Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
File: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft (raw, json)
Hash identifier: eqdxxH9w90mLp3/d08vFqnkyrkv3uOxK8sz5UjxzMW4=
Subject key identifier: 38:FD:34:EE:BC:08:EF:C2:ED:FA:18:53:0C:FB:80:82:5F:9B:B1:81
Authority key identifier: 23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
Certificate issuer: /CN=230e9ac64510fa391846bb139ab52b8001d58038
Certificate serial: 0199FC585183D7DE34B0A5B74FD907B11ACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
Manifest number: 1377
Signing time: Sun 19 Oct 2025 12:01:10 +0000
Manifest this update: Sun 19 Oct 2025 12:01:10 +0000
Manifest next update: Mon 20 Oct 2025 12:01:10 +0000
Files and hashes: 1: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl (hash: 2Un/nd2Dwodi0OIduuQyIC5CPODbXcwncltZ0qWaUK8=)
2: UoyH2jgw3TjRmBGXcoIbjkHpXYk.roa (hash: 7Hn5Nml4HR5xVhJraj44LXb5goEfvTP/sHQKgiuE26I=)
3: pSCPepTx67SC5l3Ed1hdUBnE5IA.roa (hash: MWvK8q7nznQKhnSv15ZjQ+g2Xqx0IxpC4fGczjIPPSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:51:83:d7:de:34:b0:a5:b7:4f:d9:07:b1:1a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230e9ac64510fa391846bb139ab52b8001d58038
Validity
Not Before: Oct 19 12:01:10 2025 GMT
Not After : Oct 20 12:01:10 2025 GMT
Subject: CN=38fd34eebc08efc2edfa18530cfb80825f9bb181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:92:65:00:e0:4e:49:74:ae:b6:81:5a:2d:24:
f3:2f:80:74:28:f5:1b:23:45:3f:94:63:64:8a:c1:
cc:eb:a0:6f:66:22:31:76:bd:05:47:d8:7d:e4:d3:
fb:fb:f9:78:37:4a:20:5c:8e:90:ea:d1:11:d5:2e:
a1:13:cc:24:5d:2c:f5:26:29:8c:73:74:9b:a7:d1:
39:2d:96:3a:e0:79:a5:2f:e4:86:1d:8a:e7:a6:4c:
4e:6b:6b:e7:4a:3a:9b:23:ff:f3:d5:b0:e9:51:b9:
53:31:0f:af:18:4a:85:e6:71:3f:4a:d6:2a:18:c5:
e1:b1:a1:d4:33:d1:1f:2f:21:ac:1a:a0:21:c6:e7:
d5:fc:e7:f7:60:9d:3d:23:0e:09:d8:3f:f5:f5:05:
de:cb:41:4d:7d:33:35:73:4a:8c:8a:bc:35:cb:3d:
8f:0c:05:88:4d:e8:93:a8:10:1e:b9:b5:37:20:75:
76:d6:8d:19:b3:69:4f:9b:01:ab:f9:30:cf:fd:60:
40:1c:67:62:73:08:b0:9f:7c:39:6d:2d:ca:ba:5b:
50:72:b7:6b:51:fd:79:82:7d:14:b9:1f:67:de:0f:
08:37:63:c2:df:6b:a8:3b:58:d7:85:76:c4:33:b4:
55:db:52:1a:08:ff:1c:c3:ea:98:0d:31:5b:07:f3:
d9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FD:34:EE:BC:08:EF:C2:ED:FA:18:53:0C:FB:80:82:5F:9B:B1:81
X509v3 Authority Key Identifier:
keyid:23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ba:f6:5d:56:15:43:88:1e:02:3f:67:92:40:9b:43:84:d8:
99:e8:5a:c8:55:a7:43:48:b3:2f:5e:af:4b:8b:b9:1c:8a:3a:
87:f3:82:0f:93:05:2e:33:d0:4d:64:a9:44:e1:38:5e:e0:0f:
d5:49:e7:39:61:71:61:83:f4:f7:6c:62:7f:9f:0f:00:87:09:
77:46:99:2f:38:dc:e1:9d:9e:f5:a1:82:35:67:c4:e4:88:9e:
c2:47:61:1b:89:3b:c0:3f:56:cc:c8:fe:48:bf:49:b3:cb:fe:
a2:88:8f:e4:63:40:4f:2d:99:f2:ab:65:85:fb:9b:f6:8b:47:
1a:f9:89:34:a6:e0:a7:dc:2e:76:22:52:c9:e5:a9:79:2e:fd:
63:34:d5:8c:3a:32:e9:ee:eb:56:9c:4f:65:8a:cf:4b:02:e6:
cf:5c:27:9b:16:70:5c:ed:92:74:95:02:68:31:50:28:93:5f:
35:bf:00:62:c4:4b:d9:0e:cc:e7:66:7c:30:65:49:55:36:32:
68:58:3b:f7:df:db:3f:10:73:f6:83:f8:1d:88:05:9b:b4:fb:
77:25:31:6a:e0:2b:98:0a:5c:6e:5b:51:74:8c:85:f0:b5:7e:
0b:4b:f9:52:e0:81:a3:54:eb:81:95:68:0e:b0:0d:79:59:5d:
94:a6:f8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:13:26 2025 by rpki-client