Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
File: ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft (raw, json)
Hash identifier: dibwERVyjEQeCyrN9s4oNUo0RkXkps2p8XnZITpYF08=
Subject key identifier: 26:F4:ED:C1:48:CB:93:8C:73:60:FB:41:48:00:4C:96:06:CD:60:FF
Authority key identifier: 8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41
Certificate issuer: /CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41
Certificate serial: 019A0B5D6818EF1578D7B453FB073D4E02C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
Manifest number: 07BD
Signing time: Wed 22 Oct 2025 10:01:02 +0000
Manifest this update: Wed 22 Oct 2025 10:01:02 +0000
Manifest next update: Thu 23 Oct 2025 10:01:02 +0000
Files and hashes: 1: ctXergtQbViumays4Ono_Wloemw.roa (hash: a+neR/aKDm0TTcExel5rgJgh8DlN9uyZuV72kD5h5x0=)
2: ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl (hash: /12WDFRk90Qh3/kF0nlhYsRWFZv3omlyYIEdAHY9Y0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5d:68:18:ef:15:78:d7:b4:53:fb:07:3d:4e:02:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41
Validity
Not Before: Oct 22 10:01:02 2025 GMT
Not After : Oct 23 10:01:02 2025 GMT
Subject: CN=26f4edc148cb938c7360fb4148004c9606cd60ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:02:02:1a:ec:9d:4f:3b:f6:64:95:b3:6f:ba:
0d:12:f6:a7:e4:1b:4a:51:fd:8b:45:80:90:76:a6:
30:4c:42:20:99:3d:51:f4:d4:29:63:82:45:d7:40:
4b:12:4e:c6:1f:e9:02:1e:ed:6b:cc:9d:1d:dc:a7:
28:05:6a:68:64:46:6c:60:63:f6:6d:f1:8e:af:c2:
0b:cc:4a:4e:de:a2:48:12:4d:87:24:9d:ac:6a:35:
bd:e9:fe:3e:17:cf:a3:df:fd:9b:0e:74:2c:7d:6e:
05:b3:90:4f:00:4d:47:4f:d9:a8:12:e5:62:35:94:
df:a7:12:57:39:1e:cc:a4:86:c7:32:b7:49:62:e1:
6d:44:5c:4f:54:1f:7f:07:e6:13:e0:9d:85:37:43:
d1:82:7d:c4:9e:bc:36:31:b2:26:0b:e8:cc:0c:71:
e5:40:e0:71:24:e3:c4:e6:f2:57:a5:33:b5:8d:fa:
fb:42:2b:7d:d1:2a:a8:27:a9:22:20:7c:5e:56:36:
c8:46:6b:0f:63:46:a1:61:36:0d:a9:0e:04:41:f2:
88:08:48:ce:bb:70:75:ce:21:96:f3:07:8a:7e:a1:
ff:9b:f0:dd:bd:c9:47:3b:9a:18:e7:4f:34:6f:06:
a7:18:23:be:12:c0:6c:49:af:d6:20:65:3b:b7:f2:
15:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F4:ED:C1:48:CB:93:8C:73:60:FB:41:48:00:4C:96:06:CD:60:FF
X509v3 Authority Key Identifier:
keyid:8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ed:f6:08:fd:94:ae:cb:25:fc:e2:8a:f3:9c:42:a9:b5:53:
fa:e2:55:1e:f9:13:a8:5e:f4:ed:f8:ed:0d:e6:4a:97:bd:e9:
78:3e:ef:ee:2f:24:33:08:a2:e8:81:dd:c1:52:39:3f:33:5f:
8a:c1:9e:70:bf:d6:5e:d8:58:17:a7:85:63:a0:a3:e7:19:d1:
fd:2d:3e:31:e3:f2:f0:ec:f1:8e:0d:9a:02:d8:42:13:d8:3a:
87:3b:ef:cd:b6:a0:4b:da:2e:87:b8:cf:cc:3d:fc:8b:31:1b:
e2:ac:46:a1:1c:a6:91:64:14:11:8f:17:6b:e2:7c:c3:59:8e:
1e:e3:ad:91:e8:52:31:88:44:f9:44:66:ca:6c:bd:64:c5:e3:
c7:c4:c8:40:0b:40:0d:bc:80:f1:af:93:c3:54:54:21:af:cb:
05:d2:d4:41:9b:32:dd:24:f3:ae:c0:28:5e:23:9f:eb:67:14:
c1:f7:4f:44:1c:f9:b8:33:2f:36:b9:ab:5a:d5:fd:93:9a:be:
cd:b1:62:64:30:65:76:88:7f:70:f0:3a:e5:f6:37:95:18:c3:
3e:db:bb:e8:64:4a:63:c4:37:ad:5f:73:ed:24:66:30:47:40:
29:73:53:bd:b6:ff:ea:e5:da:b6:ba:5f:0c:37:1e:d2:5d:1d:
fd:5d:10:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 17:05:29 2025 by rpki-client