Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
File: iWkzRGOKywU2WC-rCJh2V472vFY.mft (raw, json)
Hash identifier: OtvHz0pWhfX/ZZMpKZirnSfxAahSIic/DiGcLatBGyc=
Subject key identifier: 33:73:DA:84:47:82:B3:51:2C:B9:20:C5:E1:A9:FC:F8:29:F6:97:4B
Authority key identifier: 89:69:33:44:63:8A:CB:05:36:58:2F:AB:08:98:76:57:8E:F6:BC:56
Certificate issuer: /CN=89693344638acb0536582fab089876578ef6bc56
Certificate serial: 019A71B8D81D8D3AE24C6DA1416349045025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:02:10 +0000
Manifest this update: Tue 11 Nov 2025 07:02:10 +0000
Manifest next update: Wed 12 Nov 2025 07:02:10 +0000
Files and hashes: 1: fCZrKI-6j3JypnfEm5_gs1n5dFw.roa (hash: iZ/p7v8ZHeoQxTyUiH1KnvRb3hj8zk8sCV0wmzxeW2k=)
2: iWkzRGOKywU2WC-rCJh2V472vFY.crl (hash: 6p/6SbowU4o1E5fqEFRejrU8U1mAy2GY3TB4DKTOb1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d8:1d:8d:3a:e2:4c:6d:a1:41:63:49:04:50:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89693344638acb0536582fab089876578ef6bc56
Validity
Not Before: Nov 11 07:02:10 2025 GMT
Not After : Nov 12 07:02:10 2025 GMT
Subject: CN=3373da844782b3512cb920c5e1a9fcf829f6974b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b4:bb:04:40:f4:3b:b1:62:b8:0f:4b:29:9c:
df:48:6b:6f:44:aa:cf:6c:41:c7:f1:ae:9a:25:51:
88:a3:f2:6c:78:20:e6:59:09:fc:1b:8a:0c:01:a0:
ec:c1:5e:29:8c:29:91:b1:ae:0c:a2:98:d8:43:6c:
6d:e9:32:e8:51:fb:8b:54:72:08:4d:93:e5:eb:54:
c3:65:70:12:2e:f2:e3:94:ef:89:cd:ac:d7:7f:8f:
21:a6:24:09:30:61:36:93:f5:0a:71:0d:fc:71:92:
83:e8:8e:3b:f1:e1:0f:ef:f8:12:28:54:e1:0c:54:
c3:5f:43:90:d6:05:27:71:85:c3:48:33:f3:fe:38:
4d:5a:4d:4b:5e:c3:bb:0c:b8:6e:36:54:e2:eb:1d:
30:7d:c0:63:0e:ae:a5:7e:b8:0f:5b:50:95:0e:e9:
7f:78:ab:e8:1e:a7:d7:27:cc:85:d3:e9:34:a0:c9:
f5:15:d2:25:37:63:3b:3d:42:3e:3f:a3:53:02:93:
b8:3e:0e:50:08:fe:8b:15:0e:b4:51:1b:cd:aa:e9:
c0:ba:4c:3c:8c:24:df:d3:14:82:00:8b:a8:65:51:
3c:f2:97:44:fb:fc:66:35:03:e4:71:f4:37:cb:29:
67:24:f1:3b:dc:4b:85:9f:74:43:90:21:5d:03:7b:
23:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:73:DA:84:47:82:B3:51:2C:B9:20:C5:E1:A9:FC:F8:29:F6:97:4B
X509v3 Authority Key Identifier:
keyid:89:69:33:44:63:8A:CB:05:36:58:2F:AB:08:98:76:57:8E:F6:BC:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:2b:8e:72:78:33:45:5f:a8:16:d1:d9:4b:0b:bb:26:45:63:
bf:25:69:96:7e:1c:02:a6:d4:98:ef:c2:47:16:f0:88:1a:f3:
45:81:aa:f4:d7:ae:d3:bf:bf:48:0b:9d:94:d3:5a:bb:fd:7e:
85:7f:51:3d:77:bb:ca:1b:67:a6:12:3c:5f:ed:18:74:30:00:
a9:87:c8:74:81:5a:f3:03:79:94:b5:48:45:5a:59:79:29:4c:
f4:e9:92:67:8f:e7:90:7d:c8:87:36:ae:15:1c:f2:05:43:8c:
85:36:c7:98:74:f3:d7:64:5b:a9:a8:dc:c5:c2:bb:7a:7f:1d:
d1:7a:2c:41:88:af:2d:e4:6e:48:e9:51:e8:4e:63:0c:b5:6f:
99:b8:79:62:2d:91:19:e9:9b:b3:e7:06:a3:29:37:70:81:9c:
43:b6:5f:b0:8c:8f:64:a6:3a:7c:03:e7:37:8d:e7:39:90:85:
3d:2a:09:ee:c6:2b:dd:95:2c:11:89:50:d7:4b:0e:38:2d:d8:
0d:33:c0:7a:2d:8d:1b:ff:4f:a9:02:17:1b:c7:59:d7:dd:3c:
8e:2b:57:2b:35:a7:0a:ef:9d:d0:ef:d9:e4:c9:c9:3d:5c:68:
a4:e5:bb:80:19:fe:4a:3f:10:bb:30:19:e8:4f:0b:9a:0a:92:
db:2f:61:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:54:51 2025 by rpki-client