Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
File: iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft (raw, json)
Hash identifier: zbP1wMD6CdrV/IQ5vA/x8cW1Rd6vV2aNMjDY34BPgZ8=
Subject key identifier: 44:0D:AF:CC:E0:E3:35:1D:7E:69:95:69:5B:7D:0C:3A:55:EC:01:C0
Authority key identifier: 88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24
Certificate issuer: /CN=8898db8cb861bbbdd1fb7562def4d77d8642c324
Certificate serial: 0199FCC696B6A3E77E2CC2065BA368A506E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
Manifest number: 1404
Signing time: Sun 19 Oct 2025 14:01:37 +0000
Manifest this update: Sun 19 Oct 2025 14:01:37 +0000
Manifest next update: Mon 20 Oct 2025 14:01:37 +0000
Files and hashes: 1: hIJG4JYkLEhwraYEYvL-fraByuk.roa (hash: 5YFKdkA5FRK1IPjfHxOUcAbA5SZ2reBZq68WODkSIGA=)
2: iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl (hash: KT0GWdqofuTzM6O6eLkkIum0qINKEdVPh+xU7ZWlu/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:96:b6:a3:e7:7e:2c:c2:06:5b:a3:68:a5:06:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8898db8cb861bbbdd1fb7562def4d77d8642c324
Validity
Not Before: Oct 19 14:01:37 2025 GMT
Not After : Oct 20 14:01:37 2025 GMT
Subject: CN=440dafcce0e3351d7e6995695b7d0c3a55ec01c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:66:d5:82:81:42:30:30:66:05:f0:4c:35:f4:
53:57:f7:36:2c:9f:37:8f:49:65:44:a4:37:cc:cf:
6d:b6:9a:56:f5:47:e9:47:1e:5c:62:f3:51:6a:1f:
1c:53:50:0e:75:23:5e:44:89:96:3a:7f:e5:d6:b1:
1b:8a:e3:ff:9d:00:e8:c8:b9:0b:a1:ad:45:20:1e:
9c:2d:33:15:32:cf:94:24:91:ce:58:31:f4:d9:ac:
ff:99:d6:c7:c4:d8:f2:aa:25:1f:23:8d:22:e5:ab:
37:20:9b:f4:c1:43:13:47:55:96:ca:98:bd:fc:df:
c3:3b:f5:d0:0b:9d:fc:87:c9:40:04:55:46:35:92:
9c:e8:62:16:d5:c4:0a:02:f4:b7:20:7e:08:2c:be:
9a:fd:2b:d9:92:68:f5:26:37:dc:81:ce:46:03:e6:
d5:bf:5c:aa:38:0d:e6:c1:44:3a:d1:af:a1:eb:3c:
0e:45:c2:bb:ff:a6:c1:ae:21:36:8b:ff:60:d1:be:
eb:a0:cf:d5:dc:f1:17:a8:25:5f:ee:11:6e:20:b3:
85:9e:c0:a5:4d:70:90:c8:d1:b3:36:05:9d:5a:0b:
9e:9f:5b:8d:65:90:94:bf:05:a7:74:f0:6e:dd:e2:
4f:bc:8e:3d:2d:9b:7c:b4:30:d9:96:25:75:de:1f:
6b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0D:AF:CC:E0:E3:35:1D:7E:69:95:69:5B:7D:0C:3A:55:EC:01:C0
X509v3 Authority Key Identifier:
keyid:88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e8:59:08:cc:e6:d9:e0:51:e0:24:9c:49:ac:1c:16:4f:5f:
bd:2c:db:22:41:06:35:5e:71:3d:23:fd:9e:59:91:d6:66:6a:
64:8b:20:b7:1d:ed:7e:03:8c:80:5a:5a:0a:4d:5c:1c:6f:85:
b4:b5:a4:8d:4d:fe:a6:35:f8:d8:5d:f0:27:9f:bc:a0:fd:aa:
2c:be:f5:06:d2:0d:51:b6:29:73:55:48:ca:f6:b0:91:f8:6e:
c6:57:c2:c6:48:0d:50:83:4e:be:bd:46:da:6a:aa:5f:f8:7a:
d0:2a:5e:c4:29:1d:c7:9c:d9:2d:96:08:e3:ec:5c:b8:02:35:
b9:49:71:42:b7:b8:0f:18:97:80:45:75:d4:cb:0b:6f:53:42:
b2:90:0e:48:cd:ac:80:3c:09:13:17:f8:48:ea:73:f8:94:f1:
66:6c:78:f1:45:78:b0:0c:16:a4:06:a5:20:19:a7:0f:fd:da:
18:e0:69:37:b5:bb:74:bc:ba:4c:92:62:d6:9a:f2:47:37:d8:
6a:77:fb:4f:ed:f7:f1:c3:45:49:c2:4d:23:a2:c6:66:75:4f:
ed:97:74:bf:42:ec:09:fa:77:46:85:aa:a0:b8:9c:47:11:09:
a3:55:84:a6:82:ff:43:fa:24:97:9c:6e:b3:17:38:61:b2:bb:
e8:a4:61:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:45:15 2025 by rpki-client