Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
File: i29IgAONVauY18tm38-ol7e6Eeg.mft (raw, json)
Hash identifier: 4RD3+rUqB6ZGv0Y5PrsZ5Je7ygCVzoNna/3k1vFfjZI=
Subject key identifier: 7A:D2:5A:2E:57:96:14:C7:10:BE:36:84:02:53:B4:2D:7A:DB:D3:2F
Authority key identifier: 8B:6F:48:80:03:8D:55:AB:98:D7:CB:66:DF:CF:A8:97:B7:BA:11:E8
Certificate issuer: /CN=8b6f4880038d55ab98d7cb66dfcfa897b7ba11e8
Certificate serial: 019A71132BFFADD569D3812B606F1D7A9276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
Manifest number: 0597
Signing time: Tue 11 Nov 2025 04:01:13 +0000
Manifest this update: Tue 11 Nov 2025 04:01:13 +0000
Manifest next update: Wed 12 Nov 2025 04:01:13 +0000
Files and hashes: 1: i29IgAONVauY18tm38-ol7e6Eeg.crl (hash: +yC9rUJ3Fi2mY/IHIjDeSdU/x0birGxCjny5+ggG0g0=)
2: uJrupPlV0TuAxsM7Yezc0lvFtvQ.roa (hash: zjqfplB2jtSi/5nKhDu31J1mMkLaG/4MZV1txaGrR6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:2b:ff:ad:d5:69:d3:81:2b:60:6f:1d:7a:92:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f4880038d55ab98d7cb66dfcfa897b7ba11e8
Validity
Not Before: Nov 11 04:01:13 2025 GMT
Not After : Nov 12 04:01:13 2025 GMT
Subject: CN=7ad25a2e579614c710be36840253b42d7adbd32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:c3:69:8f:84:d4:cd:e9:fa:26:53:39:a7:
65:c1:58:aa:73:c6:d7:26:33:fb:cf:78:bc:7b:ea:
cd:fd:82:cf:0b:d2:12:33:a3:b9:ce:e0:5e:b7:3f:
04:76:2f:f3:10:2e:37:87:82:a1:0e:b3:a6:4c:4c:
5b:81:c4:86:3a:9d:f0:d1:1c:80:fb:e5:91:19:3f:
cc:fe:ef:f2:2d:93:45:f6:55:1c:90:19:36:6e:c2:
ae:b0:fc:1e:84:76:99:9e:a3:56:e7:0e:be:84:a0:
ac:7d:fd:1e:ac:0d:9b:83:87:e3:b5:cd:33:63:84:
71:1f:42:35:4c:f8:be:cf:34:8d:13:24:6c:1a:06:
fd:9e:78:51:72:6b:f3:13:33:b0:b8:cc:08:e1:a8:
64:fa:ec:74:f1:71:0b:1f:7b:91:38:49:5b:3f:ff:
f2:ba:f8:3b:d9:91:6a:b8:55:62:90:13:02:2c:19:
88:e2:b1:1e:f9:22:4a:e0:3d:25:9c:e9:71:06:66:
46:1c:83:10:6b:d5:7c:da:7e:8b:37:6f:a4:00:33:
aa:ab:d0:e4:83:c4:8b:8f:76:5a:2c:d4:b6:df:9e:
58:c8:db:6c:b7:08:b8:88:06:54:ec:d5:2a:d7:e1:
05:38:a0:c1:8e:11:3e:49:2a:78:3b:19:b8:53:2e:
bf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D2:5A:2E:57:96:14:C7:10:BE:36:84:02:53:B4:2D:7A:DB:D3:2F
X509v3 Authority Key Identifier:
keyid:8B:6F:48:80:03:8D:55:AB:98:D7:CB:66:DF:CF:A8:97:B7:BA:11:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:8b:66:d5:9a:c1:ad:de:d9:3a:21:25:6d:cb:28:f8:fc:d9:
2d:da:2d:c6:dc:07:0d:4f:c3:5e:e2:30:49:bf:55:f3:a9:f5:
76:6d:47:fd:2d:61:e6:c4:75:7e:eb:7f:f1:5b:25:45:2d:07:
1f:14:fd:37:4c:8f:5f:ba:47:a3:07:56:d7:26:a3:36:04:c5:
3c:00:8c:b2:9b:e1:e5:3a:6c:7b:8c:b3:21:f0:2c:9f:c7:de:
a8:4e:2d:29:34:76:9d:ec:ea:46:5a:ed:1d:6b:60:31:2b:75:
2f:99:85:d1:28:94:50:6d:40:e3:a2:a4:62:66:49:98:6a:f9:
16:94:9f:8e:5a:19:21:07:f7:11:ea:a8:1a:63:44:0f:e8:9e:
ed:d1:4f:9a:3a:61:91:27:5c:62:01:ad:f2:fb:13:ec:6d:ad:
09:d2:40:7c:53:b4:ea:c6:49:cc:53:ac:8d:7d:4a:53:a2:37:
ce:0a:77:8d:80:16:5c:f1:3b:1f:bb:0b:fe:62:a1:0f:64:bf:
47:7b:88:21:fc:cb:85:c0:eb:8a:27:4f:2d:f4:e2:48:0d:95:
ac:b6:ce:e2:ca:9c:c8:04:0a:2a:5e:ae:47:67:02:40:6c:33:
32:49:b5:56:22:f6:ec:49:cd:9a:47:59:c2:4e:5a:d7:c1:f2:
2b:bb:5c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:23 2025 by rpki-client