Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
File: pI2lIJvWz5DG321-bWOmOVW61LU.mft (raw, json)
Hash identifier: SL5anAMp69OxCN6hrUIfXth/Pv6g6cmb6hKLwGbp1bI=
Subject key identifier: C9:0A:65:CA:9E:1C:07:A7:BE:93:63:0E:9F:DE:69:43:D5:7B:0B:22
Authority key identifier: A4:8D:A5:20:9B:D6:CF:90:C6:DF:6D:7E:6D:63:A6:39:55:BA:D4:B5
Certificate issuer: /CN=a48da5209bd6cf90c6df6d7e6d63a63955bad4b5
Certificate serial: 019A71EE79CAFF43BC86B5245657F7F11B77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pI2lIJvWz5DG321-bWOmOVW61LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
Manifest number: 07A8
Signing time: Tue 11 Nov 2025 08:00:45 +0000
Manifest this update: Tue 11 Nov 2025 08:00:45 +0000
Manifest next update: Wed 12 Nov 2025 08:00:45 +0000
Files and hashes: 1: gZ0yVDfN4vy-eK7OCEPSZaBaBxs.roa (hash: LNpaqhIXeGRj9rxSqG8l9W+yrY/Iu+GRMv3w/Y4Inpo=)
2: pI2lIJvWz5DG321-bWOmOVW61LU.crl (hash: T//EuIcDs5SR8PrC+dDDXU7mezzB6ZoVWVfLuA49bac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pI2lIJvWz5DG321-bWOmOVW61LU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:79:ca:ff:43:bc:86:b5:24:56:57:f7:f1:1b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a48da5209bd6cf90c6df6d7e6d63a63955bad4b5
Validity
Not Before: Nov 11 08:00:45 2025 GMT
Not After : Nov 12 08:00:45 2025 GMT
Subject: CN=c90a65ca9e1c07a7be93630e9fde6943d57b0b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:78:79:7b:26:a8:22:ca:47:82:76:02:66:83:
cd:90:6b:d9:a9:85:9f:85:36:eb:fc:a4:bc:77:1d:
79:01:82:e6:14:6f:98:37:1b:fe:ea:02:b0:d9:09:
71:9f:cf:fa:70:1d:79:4f:3f:96:43:b9:47:8c:3d:
e1:00:ab:30:d4:f0:8a:9f:4e:4e:a3:8b:2a:2a:c3:
37:8a:d2:13:8d:ce:40:9f:3b:a3:53:80:dd:9e:f0:
f5:2a:9d:cf:f2:66:b6:88:aa:9d:c1:ba:ef:17:8d:
34:48:8f:8b:c8:0e:fa:1f:a4:b7:4a:3b:dd:04:92:
76:75:28:0e:be:9c:a1:01:d9:f8:d9:e3:77:4e:26:
07:96:28:c8:67:74:9a:b6:d9:eb:5b:87:27:32:79:
32:af:58:87:f6:08:33:45:a6:f2:fa:bb:ca:07:8b:
ef:e1:a2:23:45:51:64:de:c8:29:4d:b5:37:30:4d:
13:29:25:e7:64:5f:49:bf:ea:d5:5b:e1:82:56:19:
9f:6b:c2:0d:ef:8c:66:6d:d7:4c:21:5a:8b:5a:67:
b1:5a:02:0d:66:40:be:3c:38:48:a3:e9:13:5f:61:
a2:c0:00:11:68:5e:a3:de:a7:ea:16:4f:00:fc:6b:
96:7e:10:d6:2b:2a:a2:d3:84:91:bb:0e:f0:67:e2:
7c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0A:65:CA:9E:1C:07:A7:BE:93:63:0E:9F:DE:69:43:D5:7B:0B:22
X509v3 Authority Key Identifier:
keyid:A4:8D:A5:20:9B:D6:CF:90:C6:DF:6D:7E:6D:63:A6:39:55:BA:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pI2lIJvWz5DG321-bWOmOVW61LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e631bf-de95-4cff-b0dd-5cb2d7258b0d/1/pI2lIJvWz5DG321-bWOmOVW61LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:19:7c:f6:03:f5:9d:71:9f:0d:69:9d:be:8b:89:98:43:54:
f9:c9:6c:9b:ec:49:b9:90:c7:aa:25:8a:88:4a:db:5d:0b:de:
53:f0:b2:c9:ab:8b:fb:e3:bc:17:b0:3e:8f:9a:ff:bc:e9:10:
b0:07:8b:b9:b4:fc:ae:67:0e:c7:5c:1e:7e:ee:67:a2:c6:00:
3b:69:05:0a:e8:3b:09:34:b6:dc:ee:12:dc:6e:20:f2:9b:99:
76:ef:fc:0d:83:81:b4:0f:75:77:b5:7c:ec:fe:d7:8c:e9:14:
d5:c8:49:6d:0a:b3:7c:ee:d9:4c:69:c6:e9:18:7b:3b:99:53:
04:a6:94:ac:91:0e:4d:da:49:10:78:59:4d:34:8b:de:dc:b7:
3f:c8:05:bd:ab:c7:33:e0:c4:13:2c:8b:a2:f4:5c:8d:ca:31:
59:f9:7b:e5:7f:df:f8:1b:e1:a6:e6:0a:55:29:54:76:9d:31:
30:62:0b:d3:cf:85:81:98:d8:27:46:4e:c5:23:06:14:8f:2b:
e6:c6:0f:11:c3:58:dc:5d:81:b4:18:f5:69:7f:93:18:ad:59:
f0:23:45:8c:6a:49:70:85:b8:93:44:ed:92:be:a0:a1:af:40:
19:d6:da:ad:25:92:0f:fc:f7:a0:33:3d:f1:e3:02:4d:1e:9f:
16:7f:66:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:20 2025 by rpki-client