Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
File: ifTHhzt_6kn_brkNUCwdvDpfjDM.mft (raw, json)
Hash identifier: q2hH67ZSoyJ+0n8PT5JOhpmp1xbXRx1jHKeoG1ykYMI=
Subject key identifier: 8B:37:EA:C9:AB:3D:95:03:41:E4:99:F6:E3:4F:52:3C:F5:8E:7B:68
Authority key identifier: 89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
Certificate issuer: /CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Certificate serial: 019A71132218B4F4AD81516CA7DB852A4BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
Manifest number: 1703
Signing time: Tue 11 Nov 2025 04:01:10 +0000
Manifest this update: Tue 11 Nov 2025 04:01:10 +0000
Manifest next update: Wed 12 Nov 2025 04:01:10 +0000
Files and hashes: 1: 5dE_GC4RYmruYsEQCosEswqhvMw.roa (hash: PKjCYy3vCzlACHchkXt5SVZDwsnRqMCgtgL6CJOnCUg=)
2: ifTHhzt_6kn_brkNUCwdvDpfjDM.crl (hash: 77uyB+Vp94PQRRLgasdakIK4e3zzvK0ScbmVYvtzJEE=)
3: wITBUH3fVii4QvavQf9IYQ9sIA4.roa (hash: sUVkY3RRTmkWlOCgQmin3wil/Gjs5wSpMGd2nMYWzJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:22:18:b4:f4:ad:81:51:6c:a7:db:85:2a:4b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Validity
Not Before: Nov 11 04:01:10 2025 GMT
Not After : Nov 12 04:01:10 2025 GMT
Subject: CN=8b37eac9ab3d950341e499f6e34f523cf58e7b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6f:2e:0c:1a:3d:ee:d1:fe:38:91:c0:d4:1e:
06:b1:1d:7c:04:33:b8:c0:a9:79:ef:57:30:51:1b:
c8:a0:87:c1:24:37:ef:f2:22:d9:88:4c:4d:48:bd:
1d:6d:e4:aa:7e:11:63:5e:2d:9c:17:60:0b:2d:0a:
79:38:ae:51:87:a7:83:e1:16:4e:8c:22:00:ce:48:
1a:3b:c3:9f:27:9b:fb:85:d2:57:42:59:c3:a7:7b:
fa:65:94:07:0b:05:13:95:67:1f:70:65:9a:a9:4a:
b1:9f:7b:ff:0f:33:d7:05:3d:52:b7:d6:43:1a:7e:
d5:68:4d:56:8e:89:e1:00:ac:cf:ac:3b:75:b2:21:
ed:eb:c8:8d:bc:99:22:b7:26:f5:a6:ac:24:e3:8a:
8f:12:08:4f:8f:c7:a6:91:4c:b9:46:4d:ca:00:c7:
4c:2a:ff:e8:b6:cb:01:97:90:06:0b:12:22:3e:ba:
02:3a:ed:d5:3a:8f:e8:e8:e1:e1:3b:d6:0f:e6:37:
5a:0a:19:4a:de:d0:17:16:71:60:e8:b7:fe:10:a7:
da:22:ec:48:31:8d:77:dd:b7:d6:34:08:cc:83:f8:
90:a4:f1:97:33:b7:67:78:77:0a:0f:df:e9:01:69:
35:5a:8d:ec:2d:09:91:81:ee:eb:87:16:aa:6c:25:
6d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:37:EA:C9:AB:3D:95:03:41:E4:99:F6:E3:4F:52:3C:F5:8E:7B:68
X509v3 Authority Key Identifier:
keyid:89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:ba:92:db:99:d5:6a:54:82:c3:9b:9e:c1:d1:8f:5e:4d:73:
f8:8b:13:25:f8:7a:a8:2e:95:64:80:e2:02:c9:49:f7:1e:1f:
99:d7:3d:44:7d:e2:fb:63:3c:1a:34:41:1b:61:a1:81:f1:5f:
fe:39:2b:13:31:f9:cd:40:f7:bc:ed:db:54:08:9f:65:44:32:
13:12:44:60:a2:10:70:75:fc:8a:6f:a3:d1:0d:7f:69:e7:28:
1b:77:43:21:c8:0c:22:22:ea:4f:78:d5:dc:b7:65:49:92:8f:
1a:f9:78:ed:75:4b:de:b9:78:89:b1:3f:38:43:ce:1f:f1:44:
bb:68:e4:0c:58:fa:46:2b:24:db:d2:e5:61:1b:1b:b8:43:60:
b5:52:f0:82:f6:95:7b:32:18:60:30:4c:85:11:9d:8e:b3:c0:
35:92:ae:7c:75:30:1f:a8:9a:51:b3:2f:87:ff:4b:9d:df:73:
be:40:46:99:84:b4:d5:fa:ce:bc:bc:7b:da:5e:e9:33:e1:ce:
6a:07:3f:2b:3f:c1:9f:8f:50:ad:65:ba:d0:17:56:c8:33:b5:
8b:f2:1b:78:f2:bb:86:0c:50:de:4b:24:0e:da:50:58:f3:28:
19:be:25:eb:36:de:54:b1:dc:8f:0c:a9:94:56:d2:bd:ea:00:
43:10:50:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:01 2025 by rpki-client