Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
File: IxMMmax6pAhscXVxFKQWP4AJAUI.mft (raw, json)
Hash identifier: kQ2kmE70Ip02fY5Tj0AOHb+4g0yGqYJIViaGRyMuS0c=
Subject key identifier: 88:17:AB:75:1E:24:7A:3C:EC:8B:3B:01:F6:02:D8:E1:E0:F4:26:C0
Authority key identifier: 23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
Certificate issuer: /CN=23130c99ac7aa4086c71757114a4163f80090142
Certificate serial: 019A4DE17C8F4CBAFA78E5C7772E80689CA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
Manifest number: 0A55
Signing time: Tue 04 Nov 2025 08:00:14 +0000
Manifest this update: Tue 04 Nov 2025 08:00:14 +0000
Manifest next update: Wed 05 Nov 2025 08:00:14 +0000
Files and hashes: 1: 7LeNtT1Py-375udT6tgnEczdaA4.roa (hash: KcUWkl6MBuk85woap7zLa0rzE+sobb9Vo8npqesilrw=)
2: IxMMmax6pAhscXVxFKQWP4AJAUI.crl (hash: 4K2Ki7Uof9LrpbrfFE/YUTYZKFBdp/t099mBYKr1Ofo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:7c:8f:4c:ba:fa:78:e5:c7:77:2e:80:68:9c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23130c99ac7aa4086c71757114a4163f80090142
Validity
Not Before: Nov 4 08:00:14 2025 GMT
Not After : Nov 5 08:00:14 2025 GMT
Subject: CN=8817ab751e247a3cec8b3b01f602d8e1e0f426c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2b:4d:15:7c:c1:45:cf:a5:25:43:c7:33:cc:
94:42:59:e5:51:20:ee:24:ff:5d:f2:1c:97:e3:76:
ff:d2:89:06:d9:27:45:5a:11:5c:90:59:8a:65:cb:
6f:85:e0:52:90:0b:4c:51:c6:cf:8a:9c:6c:2c:12:
5f:3b:73:68:93:06:5e:57:93:9c:4a:dd:69:1d:55:
c7:12:2b:d6:84:20:6e:64:53:95:39:ea:ae:3f:57:
30:5e:05:56:eb:60:44:cb:02:54:73:c9:11:18:67:
61:fd:29:ea:b8:ab:7a:60:64:dc:b6:da:ed:c9:5b:
40:35:74:0a:db:ef:e4:cb:90:d7:4d:a7:89:15:7c:
ee:af:03:b6:13:d2:c2:6a:45:71:94:59:43:38:04:
87:63:6b:14:a4:ca:67:cb:a1:56:e9:67:1f:61:f6:
b7:dc:e2:d0:5f:e1:98:8f:5b:2c:28:e9:07:1e:8a:
ec:c6:83:82:68:d1:50:b8:47:94:c8:82:2b:2d:c1:
69:36:ae:e5:e8:e7:39:a7:71:0e:ca:dc:81:7d:a0:
a3:9e:89:7d:df:69:5b:be:42:f1:fe:69:9a:06:8d:
48:46:6e:b2:4d:0f:b9:23:e7:09:f6:a8:c7:5e:e4:
74:16:d2:ce:5d:56:83:d2:49:71:97:a6:73:bf:43:
50:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:17:AB:75:1E:24:7A:3C:EC:8B:3B:01:F6:02:D8:E1:E0:F4:26:C0
X509v3 Authority Key Identifier:
keyid:23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c8:2d:db:07:a3:7c:2a:69:38:63:b6:17:cc:9c:ad:0b:1f:
b7:91:8f:53:a0:98:ca:c2:db:b0:5f:af:eb:b6:dd:fd:4b:b1:
83:13:59:67:c8:76:6d:31:0f:ff:51:49:2a:f9:ea:8d:31:1c:
5c:b7:c4:8a:5c:8f:47:47:79:e3:87:ae:cd:2f:a4:51:ca:9f:
6d:d0:e6:04:c1:29:8b:23:97:94:4f:b8:f1:e5:65:1e:09:cb:
21:3e:79:6a:e0:9b:b8:b6:b3:11:65:fe:41:a7:29:27:5a:91:
ae:27:a3:62:76:a2:99:f0:a7:f9:38:d5:13:07:dd:e1:18:05:
c1:f1:8e:8e:ff:eb:8e:50:63:16:a3:ee:1f:fd:33:b5:16:f1:
37:6f:87:15:ea:2b:34:b4:c1:e2:93:0e:2f:e2:c6:e5:04:3a:
7d:44:db:c2:ec:cc:db:76:50:89:e1:75:fc:73:2f:0d:eb:ac:
c1:a2:6b:64:ef:4d:fb:d0:0b:01:35:f0:96:43:49:c4:11:71:
e2:46:8d:2d:40:3b:8c:39:20:9c:86:fe:66:2b:fa:0b:92:71:
46:14:a6:8c:de:e6:c9:f3:bd:4f:6e:02:a7:44:9a:03:0f:4e:
fd:5a:8a:c9:bc:76:18:db:7e:06:46:cc:b4:bb:0d:5a:1f:4c:
5e:5f:d3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:02:47 2025 by rpki-client