Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
File: I6xIaAc5isHO7Akh0E1Amk9_R5s.mft (raw, json)
Hash identifier: iREn3PQ31cWBoCj3qq46eLgN1ruQ0BO/sNTHIqMRKUM=
Subject key identifier: AC:E0:1E:E6:91:2D:18:C2:66:E3:74:EF:B7:2E:45:85:44:78:18:FF
Authority key identifier: 23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B
Certificate issuer: /CN=23ac486807398ac1ceec0921d04d409a4f7f479b
Certificate serial: 019A71B82EF09576A4ED6A0198A2A38C8F80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:01:27 +0000
Manifest this update: Tue 11 Nov 2025 07:01:27 +0000
Manifest next update: Wed 12 Nov 2025 07:01:27 +0000
Files and hashes: 1: I6xIaAc5isHO7Akh0E1Amk9_R5s.crl (hash: 9hZSHqqhTCl0tm66nd9rCKvF6/Zi4vhbNdzANEnbCvE=)
2: bjCXA7rp-GRMTkdMkg_zXfKYrW0.roa (hash: FxnvNnw+IOeKtHJC0KTXpxkTr4pA05J6vavAi4HV2BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:2e:f0:95:76:a4:ed:6a:01:98:a2:a3:8c:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ac486807398ac1ceec0921d04d409a4f7f479b
Validity
Not Before: Nov 11 07:01:27 2025 GMT
Not After : Nov 12 07:01:27 2025 GMT
Subject: CN=ace01ee6912d18c266e374efb72e4585447818ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:31:7e:53:a1:e2:dd:cb:11:a9:b8:24:7f:4d:
14:4b:18:b1:7e:fa:54:8c:2c:b4:a2:1c:aa:38:1b:
40:cf:65:cf:8c:c4:bf:5e:91:0c:d3:8e:36:7b:b5:
f7:18:63:ce:61:38:d4:b9:3b:bd:1d:c6:37:ad:44:
bd:75:e2:6a:7b:02:97:59:8b:d4:d2:25:f5:6e:63:
da:3f:28:59:b4:45:35:19:9b:0c:c2:4b:39:2d:e0:
54:37:0f:ec:6a:63:3c:49:c0:4d:3d:ef:fb:97:71:
eb:de:00:cb:c1:65:cd:21:76:2c:9f:82:78:78:f4:
be:79:8f:17:cb:70:fd:13:89:fa:6e:4c:b3:14:e7:
aa:42:b8:ff:d3:a1:35:2c:e0:36:23:28:61:81:12:
2d:07:bf:d3:91:2c:ed:00:ee:d9:fc:10:92:e8:0b:
40:29:d5:3c:61:85:6c:d0:79:0c:5f:18:a9:d7:f3:
70:be:89:70:4e:6e:c9:2a:ab:ef:61:30:48:f3:94:
27:dd:14:d6:c0:c0:80:b5:84:d9:77:79:1a:04:4c:
0b:50:32:e0:73:61:3c:ad:3a:d6:28:91:2b:8a:d2:
2e:b7:1b:b0:20:27:64:14:be:5a:59:dc:c6:1e:e8:
65:5e:0f:54:3b:8f:ad:e2:07:cb:76:2d:ef:92:dd:
b4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E0:1E:E6:91:2D:18:C2:66:E3:74:EF:B7:2E:45:85:44:78:18:FF
X509v3 Authority Key Identifier:
keyid:23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:50:c3:22:af:89:5b:4f:b3:6e:91:e9:0b:cc:5e:f9:bf:32:
00:aa:f4:aa:38:18:07:94:93:3b:4c:44:44:f6:ab:dc:77:e3:
33:22:dd:d9:66:5c:2d:9e:99:fd:02:88:90:3b:19:81:2e:7b:
08:68:f0:95:bc:6b:a5:ab:ff:ad:f8:37:f4:2a:8d:e8:62:1c:
6d:69:c9:76:28:b9:05:11:3e:35:1a:f9:28:c6:ad:a5:35:7f:
dd:e4:50:b4:9c:cb:77:8b:9c:a0:33:88:84:94:5b:76:53:af:
f4:7b:2e:94:72:e7:61:70:ed:ed:5b:cc:36:bf:a8:66:f3:33:
53:1e:25:0c:7d:65:b1:18:e5:67:e8:c1:2a:59:ee:63:ef:e3:
64:56:72:fb:37:d8:0d:c0:e3:b4:24:ab:1b:e4:8e:c6:de:f9:
37:45:16:fc:db:02:9b:82:84:c7:56:05:9f:f8:3a:88:04:ec:
92:1b:17:84:fa:26:e0:eb:74:a3:27:82:07:df:65:1c:4e:42:
4d:02:a7:bc:ad:3f:bb:63:8d:23:7f:20:f9:85:e0:eb:4f:bb:
d2:7d:dd:07:9e:57:90:a1:33:73:d0:fd:42:f6:57:97:b5:ee:
63:2d:26:45:ff:87:ca:0b:75:42:38:87:87:9a:11:f9:f9:de:
6b:73:01:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:35:10 2025 by rpki-client