9b:da:ff:3e:b7:a0:a5:f1:c8:c8:
f1:3c:10:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 10:56:02 2025 by rpki-client