Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
File: iTr8bv5imQomky9A4VCyfu1TnEs.mft (raw, json)
Hash identifier: sHRd5xMUat+eYpGv817tW3uajBOok9I5V1rXQXtBKcs=
Subject key identifier: 25:2F:91:9B:15:40:77:0D:BE:E5:85:CA:36:7F:FD:E5:E1:D3:AF:A0
Authority key identifier: 89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
Certificate issuer: /CN=893afc6efe62990a26932f40e150b27eed539c4b
Certificate serial: 019A71131DB96761DB21CBD844C52492C0EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 04:01:09 +0000
Manifest this update: Tue 11 Nov 2025 04:01:09 +0000
Manifest next update: Wed 12 Nov 2025 04:01:09 +0000
Files and hashes: 1: UvkgBounMtuI2EY4VakFPmSVVf8.roa (hash: B8b+cAv47Fq4zMohD+Ikbfg+w/maMgI605v1qgGvxbU=)
2: aMP60-6kIcycfPRX1mrnGq3rKu4.roa (hash: 3JfLcJd1nqn3CbGO/VzxfaF4cayveMgFQoD5eZc253E=)
3: iTr8bv5imQomky9A4VCyfu1TnEs.crl (hash: kcmDRzHSzy4csGVvDcGBM5x4I/J/iJ+uhCXgUrApE6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:1d:b9:67:61:db:21:cb:d8:44:c5:24:92:c0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893afc6efe62990a26932f40e150b27eed539c4b
Validity
Not Before: Nov 11 04:01:09 2025 GMT
Not After : Nov 12 04:01:09 2025 GMT
Subject: CN=252f919b1540770dbee585ca367ffde5e1d3afa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ba:c4:54:ff:24:e0:2b:32:ff:e4:ee:43:07:
b5:58:b4:f6:71:00:ea:e5:42:0e:d1:9b:10:2e:84:
0e:05:d0:aa:6a:4a:42:cf:f7:14:aa:53:06:79:1b:
e7:87:cd:f2:35:87:ee:4a:89:4f:07:0a:b6:a5:82:
64:cc:bb:76:b0:0f:3a:51:81:a9:7d:69:cc:05:a6:
16:a5:9c:b7:99:88:45:8c:35:c9:e3:9e:76:4e:e5:
f0:44:46:07:90:a2:ac:b8:8e:bf:c8:89:ba:f8:a2:
41:cf:ed:b3:46:9e:9c:f3:05:b0:60:14:e1:36:2b:
8e:33:f4:a7:47:fd:2a:e9:ff:91:b2:f6:6c:63:3e:
f5:6e:2e:7c:7d:4a:d1:77:4e:23:9a:16:64:11:b5:
4a:d8:2a:ee:a1:f1:be:60:f7:e7:ae:79:68:05:15:
ba:a2:6b:22:87:6d:5a:97:1e:a4:fc:f7:e9:9b:eb:
d0:a0:49:01:bf:e9:e4:a8:f9:2e:f2:7b:bc:3a:b8:
32:19:76:c0:db:18:c0:43:dc:19:ce:c7:ef:1c:7e:
ed:98:58:00:91:82:ad:ac:d7:2d:a3:5d:51:1e:b5:
32:24:fc:7b:aa:30:37:4e:e7:7c:5c:38:8b:7d:ec:
2c:32:47:27:65:95:e2:d1:ff:d0:dd:c7:3e:95:87:
61:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2F:91:9B:15:40:77:0D:BE:E5:85:CA:36:7F:FD:E5:E1:D3:AF:A0
X509v3 Authority Key Identifier:
keyid:89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3d:6e:80:23:b1:19:f4:e4:64:d0:dc:28:ac:c5:2b:b2:52:
0b:91:9b:98:f5:56:75:b0:db:6e:c4:f9:ce:1c:ea:18:a9:4f:
df:2d:cf:75:16:62:2c:bc:18:24:1e:b3:0f:fe:88:22:8b:a6:
55:4b:f4:00:a5:86:c0:a9:c0:6e:1b:ca:62:ac:8f:2c:61:ce:
82:e2:0a:c4:6e:f9:13:15:72:fc:e4:61:8f:f6:60:74:9b:04:
de:4d:ea:52:31:92:73:12:a3:21:1f:94:66:d0:37:a9:5c:f5:
8f:80:5f:81:22:a3:90:c3:72:42:d9:2e:f8:c1:fc:a8:50:a8:
36:6e:3a:4c:77:23:8b:23:17:76:7d:8b:8a:66:ff:a0:b4:a5:
86:44:72:63:83:35:63:ba:52:94:63:a4:ea:c4:9a:a7:d1:05:
78:6c:00:15:8e:0d:df:f9:bb:6b:c2:53:18:a0:ef:95:49:04:
21:2c:f3:ec:f8:f2:62:e5:13:1c:62:37:b7:ce:8d:61:d9:66:
7a:fb:7d:fd:5f:5c:1c:86:07:9b:26:1a:f8:07:3f:08:bf:82:
69:1c:46:f8:bd:1e:98:d7:a1:35:77:d0:cc:c3:55:a8:19:c8:
3c:9e:13:ef:f1:81:c6:35:36:19:46:45:61:bd:a8:75:e2:18:
54:3a:24:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:06 2025 by rpki-client