Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft
File: ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft (raw, json)
Hash identifier: 5AdC9MStivPtrgflkdqy0Ucl171uoSt2e+pBI3rwAts=
Subject key identifier: C4:A8:03:24:49:B1:9A:CB:58:A1:13:40:0C:0A:2C:D8:DD:E2:4D:1E
Authority key identifier: 8A:38:D1:19:1F:66:F1:F0:31:5D:E5:F4:5C:C1:94:D1:CD:19:D1:FB
Certificate issuer: /CN=8a38d1191f66f1f0315de5f45cc194d1cd19d1fb
Certificate serial: 019A49CE55E6518D935957ED48AF20F43B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft
Manifest number: 170A
Signing time: Mon 03 Nov 2025 13:00:50 +0000
Manifest this update: Mon 03 Nov 2025 13:00:50 +0000
Manifest next update: Tue 04 Nov 2025 13:00:50 +0000
Files and hashes: 1: hLakS4LRqtwndizOwv35_LPmSM8.roa (hash: T21fBsQZHckhVR25IcmVqL7irT842KR48E+IblvWuLQ=)
2: ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl (hash: XNpBIgJ/YkfYBiIYC/d9tCgVQOUfYrs3oK8Q73WQwSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:49:ce:55:e6:51:8d:93:59:57:ed:48:af:20:f4:3b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a38d1191f66f1f0315de5f45cc194d1cd19d1fb
Validity
Not Before: Nov 3 13:00:50 2025 GMT
Not After : Nov 4 13:00:50 2025 GMT
Subject: CN=c4a8032449b19acb58a113400c0a2cd8dde24d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2d:77:ab:7f:07:9c:15:a6:e1:0c:ee:36:94:
04:9c:9c:0e:e9:31:dc:8d:51:d0:71:fd:0b:29:31:
76:20:47:ac:0f:c3:36:c8:27:94:c2:b5:fe:f2:d1:
a4:51:71:d0:af:83:5f:cb:c2:a2:c8:91:15:7e:39:
40:f3:6f:ec:a8:5e:c0:3c:d1:64:16:99:45:08:a9:
61:91:89:8c:9a:04:e3:08:21:70:db:13:dd:b4:68:
80:09:75:1d:d6:aa:c3:f0:5d:49:25:01:a8:99:bd:
cc:3d:02:21:ff:f7:b3:c0:e8:08:ee:7c:48:ff:27:
e3:0b:11:8b:12:1d:b5:e0:ce:63:38:8b:2c:45:16:
7d:ee:08:58:89:96:b8:cc:05:8a:d3:f8:c6:f9:a2:
08:6d:d2:43:05:db:bb:3c:47:73:97:42:54:5b:07:
8a:94:ec:ae:e3:ca:81:c7:0e:a5:8f:93:5d:2e:4d:
57:66:a5:9f:ac:5e:96:9c:c9:c0:fb:8e:1e:99:3d:
6f:bf:a5:d6:69:fd:cd:ca:00:45:c2:40:d0:8c:e0:
44:dd:35:d0:0d:fd:cb:61:d6:23:27:7e:4d:43:ab:
14:2d:09:6d:08:4e:ab:a4:85:98:d7:8b:cd:5c:6d:
1e:a3:23:27:0a:5e:a0:17:92:03:63:22:d9:13:8c:
d8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A8:03:24:49:B1:9A:CB:58:A1:13:40:0C:0A:2C:D8:DD:E2:4D:1E
X509v3 Authority Key Identifier:
keyid:8A:38:D1:19:1F:66:F1:F0:31:5D:E5:F4:5C:C1:94:D1:CD:19:D1:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:19:ab:d4:6f:2f:62:3a:a1:e6:05:b0:6c:21:19:23:04:fd:
de:15:17:c7:76:2c:61:41:0b:d0:be:cf:b3:ce:ef:13:ec:e4:
5e:cd:cd:5c:23:74:fc:3f:e1:c8:ba:fe:70:16:e0:4b:a5:01:
c7:18:46:b9:8b:c0:bf:2b:66:84:6f:47:a7:85:ed:59:7e:ee:
72:8b:37:60:53:df:ea:63:21:ae:3a:ec:de:e3:6c:f7:72:73:
b2:53:a0:a3:c6:93:ce:6e:db:b7:fe:9c:4f:6f:17:93:72:5e:
25:82:f5:96:ac:b4:21:2c:c7:77:e4:5d:5f:7e:0c:27:83:b5:
61:c7:90:d0:27:1e:d2:35:95:1a:53:a4:f0:c2:e8:1b:ae:f4:
23:32:6f:68:f7:ab:86:6d:45:a9:07:9b:3f:04:f0:3b:48:0c:
60:74:57:3e:b0:2d:e3:89:37:ea:47:c4:67:65:cc:87:d1:2a:
2c:b4:25:e2:01:8d:6d:f6:81:6f:fd:6e:1c:33:aa:56:10:49:
45:52:db:0e:8b:e2:c8:19:e0:1d:81:71:47:f1:30:53:d0:e8:
fe:63:45:52:28:08:5a:29:c7:88:7d:9a:b3:6f:cf:9d:76:d1:
da:ef:84:ea:21:6e:35:cd:e5:62:89:79:c2:da:ff:98:0d:b4:
49:0f:9a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 22:11:16 2025 by rpki-client