Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
File: iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft (raw, json)
Hash identifier: mjaLS5ecMu6MKs8flH9NdjqiLrBx7GsuS5+m4PWrthU=
Subject key identifier: E7:D8:43:DD:52:34:4C:FC:0D:46:DB:29:9A:99:3B:44:E8:EF:6C:8F
Authority key identifier: 88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
Certificate issuer: /CN=88a780738b853acffbabdb23914c50e36421f773
Certificate serial: 0199FCC697BA817FA7D3908CCDE76F7758FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 14:01:37 +0000
Manifest this update: Sun 19 Oct 2025 14:01:37 +0000
Manifest next update: Mon 20 Oct 2025 14:01:37 +0000
Files and hashes: 1: 0JBSKBByojNYZjOoZlphUB11hQs.roa (hash: 9bDpXvSUlNPWWMoYaJSQ0SO0EuZKnPkwfl5l8GKFytk=)
2: aKf7cpyzNQSyfw8b7-Pr38WCYnc.roa (hash: oRGD5ClevpyjAOYjV/aBq4YhQP42jPwVRjMhzooXQlg=)
3: iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl (hash: gSVtKgssDUM/I5ifSM4au5D6XEULX0EfI3ceq/qDiYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:97:ba:81:7f:a7:d3:90:8c:cd:e7:6f:77:58:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a780738b853acffbabdb23914c50e36421f773
Validity
Not Before: Oct 19 14:01:37 2025 GMT
Not After : Oct 20 14:01:37 2025 GMT
Subject: CN=e7d843dd52344cfc0d46db299a993b44e8ef6c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:32:1c:ff:0b:6e:49:32:ee:2a:31:9b:41:cd:
a2:b7:23:14:47:ab:72:ab:21:61:9c:42:34:63:ec:
99:db:92:d6:e1:00:29:87:21:27:9f:c3:6c:58:55:
1d:45:3c:7d:5a:48:45:46:cd:b0:1a:d5:fd:d2:68:
40:3d:71:64:ca:17:2b:18:d5:10:14:17:eb:f2:66:
88:ec:2f:6d:3e:95:3a:d9:2b:ff:ae:eb:60:41:57:
a7:5d:c3:f4:f5:91:8c:6a:e1:e6:1b:0c:f2:e3:bc:
cf:70:e4:bb:d3:34:99:be:44:da:9f:34:3c:05:e0:
f9:48:9a:cf:d3:24:3d:79:48:b8:f8:40:e7:95:15:
db:57:c1:1c:25:bb:ec:2b:2b:dc:d3:e7:64:ad:ae:
7f:44:29:87:a3:63:0f:8a:b1:4f:64:74:af:da:69:
63:1d:73:81:fc:13:e5:d1:d0:a1:3b:9b:b3:bd:a2:
94:33:f7:7e:15:05:09:25:03:e3:c0:f7:b1:35:a7:
d9:ad:f8:87:06:87:7a:26:f4:47:1e:ee:e9:c3:d7:
de:b6:b4:f7:65:9f:b4:01:58:09:c0:46:c4:ae:0e:
f8:5d:c5:0a:38:98:48:f7:2f:f1:93:f2:71:3e:cd:
8c:34:13:0e:43:a5:d2:d5:25:7b:3c:f5:28:02:14:
15:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D8:43:DD:52:34:4C:FC:0D:46:DB:29:9A:99:3B:44:E8:EF:6C:8F
X509v3 Authority Key Identifier:
keyid:88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b9:bf:be:f7:69:7c:61:67:bf:7a:0c:96:0b:7c:59:fc:5c:
a9:ec:f0:d4:d7:4e:c9:09:9e:e0:e6:1c:1e:24:4f:66:84:93:
43:0d:2c:95:2c:e6:fd:97:91:78:73:01:e1:00:e8:08:ed:ce:
0e:4f:14:39:94:ac:00:7c:e6:1f:fe:a4:7e:76:81:51:00:43:
0e:6e:df:e8:c1:d7:45:d5:a8:bf:93:f0:a7:e3:f7:ad:87:c2:
c0:71:1c:72:38:b0:1b:5f:98:d0:ad:cc:d7:df:8f:c0:c3:59:
7d:8b:b5:cf:d8:be:90:3f:15:e8:86:af:71:a9:c6:a2:3e:9d:
6f:eb:1c:8a:b9:d6:99:d6:0a:b8:aa:7d:0e:2f:4e:57:f1:15:
01:04:6f:05:14:85:db:6c:3b:45:b4:dc:c8:08:a3:9d:b8:ff:
af:fb:00:a8:0b:a8:41:7b:b0:4e:4c:c3:2c:f0:65:ce:c7:07:
8c:f8:0f:f2:4a:39:bb:41:ca:f1:a5:6d:74:b4:73:bf:9c:29:
e7:a3:dc:18:2b:f7:10:39:24:35:41:94:78:f1:c1:b9:84:09:
64:be:d0:67:5d:46:10:63:83:fd:dd:1b:2b:3b:a0:3d:cb:40:
e0:1b:cb:c2:78:4e:86:6d:90:61:25:dc:65:51:f2:ae:59:ba:
b9:9c:d1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:31 2025 by rpki-client