Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
File: Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft (raw, json)
Hash identifier: 8z6cdzi8JKRhy7WVFnM9Psb1gtWrSPxTIUo9YDP5oY0=
Subject key identifier: 69:62:A9:2E:A5:DB:91:C5:50:53:B0:AC:18:CA:7B:0F:0A:5D:71:5B
Authority key identifier: 26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A
Certificate issuer: /CN=262f7322fbe9743eb471383a090b35b5296a2a8a
Certificate serial: 019A70DC031AC27FA8AA022F9D2DF3C6277C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
Manifest number: 111A
Signing time: Tue 11 Nov 2025 03:00:57 +0000
Manifest this update: Tue 11 Nov 2025 03:00:57 +0000
Manifest next update: Wed 12 Nov 2025 03:00:57 +0000
Files and hashes: 1: BQ2_9-ItF5dIDSCPAfxbIaGC5hA.roa (hash: +G1ycNpVwWYjvSoa5pj4YTiRmj97XRdNfodhiBjoJD8=)
2: Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl (hash: 0HG13hh77Dytk3jBE0RlpwNbOnnzx9cPV+v4+O4ctBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:03:1a:c2:7f:a8:aa:02:2f:9d:2d:f3:c6:27:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262f7322fbe9743eb471383a090b35b5296a2a8a
Validity
Not Before: Nov 11 03:00:57 2025 GMT
Not After : Nov 12 03:00:57 2025 GMT
Subject: CN=6962a92ea5db91c55053b0ac18ca7b0f0a5d715b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a5:f2:24:82:6b:35:25:e5:12:74:d9:ea:4a:
40:fb:60:75:f9:7a:e9:b9:7c:3b:5f:fd:80:28:87:
75:1a:68:bf:da:de:26:a6:13:95:eb:3d:99:0d:be:
db:71:35:e6:10:1c:7d:a6:35:82:8b:6e:21:9f:3e:
7d:fc:24:ce:c0:33:78:65:6a:17:bb:73:37:cb:1c:
6e:f0:59:3a:f4:4e:7d:4b:dd:c3:a6:92:0d:83:d3:
0a:3f:c4:51:c2:8f:e2:a5:31:95:0e:74:a5:98:21:
64:98:54:9c:79:3d:07:70:dd:01:04:3b:e6:d5:56:
bd:b4:1e:13:c9:92:93:74:a3:59:ef:53:a2:1c:b7:
13:c1:d5:8e:88:77:62:4b:bd:d5:5d:1f:f1:c7:c0:
0d:b0:f7:49:05:1f:88:f9:19:cc:83:06:a9:b8:c8:
5c:5f:dd:1f:a8:38:7f:11:c2:fe:29:37:04:33:85:
d2:06:69:a4:6b:dd:b8:e1:39:6e:57:02:c2:bc:f3:
0e:bc:5f:94:33:a3:93:fc:46:85:58:b1:3e:d2:41:
d5:34:9a:34:09:22:bd:76:d7:bc:8c:3a:c7:41:0a:
80:96:e7:0f:bb:34:99:67:ea:a2:9a:1c:81:80:a5:
20:a0:3c:d3:19:ed:7c:67:13:6f:41:4b:35:be:f9:
94:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:62:A9:2E:A5:DB:91:C5:50:53:B0:AC:18:CA:7B:0F:0A:5D:71:5B
X509v3 Authority Key Identifier:
keyid:26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:07:26:f6:83:11:0c:d8:87:43:00:54:ce:f9:c5:e4:26:ad:
16:11:cd:72:4c:aa:eb:54:fa:18:52:fd:31:0d:7c:db:f5:42:
26:cb:68:85:bb:1a:82:17:e3:34:a4:29:78:04:71:43:eb:f5:
12:66:bf:f7:18:9a:ca:cc:c2:f6:c0:64:c5:6e:60:fe:b0:b2:
07:ea:c9:de:24:94:3d:37:dc:4f:75:07:13:73:f8:33:7b:da:
dd:24:66:f2:04:b5:e3:e2:5c:d9:2b:0c:d4:cd:94:f6:fa:73:
c4:b9:75:db:4b:11:73:61:03:b6:8d:4a:d5:80:d1:bd:24:ec:
95:93:15:2e:57:7d:08:57:4e:b8:8a:3a:96:f7:12:ae:70:2b:
2b:d9:d3:c6:96:c7:ac:1b:4b:91:aa:f5:d1:f2:fa:31:b2:c6:
d8:23:b4:30:91:cc:6d:a2:20:7e:f8:04:f4:90:1d:ef:20:38:
1b:b4:ac:38:65:c5:46:22:ed:db:32:54:c0:13:2d:2b:2a:59:
30:91:e1:70:d4:d3:46:03:a5:b9:38:d8:e7:b6:62:ec:f2:6e:
01:d9:5c:62:72:7c:7b:f9:73:8b:d0:a2:49:6c:2d:58:75:d1:
e0:3b:ce:9e:24:a3:b3:63:e8:00:00:55:c8:45:16:90:69:12:
7e:00:fe:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:35 2025 by rpki-client