Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
File: I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft (raw, json)
Hash identifier: Q0XDFIRhdXjcKr4SjbQ5Rh6xCxLO8X3BGdP/IuaAQo4=
Subject key identifier: 3C:AC:98:0E:B0:62:35:98:F6:94:72:DE:EC:19:79:55:E5:45:4F:11
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Certificate issuer: /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial: 019A0DB9B38B4C6D0B3586B3E174348DEDCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
Manifest number: 0AB1
Signing time: Wed 22 Oct 2025 21:01:05 +0000
Manifest this update: Wed 22 Oct 2025 21:01:05 +0000
Manifest next update: Thu 23 Oct 2025 21:01:05 +0000
Files and hashes: 1: FSsZO7tf2uyGI_GTm9rqM0qzwyo.roa (hash: +N02NDT8cxwi6khKovC14z/AE2KwVw5IVFU5XCAAiJs=)
2: I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl (hash: 7uwDWFwzK4+S0ASaP6SDOICXudF9ZkwqJVpgPR/vOD4=)
3: pGnzHT17oa6cGFgaKh_Mb1gg4HU.roa (hash: tnbr1e3XQydvlzjAP3o8eDkS1HDgrVPM/kErIEuP+f8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:b9:b3:8b:4c:6d:0b:35:86:b3:e1:74:34:8d:ed:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
Validity
Not Before: Oct 22 21:01:05 2025 GMT
Not After : Oct 23 21:01:05 2025 GMT
Subject: CN=3cac980eb0623598f69472deec197955e5454f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0a:0a:35:f9:0e:44:b5:d6:a8:b7:87:a4:80:
e6:83:d9:ea:fd:9c:8a:2a:66:c4:5b:5f:b4:59:b3:
d3:c8:bb:e8:76:d0:d0:93:44:80:4c:5c:cc:5f:24:
de:23:21:5b:5a:fc:e0:7e:ec:35:c0:0c:aa:ee:46:
38:93:5a:6f:13:96:f6:22:42:f6:fd:0f:f1:3b:f4:
84:8c:90:bc:c4:db:2c:be:4a:e8:cd:ef:4e:b8:98:
34:92:d6:05:b9:96:7c:19:87:7e:3d:b2:ec:4f:c6:
df:5c:15:91:96:e0:56:c0:32:f4:24:42:bd:ff:0f:
33:0a:4e:9d:37:97:7e:a7:c7:ee:05:ce:fb:f5:cb:
bc:67:2a:8e:8d:01:05:74:89:4f:99:48:f5:8e:36:
a1:00:38:b3:49:c9:7e:e1:db:72:3f:15:a3:24:da:
50:de:f6:52:eb:0e:26:91:a6:4b:07:4c:db:bb:ff:
6c:7c:2d:29:ec:9f:e5:02:b2:d1:5f:a8:69:0f:e4:
83:e7:70:3d:13:88:83:a0:ed:9f:95:ae:94:bd:fd:
11:9e:81:73:93:ab:04:ff:33:04:e5:63:5c:ed:65:
1c:94:b2:11:7a:10:fb:97:f1:19:fb:23:92:38:0a:
db:92:41:df:7d:d9:b5:22:d8:c8:ac:c4:ba:54:b0:
3a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AC:98:0E:B0:62:35:98:F6:94:72:DE:EC:19:79:55:E5:45:4F:11
X509v3 Authority Key Identifier:
keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e2:cf:5e:56:f8:78:2e:9d:ba:c3:3d:42:9d:14:81:ad:a7:
da:62:90:fc:b5:dc:e4:ab:c0:cc:b2:27:9b:d8:7c:0c:a4:f9:
e9:22:9e:11:3f:b8:99:e7:ab:0a:8f:79:76:25:cd:3c:08:02:
e8:dd:9c:f8:16:06:b1:69:5b:0b:56:95:0b:11:5f:dc:de:92:
b8:f6:a0:0b:f8:d8:13:a8:92:65:d6:eb:e6:65:2d:e9:d1:72:
3d:86:fe:04:79:8f:91:84:a8:15:d2:29:b1:28:ed:57:47:fc:
d3:48:0e:9a:eb:d9:5d:2d:14:12:b2:68:b7:8c:09:6d:ea:c0:
f8:06:3a:9e:13:8b:6f:73:f2:95:49:72:47:68:57:5d:5a:60:
64:56:98:65:8a:5d:d6:3a:68:3e:d5:b3:bc:75:6c:ed:e5:92:
0e:4a:68:36:0a:68:99:12:cc:0f:b3:76:c6:ea:36:e1:fd:8a:
92:d3:8c:af:25:1d:6e:10:ef:76:7e:bd:2b:19:11:74:12:ea:
ea:31:1b:f4:73:78:d5:00:c6:39:9c:66:6a:66:21:bf:f3:94:
4d:7d:bc:40:32:3b:33:fb:7b:60:a4:d3:53:43:e9:99:bf:8a:
36:03:5f:35:c8:34:84:c3:c5:23:65:8e:69:7a:43:71:f4:d3:
97:8e:5a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 22:49:25 2025 by rpki-client