Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
File: ixtym3XF-LLp0ViqKWOW1oC-cK0.mft (raw, json)
Hash identifier: bKhuL8cCjdwfKUjXQJ9uIkKQXQM7DMNPKlfOIE+Tgas=
Subject key identifier: 00:6B:29:18:09:80:A9:00:E4:2F:85:83:AE:74:4E:73:95:4F:89:7E
Authority key identifier: 8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
Certificate issuer: /CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Certificate serial: 019A70A4D7D531E76B589989D1FBED4F7388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
Manifest number: 0E46
Signing time: Tue 11 Nov 2025 02:00:42 +0000
Manifest this update: Tue 11 Nov 2025 02:00:42 +0000
Manifest next update: Wed 12 Nov 2025 02:00:42 +0000
Files and hashes: 1: VD1pOY6vP5TwIHzsVFu_IinabUU.roa (hash: cVzGsu9mooBFFczgcbG8J8W2oDgnSi/7QeWcMNjjuWQ=)
2: ixtym3XF-LLp0ViqKWOW1oC-cK0.crl (hash: FIm9ZzDEuD73MlAzIXH2JjNCPQbOu6O79d/FZKN8yEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:d7:d5:31:e7:6b:58:99:89:d1:fb:ed:4f:73:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Validity
Not Before: Nov 11 02:00:42 2025 GMT
Not After : Nov 12 02:00:42 2025 GMT
Subject: CN=006b29180980a900e42f8583ae744e73954f897e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9b:43:83:8f:68:8d:d4:f8:16:6b:19:7b:e5:
78:c9:b4:c0:48:3f:fb:0d:12:80:5d:1c:b5:59:91:
cd:95:70:f0:fa:62:9e:6c:c0:63:d5:bd:07:be:26:
28:bb:35:b1:a7:06:af:0c:cd:4a:b7:f6:5a:16:e0:
93:85:d6:60:07:2e:ad:d1:c0:3a:b8:e1:76:49:b2:
f4:24:67:84:b6:44:c5:90:c1:a1:26:dc:fa:58:84:
26:2b:15:e7:65:54:ea:90:bb:4c:f5:79:cb:cc:cc:
6a:3d:43:f8:41:33:75:d0:87:17:e2:94:ac:34:e8:
ff:ed:62:85:46:e9:38:72:b1:89:27:ed:ba:65:c8:
1b:de:b7:2b:c3:08:c3:71:8f:b6:75:32:f3:1d:b0:
17:ac:d9:62:f3:2c:2d:82:da:30:4c:28:82:14:0d:
1a:6d:06:f8:26:87:2f:91:11:9b:e9:8e:f2:cd:9d:
23:c9:b9:cf:f3:00:88:48:8d:ad:3a:97:32:c7:d4:
00:e1:9f:bb:7a:83:62:62:90:cc:d2:8f:a1:db:1b:
e1:68:9c:94:da:e3:69:9a:1d:c7:cb:9b:f4:78:20:
24:12:45:b5:8e:25:e1:f0:97:d7:4b:27:41:f0:42:
41:13:45:43:6f:53:c5:e6:1c:f1:f3:fa:86:f7:04:
45:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6B:29:18:09:80:A9:00:E4:2F:85:83:AE:74:4E:73:95:4F:89:7E
X509v3 Authority Key Identifier:
keyid:8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7c:2b:76:2e:b3:bb:8d:0b:5d:b3:e0:6f:f6:5a:cb:4e:a3:
de:3a:ba:26:64:7c:67:d9:39:6e:b3:1d:14:22:c1:22:8a:bc:
2a:a4:10:6b:89:26:1c:3a:1b:f8:da:4c:79:48:17:6b:a5:97:
38:b1:60:5d:e1:1c:26:69:cb:f4:af:a9:23:84:c0:a3:bb:09:
ee:2b:48:0a:ae:cf:5c:9b:25:3f:e1:7d:8b:ce:6e:aa:99:a2:
9e:66:89:e7:7b:c6:15:a5:f0:0e:7d:70:8d:ce:e1:87:7b:e3:
84:07:76:d3:b9:76:12:d7:20:b7:a9:25:27:49:29:10:6f:f2:
3d:a2:b1:09:c6:c8:c9:91:2b:9f:47:0c:17:66:54:a0:ee:b1:
c1:55:9e:d7:7f:8f:64:3d:8d:74:bd:00:04:ff:a4:23:4b:cf:
d3:a6:bd:d9:7c:98:3b:9c:aa:9a:e1:61:e7:35:df:df:7a:8d:
82:9f:ed:f5:9a:f7:00:ed:64:7c:f9:24:78:db:28:79:3e:58:
ca:9c:0e:d6:4d:75:63:cb:e9:99:01:97:84:fe:30:18:81:e3:
b2:23:c9:1c:36:30:7e:a1:f9:80:26:ce:30:75:28:58:25:d0:
7f:e7:92:84:1a:58:2c:6d:37:49:ff:f4:5d:09:0a:b3:e7:e4:
9f:0c:ab:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:51:58 2025 by rpki-client