Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
File: IQH0Od66_1iAOV148Lv62Mp2CL8.mft (raw, json)
Hash identifier: Ci0Knh0ZZ8v4ZROZExU3rK6c6C+WM7CR5YQXHP+BLNg=
Subject key identifier: 03:A2:31:67:D3:3D:31:05:75:40:56:62:65:51:73:FC:D2:7B:42:E4
Authority key identifier: 21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
Certificate issuer: /CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Certificate serial: 0199FCC6180D370FF366846930A7F69DA678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
Manifest number: 0D9F
Signing time: Sun 19 Oct 2025 14:01:04 +0000
Manifest this update: Sun 19 Oct 2025 14:01:04 +0000
Manifest next update: Mon 20 Oct 2025 14:01:04 +0000
Files and hashes: 1: IQH0Od66_1iAOV148Lv62Mp2CL8.crl (hash: SDH04dL+yQs/peG1/aE4UBdBJx0Vo50lBXEJ4yOD33A=)
2: maYu8dN9neYyc8DtbRu2KTpDdQk.roa (hash: H5U+8VR9PAI4QlkVpTR8DC6LqpMXq6tJVvxgrK/vIPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:18:0d:37:0f:f3:66:84:69:30:a7:f6:9d:a6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Validity
Not Before: Oct 19 14:01:04 2025 GMT
Not After : Oct 20 14:01:04 2025 GMT
Subject: CN=03a23167d33d310575405662655173fcd27b42e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:1c:c3:0c:a4:25:e3:ae:23:aa:f1:1e:5e:b5:
df:d1:ae:78:b7:60:8b:a6:80:95:61:0e:6d:c2:ef:
23:70:f7:c9:6b:f2:8a:79:e9:3d:6a:20:0e:e8:6b:
33:92:8c:2b:64:74:47:0f:3e:93:19:e0:01:88:2b:
d9:7e:bc:46:c0:0c:84:bb:31:37:a3:59:a3:bc:37:
da:3f:78:80:c9:a1:07:5a:b4:cd:fa:fa:b7:e9:60:
3d:fa:a4:16:bd:51:35:11:3d:75:65:97:ef:33:f5:
e1:5d:07:ef:f3:c3:d4:a3:93:bd:00:a2:bb:63:e9:
f2:4c:33:c6:8a:f9:0a:5b:22:74:2d:33:a1:55:ab:
07:5d:80:fa:06:d9:d2:b3:e9:20:64:93:14:b6:34:
c3:b0:28:d1:2f:d4:b7:88:37:61:ae:62:81:12:14:
87:96:62:23:8d:23:ed:5d:1d:ba:91:a7:24:30:31:
25:b1:a4:b8:65:60:6f:91:aa:c2:60:bb:2a:c5:b8:
a8:30:67:fc:08:63:44:e9:c1:8a:da:f2:35:38:84:
d4:04:a5:c6:cc:87:44:63:e4:15:cc:76:ab:23:8c:
2e:99:f6:1f:1d:b5:4d:2e:d5:87:0c:44:03:4e:a5:
24:c4:22:89:79:6b:a1:e3:20:ec:6f:9d:78:8a:08:
22:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A2:31:67:D3:3D:31:05:75:40:56:62:65:51:73:FC:D2:7B:42:E4
X509v3 Authority Key Identifier:
keyid:21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:07:b7:2e:e9:27:77:45:af:eb:1b:24:72:7a:2d:70:cf:77:
86:3c:54:d5:0e:9d:67:92:bf:e9:9d:94:c5:a1:0b:43:a5:ee:
c3:ae:fa:39:38:8f:a7:41:3e:61:da:65:79:db:85:76:c7:cf:
59:1d:2b:46:aa:40:a6:34:46:60:8c:c6:f4:b3:6f:32:b4:52:
7b:16:91:00:43:28:07:60:3f:79:f9:92:97:3d:e5:87:7d:33:
5a:28:47:65:02:63:a5:1a:da:6b:d1:ce:41:d1:78:2b:a2:a9:
f5:6e:37:3a:59:c5:d5:b0:2b:32:bb:2b:bf:e4:2a:d3:51:eb:
a1:c2:85:51:98:09:0b:9c:ad:35:86:8e:ef:1a:8c:23:96:cd:
ab:c1:c0:be:74:6c:6e:d3:67:a6:13:a7:35:24:51:cb:95:ec:
d4:f0:9a:c4:76:23:c1:d2:22:41:83:95:fa:12:d3:67:87:99:
29:21:56:d8:e2:0e:fd:9e:b9:92:eb:b1:31:d7:ba:c7:d5:56:
58:4f:a9:42:7c:d1:f7:9a:6c:17:63:b7:b4:15:7f:83:4e:7f:
06:00:aa:d4:65:45:a8:3c:40:c5:72:5e:9f:76:9c:18:bc:2e:
09:ea:d1:7b:e6:eb:9d:76:ed:4a:3d:99:ef:09:0e:ce:1f:3d:
99:e3:58:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:56:23 2025 by rpki-client