Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
File: IJPjg7LMUtXsow_rEml1k8nHiKA.mft (raw, json)
Hash identifier: LWq6vuh6SCxeN75SohFHZXFYFnNt3qvOPulEOprOiMo=
Subject key identifier: 0D:64:71:86:0B:89:AD:A1:36:C0:38:FF:70:35:92:33:1F:54:FC:D5
Authority key identifier: 20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0
Certificate issuer: /CN=2093e383b2cc52d5eca30feb12697593c9c788a0
Certificate serial: 019A722677FFC0BB2CCCEB36E875F0EAFBCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 09:01:54 +0000
Manifest this update: Tue 11 Nov 2025 09:01:54 +0000
Manifest next update: Wed 12 Nov 2025 09:01:54 +0000
Files and hashes: 1: IFpZrxJhl8wQt7Uq0qRwzYFnZJk.roa (hash: eoMtlnp1ZLGeorMDixEuqh0nobwLwy70mhjbtsKxD5o=)
2: IJPjg7LMUtXsow_rEml1k8nHiKA.crl (hash: +FmL2645KvsjpjyRKWDKs1ERlpVsx4Ir4s1Jb+oQL4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:77:ff:c0:bb:2c:cc:eb:36:e8:75:f0:ea:fb:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2093e383b2cc52d5eca30feb12697593c9c788a0
Validity
Not Before: Nov 11 09:01:54 2025 GMT
Not After : Nov 12 09:01:54 2025 GMT
Subject: CN=0d6471860b89ada136c038ff703592331f54fcd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b6:fd:ef:b7:27:fe:f3:6e:2d:65:74:45:20:
e7:64:ac:0b:99:3d:c9:1c:db:95:c5:92:a3:ca:10:
7e:73:e6:41:90:dd:f8:6e:69:24:ec:ea:ef:c9:1c:
27:0a:c0:6b:e6:3d:97:76:61:8b:59:7c:ec:9e:ed:
09:2f:42:54:1b:c6:79:5e:ed:14:96:14:86:26:2a:
3c:d5:94:cf:36:c1:3d:d7:16:6d:97:4a:df:78:14:
2b:b5:30:a8:92:61:21:ba:1c:b2:c5:5b:47:40:07:
0a:4f:6e:07:ff:a3:82:a5:10:c1:b2:22:82:84:90:
e5:58:03:76:36:a1:7f:9b:6c:cb:4f:7f:38:7d:ab:
43:1f:68:b2:01:8c:4c:3f:6e:fb:9a:f0:86:33:c0:
6c:b7:e2:7f:bc:01:12:7b:8a:00:5e:bd:35:ce:4a:
b4:ef:dd:bf:39:1d:a0:3d:c6:a3:f3:1e:d1:c5:a5:
36:cf:6e:78:a9:42:8c:8f:cf:b0:53:94:c1:d4:58:
56:f2:5e:a8:31:77:f6:45:c7:52:dd:9a:2f:33:22:
2e:e0:0a:b2:3e:46:34:9b:0d:cd:99:2d:65:6d:2f:
51:de:b4:d1:86:7e:e7:54:f3:15:ed:30:2d:7a:22:
f8:e6:16:26:85:85:d0:88:17:13:b0:a7:a0:31:c3:
c7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:64:71:86:0B:89:AD:A1:36:C0:38:FF:70:35:92:33:1F:54:FC:D5
X509v3 Authority Key Identifier:
keyid:20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:18:b0:ce:2c:67:02:4d:84:11:dd:22:f9:aa:a6:58:34:e5:
23:81:33:37:17:c9:03:31:66:32:44:1c:02:25:87:ec:af:48:
2a:86:90:2c:c7:52:15:74:b2:7d:36:40:af:7f:7f:04:d9:f3:
b8:18:72:d7:83:e7:d6:b2:b8:36:01:34:73:95:6e:dd:4e:b6:
1b:bd:f5:fd:f0:0e:b8:b6:fc:fd:2c:20:83:85:95:3b:42:83:
3b:ab:9b:68:33:09:da:8f:7a:2d:ec:97:07:cf:03:02:09:55:
51:2e:2c:2a:e0:24:77:de:dc:c7:7b:ea:34:68:94:8e:ac:6c:
d3:dd:e6:41:de:03:52:40:7d:51:a8:65:fe:65:ea:be:b4:dc:
6a:e7:b4:e8:58:fc:e6:f7:62:bd:c0:30:18:4f:59:7d:b3:fd:
ba:1d:2c:c1:2b:15:1c:c8:66:bb:06:49:31:3c:83:fd:84:1e:
bf:a6:95:00:f3:7b:9d:4f:d5:6d:5d:19:a5:a0:24:96:8a:3b:
b5:8a:be:92:2b:e4:40:08:0b:3b:50:1c:05:86:aa:ef:6c:0b:
6d:9d:92:d2:85:c4:2b:22:20:b0:e0:2f:54:21:74:1e:ca:86:
5b:eb:71:0a:e7:c8:b7:56:e7:cf:67:d5:49:d9:52:d6:8c:5c:
6c:e7:fc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:35 2025 by rpki-client