Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
File: IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft (raw, json)
Hash identifier: YTNihg+H0zy7vnOtH8ljxDtu8JMsnjigrGJOmklOsJE=
Subject key identifier: 97:3A:D0:13:E2:35:03:9A:1D:6B:40:C0:09:E4:84:F7:E2:F5:31:47
Authority key identifier: 22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC
Certificate issuer: /CN=2213007596493802fb93a326731fd3329eae2dac
Certificate serial: 019A71B7E9BC2CD8A69E562729DC58690139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:09 +0000
Manifest this update: Tue 11 Nov 2025 07:01:09 +0000
Manifest next update: Wed 12 Nov 2025 07:01:09 +0000
Files and hashes: 1: DjsbeUScAR9EUfRE070QFYOZXx0.roa (hash: Jj0CL6iZxJ5XW4ZpctnqFGBbj6Ygbs9fspzlTAigxwY=)
2: IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl (hash: B1WqtbPxoe6p2PMyRuZ6arQUjuWR5bVqlylUc4rN+YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e9:bc:2c:d8:a6:9e:56:27:29:dc:58:69:01:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2213007596493802fb93a326731fd3329eae2dac
Validity
Not Before: Nov 11 07:01:09 2025 GMT
Not After : Nov 12 07:01:09 2025 GMT
Subject: CN=973ad013e235039a1d6b40c009e484f7e2f53147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:57:65:83:43:2d:ca:8b:4b:ec:92:e3:8f:02:
13:e9:a2:c9:a1:09:f6:92:82:79:08:bb:de:a9:9d:
05:86:3c:94:cb:42:87:32:a0:46:9e:77:d9:a7:09:
67:61:0c:5b:c5:e2:1f:cb:47:47:ed:46:e0:bb:67:
4a:d7:ff:8e:04:d4:7f:db:28:66:8f:0f:69:7e:3e:
5b:44:09:b0:0f:b7:07:96:89:5f:3a:ae:5a:9d:af:
11:80:e9:f6:c6:a6:27:d0:77:e2:a3:46:c8:08:92:
1b:bf:33:44:1d:70:50:da:0b:cb:00:cb:e1:06:99:
15:e8:df:07:c7:8e:53:1f:98:17:c1:d6:7c:4c:2b:
3f:74:0c:c8:5b:e1:28:f8:f7:8a:6b:04:ea:cb:cf:
d3:6b:95:0a:a8:36:07:3a:b6:97:99:35:fa:a1:80:
78:9c:d7:eb:ff:6d:54:8d:f7:1b:a5:39:fb:99:42:
19:70:82:26:20:29:c3:17:88:9c:77:4e:c0:37:a3:
49:49:e9:2e:79:62:2d:2a:4e:1a:44:3d:b0:a1:62:
35:bc:6e:0b:22:c1:a9:19:b7:9f:49:4a:f6:a1:c7:
64:03:68:7d:75:ac:4b:c3:f9:ec:d4:cb:3e:58:de:
e5:e8:42:81:da:69:39:c0:3d:2a:b1:1f:06:d1:1b:
d4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3A:D0:13:E2:35:03:9A:1D:6B:40:C0:09:E4:84:F7:E2:F5:31:47
X509v3 Authority Key Identifier:
keyid:22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:1d:d2:30:9c:03:a9:2c:d3:05:73:8c:64:eb:51:c2:e5:ec:
be:00:03:dc:30:ed:31:9f:22:46:01:e7:9b:77:8e:6b:12:ba:
5b:40:7e:57:37:b9:5e:71:aa:13:97:14:03:c3:8d:e7:cf:a8:
b9:67:73:29:ee:ed:ce:c8:ad:5b:fd:ba:80:28:3c:13:c9:48:
81:d6:f7:81:fc:96:c6:3e:7c:de:50:ef:e2:53:9b:90:f0:d7:
66:49:c2:37:e3:b6:d7:ca:39:31:1c:e8:84:53:53:68:c8:6a:
45:15:cd:e4:e1:0d:46:b2:cc:91:35:db:b0:e4:8e:a1:3b:03:
68:c3:3c:e4:a2:28:5e:d7:9b:b1:3f:f0:06:f0:22:f2:7f:71:
1a:f9:70:60:64:ec:f1:2b:a1:41:08:01:3d:0c:36:dd:2b:02:
de:6e:d7:47:fe:28:9e:31:15:ce:8c:16:91:05:5c:0b:64:82:
74:52:dd:c4:90:6b:3e:21:6f:cd:c6:fa:c4:03:8d:58:b8:b1:
82:4b:bc:09:15:b0:fd:f0:a2:bc:f9:c6:56:9c:a2:bb:31:37:
6f:66:ab:e0:a6:ca:91:54:cf:0c:da:f0:7b:8c:5d:48:ad:82:
3d:d8:2c:66:61:50:fc:e6:03:77:74:11:32:73:da:2b:f0:3e:
56:d9:2d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:23 2025 by rpki-client