Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
File: IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft (raw, json)
Hash identifier: KbCeFkwcheO0yrvws7XbMS2N5vOAPzcXbVFYvDDfGzQ=
Subject key identifier: 14:7D:45:51:0B:71:02:98:4A:F7:C5:AE:00:1F:08:9B:DC:2B:5E:35
Authority key identifier: 20:50:DF:51:F0:E5:BC:81:DB:4B:05:F4:49:F7:43:08:D7:FC:FA:2E
Certificate issuer: /CN=2050df51f0e5bc81db4b05f449f74308d7fcfa2e
Certificate serial: 019A22F7E1A2FDF16BA09AD8D2A38AED4A09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
Manifest number: 167E
Signing time: Mon 27 Oct 2025 00:01:01 +0000
Manifest this update: Mon 27 Oct 2025 00:01:01 +0000
Manifest next update: Tue 28 Oct 2025 00:01:01 +0000
Files and hashes: 1: 5TmF660osVLf2yedLZYIouqKzCQ.roa (hash: svEuw+A3XrP85kyKwdSMhC87V3nCBDwlLWE+iKrkH+s=)
2: IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl (hash: 1QBgASLQx80y8Uq+dUBiYx4uCuP5d2QAWCwyqwZSmSQ=)
3: QbfQw6PQWXMnUYTcNMeoW813ttw.roa (hash: g9TBhQ7bZYV+JTfg685xMP7NzWGbPIajKmZ/OPgHv/k=)
4: SqW3-Pav388bYoCFb9onFjXDUEM.roa (hash: rQ+0p4O5Q843ntXsLKc+VAqP1ejZ7AJIeWPPGt1vzco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:e1:a2:fd:f1:6b:a0:9a:d8:d2:a3:8a:ed:4a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2050df51f0e5bc81db4b05f449f74308d7fcfa2e
Validity
Not Before: Oct 27 00:01:01 2025 GMT
Not After : Oct 28 00:01:01 2025 GMT
Subject: CN=147d45510b7102984af7c5ae001f089bdc2b5e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d1:08:c5:10:e1:f5:bd:82:73:67:38:e3:33:
b0:d9:e9:f4:63:d2:80:d1:4a:31:83:0f:8d:f7:97:
57:0f:77:82:1a:48:89:ce:34:ec:85:0e:b2:12:7b:
7e:c8:ee:34:eb:86:7d:7c:e5:31:67:6a:85:8d:a6:
78:01:e6:32:1a:53:4f:27:18:d7:1a:34:f3:06:7d:
53:de:4d:76:1e:ea:b0:f8:2d:22:53:e9:56:63:e6:
44:75:0b:0d:c6:b6:78:b2:aa:4a:b3:db:a0:d1:ac:
84:ca:a7:f8:33:77:6e:c6:67:a9:dd:94:88:2e:63:
02:d6:71:47:c6:a1:45:ee:28:56:28:f4:c1:f0:89:
64:aa:dd:4c:4b:31:5c:6f:0e:6b:e7:af:da:af:dc:
53:31:74:47:b3:4e:b9:6d:a0:5b:51:6c:e0:a9:61:
06:f2:d4:d7:b6:92:28:c8:3c:b9:60:76:fa:83:40:
e1:f6:07:a2:ef:5d:1e:02:98:76:a1:2a:af:b4:09:
ed:9f:56:06:cf:3e:14:c9:9d:b9:21:8a:5f:33:a8:
a0:6e:e0:7f:e5:33:27:f7:af:86:8e:09:73:d5:09:
91:27:15:d4:2f:8e:a9:f6:fd:ad:61:c2:9b:35:08:
c4:84:1f:5b:36:04:cd:b4:d2:8b:6a:e0:68:49:74:
79:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7D:45:51:0B:71:02:98:4A:F7:C5:AE:00:1F:08:9B:DC:2B:5E:35
X509v3 Authority Key Identifier:
keyid:20:50:DF:51:F0:E5:BC:81:DB:4B:05:F4:49:F7:43:08:D7:FC:FA:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:56:54:da:fa:0a:38:92:3c:4c:83:02:f8:7c:7f:b6:08:38:
54:fe:3f:cd:09:cd:0c:ab:20:a8:00:0c:c7:56:1f:eb:d5:6d:
67:4c:fb:ef:c8:b6:f5:94:ec:08:27:c0:3e:0f:28:db:06:80:
b1:21:46:53:f5:07:db:b9:e1:40:03:77:e5:a1:49:b0:a0:8a:
3c:ac:f4:2a:68:90:02:46:65:3b:c7:eb:90:99:41:21:a1:2e:
ba:96:d8:ea:8b:34:f4:c5:4b:58:61:74:c0:5e:94:66:f6:a5:
6f:62:b5:bb:99:3a:0a:47:97:0d:59:26:85:f9:0c:a2:e7:fe:
9c:57:4c:b2:62:8a:eb:d0:6e:34:81:e1:7c:cf:b9:cc:ee:eb:
ac:7d:fd:e9:ad:c4:96:1b:58:07:30:42:b5:d8:c2:f5:a2:4b:
0e:0e:57:e0:1f:1a:ec:ce:4a:7f:d9:08:5e:48:3a:65:65:43:
a3:64:c4:70:f2:98:62:e0:c5:01:e0:ca:62:c0:f8:7b:e9:4d:
07:64:e5:0c:72:97:2b:31:40:78:36:3c:76:32:80:41:d3:3b:
1f:11:fa:de:a4:ab:3d:77:00:28:40:73:d6:d7:93:e3:ed:ed:
08:b5:0d:85:cc:4f:99:aa:4d:42:a7:4e:17:38:17:c3:35:45:
1c:f6:c3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:46:41 2025 by rpki-client