Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft
File: Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft (raw, json)
Hash identifier: wKga31ON2ylPjpgsV3JM+QUL02XkR6Eg8g3WzMFxx9A=
Subject key identifier: E4:89:88:0C:2F:F3:00:E4:5F:D1:9C:9C:0B:A6:18:BF:54:FF:AB:CB
Authority key identifier: 23:28:72:F4:31:AD:A9:B6:82:6C:5F:08:97:EC:4E:53:42:09:2E:98
Certificate issuer: /CN=232872f431ada9b6826c5f0897ec4e5342092e98
Certificate serial: 0199FAA0CA5FFC0AB82C4C119852F29FCE46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft
Manifest number: 0441
Signing time: Sun 19 Oct 2025 04:01:05 +0000
Manifest this update: Sun 19 Oct 2025 04:01:05 +0000
Manifest next update: Mon 20 Oct 2025 04:01:05 +0000
Files and hashes: 1: 48SAL-XLUksWWK1voy4rKInz7oY.roa (hash: gFJO835mNcJuKRXk34iwBhwCN0pZ40KaHdrECvT9LmA=)
2: Iyhy9DGtqbaCbF8Il-xOU0IJLpg.crl (hash: /eMY224iW7Gnwm5patsTyfGBJLegltzox6dZTJZ95Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a0:ca:5f:fc:0a:b8:2c:4c:11:98:52:f2:9f:ce:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232872f431ada9b6826c5f0897ec4e5342092e98
Validity
Not Before: Oct 19 04:01:05 2025 GMT
Not After : Oct 20 04:01:05 2025 GMT
Subject: CN=e489880c2ff300e45fd19c9c0ba618bf54ffabcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d8:53:55:b2:63:1a:e4:52:f5:5f:f0:10:bd:
67:08:20:44:58:b8:ae:27:73:25:ab:22:51:e6:fc:
d7:83:93:72:01:ba:5d:8a:a2:dc:b9:47:ab:48:22:
68:1f:5e:e8:0a:74:46:04:bd:d8:f7:3d:4b:89:b0:
05:49:b4:89:b8:b6:69:81:ee:9e:bd:70:ca:82:25:
3e:73:df:1b:75:70:20:14:3e:1b:0b:8e:8d:0d:41:
f3:db:3a:fd:38:75:03:fc:72:41:6a:69:43:72:c2:
d1:cf:2b:77:67:e0:31:4f:c1:3a:3a:14:f5:19:01:
a6:0f:b7:82:e6:24:de:c0:36:46:c9:4f:46:03:ad:
99:a5:60:1b:e5:74:6a:9b:a1:d9:f2:1f:fa:25:ef:
2f:6b:57:3b:42:08:96:b4:ae:32:fb:4c:bb:23:72:
eb:8a:a0:e0:cd:3b:05:36:2c:52:dd:75:c8:0b:04:
06:54:a0:b3:0e:64:39:32:19:44:e2:ae:10:85:3f:
2e:18:25:19:ef:ca:df:83:5a:75:1c:54:42:c1:8a:
93:26:ad:0a:14:8f:30:86:97:b4:09:75:93:57:09:
a6:10:b1:0f:81:64:64:58:0a:f9:d5:0e:f7:ba:f3:
26:8f:bd:da:b9:66:db:2e:8a:2c:0d:c4:dd:cb:2c:
58:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:89:88:0C:2F:F3:00:E4:5F:D1:9C:9C:0B:A6:18:BF:54:FF:AB:CB
X509v3 Authority Key Identifier:
keyid:23:28:72:F4:31:AD:A9:B6:82:6C:5F:08:97:EC:4E:53:42:09:2E:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:7f:3f:2e:82:1e:bf:82:c7:51:9c:2b:80:60:dd:2b:02:9a:
da:a7:81:8a:d5:00:85:3e:b4:fd:80:94:dd:53:b3:3e:79:fc:
e2:69:03:4b:e7:5b:15:6d:4b:8f:26:29:ff:84:25:2c:da:9c:
aa:5c:9e:8f:fa:cb:13:a8:2a:8a:6d:d5:80:3e:39:0a:dc:1d:
cc:66:78:0d:4c:57:a1:c2:4c:eb:d7:51:78:eb:51:17:4e:e7:
57:5c:46:e4:c9:ce:14:1f:8e:84:6a:57:2f:d5:b9:c1:3c:0d:
09:3a:42:db:a8:e1:ff:cc:50:1a:b0:db:1f:a2:fd:da:6f:07:
66:68:b7:2f:9f:ba:4a:5a:85:87:68:69:43:ad:8b:21:f4:13:
26:9d:13:d1:e2:d5:21:a3:0a:e0:58:d7:c0:fc:9c:12:dc:1e:
c9:95:0f:1b:9a:75:a1:ad:75:72:8a:bb:05:36:a8:82:2c:68:
80:e0:7e:86:a3:72:63:13:43:32:79:9d:8f:28:b0:38:25:5c:
3c:02:7d:4e:16:49:06:c1:db:a4:95:18:9c:53:91:d0:61:e2:
85:94:ed:d8:80:30:1a:a4:03:c1:1c:fa:1c:ba:f6:58:14:7a:
2b:b9:e3:89:64:9b:a8:d3:ea:9d:e2:8d:e2:61:e3:b7:cf:43:
a3:5c:71:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:23 2025 by rpki-client