Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
File: i3P4NzXIqxCgqNROFwEo8COEbnk.mft (raw, json)
Hash identifier: U67jmhhxuhCwWspiXd6ZHqJenIwriERY2GNX3CT/X24=
Subject key identifier: 2D:EE:45:6A:24:36:63:F1:9B:3E:76:67:50:38:D4:0C:39:15:57:9D
Authority key identifier: 8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79
Certificate issuer: /CN=8b73f83735c8ab10a0a8d44e170128f023846e79
Certificate serial: 0199FD6AE6D056AE07EA698F58D404206D5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
Manifest number: 05A6
Signing time: Sun 19 Oct 2025 17:01:05 +0000
Manifest this update: Sun 19 Oct 2025 17:01:05 +0000
Manifest next update: Mon 20 Oct 2025 17:01:05 +0000
Files and hashes: 1: L3ocwI9skWdmpza9Qr_soDnI5iA.roa (hash: 9lUp3ywFYQ08BYq4aJkqYCgUsr8TmtCB3L7KRcDWSOM=)
2: i3P4NzXIqxCgqNROFwEo8COEbnk.crl (hash: ImL4NLiL/bold8qkNEfSBz5JYm4ngvyssct/uQdLLGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:e6:d0:56:ae:07:ea:69:8f:58:d4:04:20:6d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b73f83735c8ab10a0a8d44e170128f023846e79
Validity
Not Before: Oct 19 17:01:05 2025 GMT
Not After : Oct 20 17:01:05 2025 GMT
Subject: CN=2dee456a243663f19b3e76675038d40c3915579d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:7f:da:cd:82:73:0a:95:ea:91:e8:1e:ca:
24:39:30:0e:7a:87:bc:65:68:f2:b9:15:54:1c:1c:
0a:2a:67:98:e1:3c:0a:80:7d:01:45:b3:ea:d6:d1:
b0:c5:c9:60:44:c3:49:45:b8:2e:87:f1:58:d8:09:
7f:72:3a:43:b3:fb:5a:8d:d6:ce:e3:c0:ab:e3:12:
aa:e2:f3:94:36:88:12:07:a3:0d:50:78:6b:a7:36:
f9:c9:07:5c:d4:25:f0:13:55:1f:63:85:c0:34:eb:
bf:e8:fc:80:c9:14:d3:95:bb:8a:c4:25:4d:f9:cc:
1b:1e:3f:9f:d6:42:c2:18:fb:16:20:35:7d:4a:73:
5f:c0:cd:26:36:3f:d4:8a:42:cf:c0:0a:dd:68:7b:
9f:10:e7:0f:8e:6d:6a:b3:cc:7b:1a:ee:22:69:95:
92:29:8c:f7:2e:4b:ae:38:70:7b:61:79:15:cd:6f:
4f:00:36:cc:12:10:2a:28:f0:7f:9a:db:9e:51:e7:
ee:89:7b:fc:dc:f9:26:be:92:67:16:73:4d:0f:8d:
29:da:ee:1b:c7:36:31:e5:a8:63:23:ee:2e:fe:5c:
97:49:a6:e6:58:f6:66:95:5a:b4:dd:74:bc:4b:32:
47:f6:6a:e0:e7:35:71:38:18:3e:1c:98:31:5d:ac:
35:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EE:45:6A:24:36:63:F1:9B:3E:76:67:50:38:D4:0C:39:15:57:9D
X509v3 Authority Key Identifier:
keyid:8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a3:31:1b:dc:95:fe:91:f9:27:67:39:ad:fb:a1:ed:cc:8f:
5b:2b:d2:29:c9:6e:1c:a8:ae:46:24:6b:6c:15:72:fc:2f:af:
7b:a4:26:cd:6b:32:a0:63:d7:fb:de:4b:be:b2:d2:a1:0d:7b:
07:a8:2e:c3:9c:33:26:e3:fd:4c:88:ea:40:d7:2f:1f:e1:d5:
a6:13:80:2a:f8:9e:f5:53:d5:00:a5:a5:2b:ef:ae:28:e3:f6:
b7:35:72:cc:ce:b3:48:53:92:75:21:eb:0d:fb:84:8c:33:5d:
6f:f9:c0:c9:5b:e5:59:3c:a7:ce:0f:94:5d:62:de:ec:f5:02:
b9:e0:c8:bf:6a:3a:2d:63:1f:ee:e2:41:57:8b:d4:60:d0:12:
fd:67:db:62:57:f5:4e:58:b1:49:10:26:4d:d6:e6:17:93:5a:
37:46:7a:ce:f2:8b:a9:1c:2c:89:f1:05:5b:9a:4d:4d:d1:c6:
e3:a8:72:1a:f9:eb:8e:8a:cd:3b:ad:25:dc:7c:a4:0e:74:35:
26:06:11:11:ca:81:96:0c:76:10:2b:6f:3d:57:dd:fa:22:a9:
6a:d4:fd:5c:42:c9:d3:c9:c2:9b:5a:98:4d:e3:11:6c:e0:0c:
b3:6b:60:d6:e3:c1:4e:6c:73:8c:23:af:f8:c7:c0:5b:3b:95:
6d:90:74:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:41:18 2025 by rpki-client