Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
File: IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft (raw, json)
Hash identifier: 4zN54aub/2uM6PrOxY9dd/zrhIoTxEJ8C7hektGUIrA=
Subject key identifier: 7B:36:29:9C:E9:69:B3:68:A1:86:7E:F8:E1:FF:53:31:C3:D4:28:D9
Authority key identifier: 20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45
Certificate issuer: /CN=2091a77f7c424e9127398473bfa3a2b9727ebb45
Certificate serial: 019A70DC899CEF522DA3D09609B4B9D79162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
Manifest number: 0A3F
Signing time: Tue 11 Nov 2025 03:01:32 +0000
Manifest this update: Tue 11 Nov 2025 03:01:32 +0000
Manifest next update: Wed 12 Nov 2025 03:01:32 +0000
Files and hashes: 1: GE_VINn07eeSJYTvZIuo88WEV3U.roa (hash: 7RURCigC0zQY7NED6IrTycMVsCozhn/RUtlNFgdIpNw=)
2: IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl (hash: CEP2iO4yK2fNhnHW0EutdGxAlQPiKvgfAZug8WPAD+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:89:9c:ef:52:2d:a3:d0:96:09:b4:b9:d7:91:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2091a77f7c424e9127398473bfa3a2b9727ebb45
Validity
Not Before: Nov 11 03:01:32 2025 GMT
Not After : Nov 12 03:01:32 2025 GMT
Subject: CN=7b36299ce969b368a1867ef8e1ff5331c3d428d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a4:75:40:82:d3:e6:18:0c:03:d2:86:53:ab:
1d:46:c0:3e:3b:5a:a4:ee:3c:0f:fd:09:31:37:08:
92:ab:94:6f:c8:c6:f1:4d:77:72:a1:2b:a7:f6:38:
d6:fa:ec:65:7e:14:5f:66:07:68:10:1b:ba:73:3b:
ac:3a:51:32:33:a8:ab:07:d9:eb:bf:68:83:5d:2f:
bc:82:7f:38:e2:de:50:c4:ba:c2:5b:a4:9a:37:26:
cd:6f:30:aa:10:f3:06:33:80:6f:0f:84:c2:38:d5:
f8:d4:bc:8a:2d:44:d1:85:90:27:58:6a:57:19:e2:
37:3b:28:08:e5:f8:75:5a:a1:53:36:d6:37:ac:3f:
28:ab:42:52:2e:55:4e:7a:73:9a:69:0c:73:2e:57:
63:c3:8e:0c:48:b3:ac:2a:95:78:ae:51:fd:63:61:
1b:4b:c4:a0:7a:91:44:8e:e6:34:d6:70:40:f3:f9:
84:77:e5:a2:bc:10:b9:a6:5b:f4:2a:dd:b1:b6:0c:
d6:ea:1d:a2:bf:3c:b7:c8:ca:00:a9:9a:a1:a6:d5:
92:70:fe:bb:17:1c:48:d0:2f:20:b1:cd:b9:e2:c7:
87:4a:77:46:67:c7:55:3d:19:b9:1b:10:cb:d6:22:
08:e2:db:4e:3e:84:61:5e:88:91:a5:e7:b6:40:98:
7d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:36:29:9C:E9:69:B3:68:A1:86:7E:F8:E1:FF:53:31:C3:D4:28:D9
X509v3 Authority Key Identifier:
keyid:20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:88:c8:d6:6b:7d:cb:2b:41:8f:10:c4:96:fd:74:a1:e0:40:
b3:69:5c:3e:bd:60:94:92:9c:21:68:89:7b:5d:0d:3e:11:d9:
95:bf:14:3c:36:7c:ff:d7:d1:93:d4:1a:9a:6a:49:ab:1d:03:
fb:d8:52:66:0f:5a:8e:ce:86:85:90:08:ff:35:16:a9:fd:f1:
0e:d1:24:e2:9a:86:d3:b7:a5:54:ba:16:e2:8f:3b:27:d4:0d:
7a:9f:65:07:a1:98:a6:01:ce:cf:ab:25:0a:fd:95:32:06:d2:
99:90:51:52:d9:31:37:95:cf:e9:29:cd:dd:f9:a7:85:2d:f7:
14:3c:f6:44:38:23:b2:da:d8:5a:2a:3a:ff:78:85:7d:45:b7:
fc:16:6e:38:62:85:3f:d1:07:2b:71:af:0c:8f:78:89:3c:e3:
35:52:a3:47:8f:6b:59:42:3e:50:86:53:9a:a8:aa:a8:36:9e:
13:59:08:3e:a8:a8:08:fd:72:e7:45:ff:4c:5d:14:fc:65:e6:
2b:cb:3c:5b:b3:93:fb:ef:86:7b:55:86:72:5e:fb:87:18:d1:
60:ea:49:36:a9:e6:e9:51:53:ea:62:0b:e9:ee:98:c4:6c:d0:
34:01:57:15:71:19:e1:1e:d3:bc:06:b7:c8:f4:0b:18:83:14:
7a:c1:48:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:48:33 2025 by rpki-client