Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
File: ibMy1XzhT6sevXRoF91wEGLHSog.mft (raw, json)
Hash identifier: Kl69EXeHf9OXubPNyYGtE/NhCDcNV2PSMV1f5QHlsQE=
Subject key identifier: A7:7D:06:E0:1B:79:2C:28:0E:8F:0F:44:5C:99:37:AA:F7:2E:96:1C
Authority key identifier: 89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
Certificate issuer: /CN=89b332d57ce14fab1ebd746817dd701062c74a88
Certificate serial: 019A45F1613815B53E7F15BD7159654B56D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
Manifest number: 1712
Signing time: Sun 02 Nov 2025 19:00:38 +0000
Manifest this update: Sun 02 Nov 2025 19:00:38 +0000
Manifest next update: Mon 03 Nov 2025 19:00:38 +0000
Files and hashes: 1: YfIFhU0ONooUeM5LYDIwujefT70.roa (hash: FzOwlF2eZufoM+/Vg+xA3fNm2T39ptzXccEUItomPVo=)
2: gPT7sW4G2ZN9UNmphmg_hk0jbRw.roa (hash: PHxlHQzqJqhF3hMVVWjePq2Bjc4OfaYNDTan7+Vo8UQ=)
3: ibMy1XzhT6sevXRoF91wEGLHSog.crl (hash: RZX42Sahoc/DxC05px98NCv1w6eevphVXeeng9I/WrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Nov 2025 14:19:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:45:f1:61:38:15:b5:3e:7f:15:bd:71:59:65:4b:56:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b332d57ce14fab1ebd746817dd701062c74a88
Validity
Not Before: Nov 2 19:00:38 2025 GMT
Not After : Nov 3 19:00:38 2025 GMT
Subject: CN=a77d06e01b792c280e8f0f445c9937aaf72e961c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:be:51:41:67:ff:32:5a:53:54:f2:f4:bc:a8:
95:8d:7f:c0:00:87:ac:49:74:22:34:33:9d:01:95:
1e:49:c5:bd:cc:ed:fd:b5:46:69:ac:7c:97:7b:31:
95:a3:5e:b1:ff:9c:c9:23:93:19:a6:ac:77:c4:2f:
18:fc:e5:d3:56:5c:f5:1f:18:5a:2f:1b:4b:de:26:
e3:1e:d2:64:7b:86:ed:0c:48:31:0b:b6:29:48:43:
78:1c:e7:83:e3:3b:53:1b:a2:08:08:c6:04:c7:00:
8b:f4:86:9a:94:35:09:ee:e6:5b:30:ed:30:f5:09:
ca:c3:c0:75:11:0d:39:0f:e7:75:ab:17:cb:73:90:
30:ff:c7:d2:45:db:b7:ce:d2:70:5f:5e:38:9f:67:
94:18:32:30:f3:84:80:85:42:45:9a:38:e9:53:50:
2d:ba:7d:e5:3b:4b:40:87:c0:05:3d:4c:21:c8:7f:
fc:d8:ec:e8:cf:1b:79:6e:52:9a:03:11:43:9e:47:
d1:ab:a2:a6:0a:54:2d:c9:34:09:20:5d:ba:f4:7a:
35:df:85:6c:f2:2c:b1:2d:db:90:45:b9:fb:7a:e3:
27:71:27:f3:8a:72:4d:a4:f1:28:c5:59:33:69:dc:
87:d7:9e:8c:51:78:ba:3e:ab:5d:a7:2f:72:bd:ab:
f9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7D:06:E0:1B:79:2C:28:0E:8F:0F:44:5C:99:37:AA:F7:2E:96:1C
X509v3 Authority Key Identifier:
keyid:89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:10:7d:92:16:9c:42:df:0a:ae:d0:44:0d:b9:ae:31:e1:ea:
94:16:cc:28:45:2b:9c:0e:4d:87:03:d1:14:09:c6:76:5d:ce:
c7:6b:15:ba:03:98:f4:f4:81:66:82:0d:7f:f8:a2:76:71:53:
1d:9a:85:27:ad:bd:6d:ab:05:4f:87:22:bb:a2:d9:bd:62:50:
a9:61:f3:76:9e:e5:de:04:42:8a:64:eb:05:df:4e:59:1c:91:
c8:bb:46:0a:6c:ac:96:7c:b0:40:70:73:9c:a9:d9:76:ff:4c:
d5:a3:b7:27:ce:06:16:b8:c1:ed:4e:81:28:80:69:90:eb:d6:
19:3a:36:cf:0e:81:23:2a:30:96:53:6a:ce:89:c8:b3:f6:b2:
67:4c:93:93:a5:f8:6e:6a:14:d0:c7:94:d4:c9:d6:2e:f8:66:
f3:30:2b:0e:c5:01:14:5b:a0:30:1a:e0:2d:85:c5:ed:55:81:
e4:21:1a:68:f7:d0:54:5a:4d:8a:78:14:ad:9b:74:76:5a:db:
93:fa:46:74:c2:a9:99:ff:45:d5:d1:e3:2d:e6:ab:12:88:c5:
70:ab:0c:80:98:5f:17:5a:72:77:5e:68:c8:45:bc:35:7f:9f:
76:83:97:07:6a:82:c9:a6:8a:46:b7:da:73:1a:d7:b9:0a:09:
31:de:e0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 21:38:31 2025 by rpki-client