Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
File: iXj_XaszxC2mX-Thq_vKTq-90qo.mft (raw, json)
Hash identifier: uXCGrNaQzwv6WgvT6SK8gbjippi4v7iwcQA8nc9eHFQ=
Subject key identifier: 26:99:97:60:C2:3D:6E:D2:61:DD:2C:06:DA:58:61:F7:D9:B2:07:72
Authority key identifier: 89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
Certificate issuer: /CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Certificate serial: 019A4B4E6A258EC95BBABB8C2BBB7EAD22B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
Manifest number: 12B4
Signing time: Mon 03 Nov 2025 20:00:21 +0000
Manifest this update: Mon 03 Nov 2025 20:00:21 +0000
Manifest next update: Tue 04 Nov 2025 20:00:21 +0000
Files and hashes: 1: 4nkxi3-lAvnol4KZpv_fbMO-o8Y.roa (hash: 7IJ8WtHdrV8cqGqjR8uILsd0Nv/W6isRILc3Ixuy+NU=)
2: 5-1oK7ZffFqStfo7QWXqKcGuZfk.roa (hash: ae86GvhPxW1Ea0shedYB3VtmcIvsIfxJLLLA1E/5h/A=)
3: iXj_XaszxC2mX-Thq_vKTq-90qo.crl (hash: hE4YcirPKOX5tFrZLQPvaKbbBm8OHwEnpnRX90Lo+gQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 15:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:4e:6a:25:8e:c9:5b:ba:bb:8c:2b:bb:7e:ad:22:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Validity
Not Before: Nov 3 20:00:21 2025 GMT
Not After : Nov 4 20:00:21 2025 GMT
Subject: CN=26999760c23d6ed261dd2c06da5861f7d9b20772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:20:c7:34:45:f3:80:38:d2:12:d2:65:ae:4f:
c3:b0:56:ae:78:af:a6:75:70:77:51:ef:90:aa:f0:
f2:7b:b8:69:76:6b:27:ad:17:a1:a6:01:2f:19:04:
2c:72:d0:43:bc:87:87:db:74:af:69:c4:f5:45:7b:
b6:06:07:f0:a6:13:83:a2:06:5e:32:d7:cd:9e:e7:
b6:93:2a:99:0a:f4:4b:3d:a8:47:a3:1a:23:42:03:
3d:0f:27:cd:1a:a3:73:f3:5c:e5:45:b1:73:31:76:
10:d8:51:5a:a7:89:50:bc:5c:c8:28:da:48:71:ce:
5f:b5:38:bf:a8:3c:04:fd:35:15:c6:57:de:f5:7f:
76:9d:b6:b0:1f:54:21:f5:bc:86:f3:aa:97:60:4e:
f5:59:99:48:1c:ca:37:93:4d:ed:32:91:92:50:76:
b6:49:96:b6:88:d9:7b:c7:64:37:15:61:f4:3d:15:
3c:a5:1e:70:9d:87:6d:8f:fc:1b:e6:b5:50:51:66:
bc:d5:51:dd:10:fb:21:18:69:b5:e0:c7:e4:8d:23:
7c:0f:2c:46:da:55:35:a7:8f:b4:e5:54:a3:1b:96:
db:3a:f7:cd:5b:1f:bb:1b:d2:3b:de:d6:ab:c0:d3:
e2:be:b2:e6:f4:e5:2d:78:ab:82:cf:2c:76:cf:af:
d2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:99:97:60:C2:3D:6E:D2:61:DD:2C:06:DA:58:61:F7:D9:B2:07:72
X509v3 Authority Key Identifier:
keyid:89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d1:e0:f2:09:c0:a5:ab:9c:7b:71:03:a1:37:c4:eb:ac:6e:
50:f5:64:e3:14:9b:dc:17:45:b1:c5:40:05:8f:a6:c0:48:84:
29:12:76:6c:7e:3d:04:9f:e2:1e:18:16:cb:ab:fc:43:b2:98:
f1:29:42:19:e2:2a:57:21:94:9e:d7:57:61:b4:b5:4f:74:1a:
0a:b6:29:f9:ba:98:c6:0e:e2:9a:c1:9e:a3:00:e7:df:e8:e7:
68:20:e9:09:a3:a7:a2:65:ac:fd:06:46:13:a6:6e:14:ac:d9:
61:87:14:37:fc:1a:ef:fc:e2:e9:6d:05:30:76:3e:2c:58:47:
3d:91:d3:c8:aa:26:dc:2c:17:20:97:10:25:6a:10:54:d6:b8:
00:86:07:26:3f:12:92:04:ab:33:89:3f:ed:65:24:68:db:8f:
81:65:23:85:19:c8:9e:f9:5d:28:56:6e:6f:41:cb:33:08:22:
7f:5a:bd:29:a1:df:42:fd:e4:fe:9f:0b:e2:cb:b0:ad:d5:ca:
d8:b3:01:7f:70:f3:f2:fa:dd:1e:49:8e:25:7b:8b:8e:62:81:
9e:19:56:d0:ca:a2:99:d3:08:5f:0b:08:3b:4a:44:ce:41:76:
7d:24:0a:7f:f0:4e:d6:37:5f:65:f6:87:34:3d:80:7d:f6:68:
5a:a4:9b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 00:36:24 2025 by rpki-client