Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
File: i0LHUqmwmDEos9KV5F6hazPuffk.mft (raw, json)
Hash identifier: lS4l5ZYeolFXb3XL1ZEn2K84JHuHh8jHK1Qdn4/nAzw=
Subject key identifier: 1F:67:E1:35:23:56:A8:40:87:20:F3:30:EC:10:A5:D8:38:D8:48:8D
Authority key identifier: 8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9
Certificate issuer: /CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9
Certificate serial: 019A71EEE77C1B9CC454EEE8719129AB6C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 08:01:13 +0000
Manifest this update: Tue 11 Nov 2025 08:01:13 +0000
Manifest next update: Wed 12 Nov 2025 08:01:13 +0000
Files and hashes: 1: deCTZwf8Lo4tPBt2V0GwD8QTdjQ.roa (hash: FyKYzrCJB3LXbVhWQRcS/ZI/wI5zOqLIDpvmKLMGaw0=)
2: i0LHUqmwmDEos9KV5F6hazPuffk.crl (hash: y1fU2E1XFpdL3W8GLGl5NlqemGpfZji9igmFXmehxDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:e7:7c:1b:9c:c4:54:ee:e8:71:91:29:ab:6c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9
Validity
Not Before: Nov 11 08:01:13 2025 GMT
Not After : Nov 12 08:01:13 2025 GMT
Subject: CN=1f67e1352356a8408720f330ec10a5d838d8488d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b1:11:d4:96:4e:f2:66:c6:c0:ae:55:72:c0:
2a:8f:28:1f:5f:37:fa:93:3e:7f:86:bf:db:8f:e5:
81:80:3e:6f:90:bb:2a:28:2a:23:d4:de:ea:a5:aa:
90:d5:d6:27:0a:86:2e:a5:62:59:21:60:b8:d7:4e:
b6:45:18:b2:86:9a:87:f0:37:df:f1:79:f2:04:c1:
73:d3:44:d7:e9:03:98:32:7a:bb:30:ac:e9:37:6c:
bf:eb:bf:ed:15:af:7c:de:59:24:28:4a:59:7d:80:
3b:a0:78:ca:fa:0e:32:dc:a3:79:fe:16:db:b3:a4:
ab:41:36:6a:2c:2e:0a:a0:e7:59:b7:40:90:59:c0:
fe:20:f0:7d:72:8f:70:76:cf:b1:4a:20:bb:72:a7:
89:08:15:ae:1b:3e:dd:0e:1e:9a:33:55:9d:ef:66:
cc:8d:aa:64:ef:51:81:fd:5e:38:08:b4:36:26:3d:
f4:f8:85:32:7c:13:2a:4c:91:1b:85:9f:d1:52:0f:
c8:80:9a:15:0f:45:25:5a:e9:e8:38:7a:8d:df:37:
87:3f:4e:3c:71:f8:e3:4a:95:a7:34:96:aa:95:e2:
65:13:46:b2:bc:5d:9a:fc:0a:94:0b:4d:9e:db:9a:
37:b5:b1:3e:ff:ea:f7:99:60:2d:26:73:24:a5:b8:
73:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:67:E1:35:23:56:A8:40:87:20:F3:30:EC:10:A5:D8:38:D8:48:8D
X509v3 Authority Key Identifier:
keyid:8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c8:74:02:ef:76:78:3d:e1:73:aa:ee:b8:e6:b2:cf:28:5b:
bd:0b:23:c6:29:1f:53:69:58:00:33:5d:21:e0:ee:0a:19:23:
8b:7d:4b:9b:2f:66:85:e6:29:cf:57:ee:25:31:df:a6:06:3c:
cc:5d:98:07:2d:ad:ea:bf:97:87:01:0d:a1:86:38:a3:d5:8a:
c2:05:fe:29:6e:d9:2c:7c:1f:b3:47:e0:4a:03:55:86:78:ab:
92:48:0d:30:cb:0b:51:cd:63:a0:a7:f4:d9:37:f0:c7:12:cb:
1b:47:92:81:79:b1:29:51:f9:b3:32:d3:63:25:91:d8:92:5a:
e1:c7:3a:9a:74:a4:26:bf:a6:17:e4:1c:5c:6c:84:07:c1:38:
4e:ae:1d:c3:c2:f2:03:35:2f:10:f0:d2:2a:5f:39:bc:d5:f7:
b3:8e:7b:02:85:aa:1c:54:0b:e9:c9:2d:0c:44:fc:83:02:99:
c5:11:c2:64:ca:b0:3c:12:df:0f:0c:9a:32:e6:d3:34:19:20:
97:ae:5b:f2:89:b9:e4:bf:a6:1a:af:a3:7b:2d:ed:34:57:45:
35:c1:95:54:5d:a1:0f:b6:00:4d:56:a1:ad:e4:cb:f0:43:1a:
e6:aa:31:80:38:b3:b9:e1:4e:d1:2f:f2:41:2d:8c:73:62:11:
c0:d5:aa:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:17 2025 by rpki-client