Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
File: IhHwQD6XRloB3RRbwVB75WVxDU4.mft (raw, json)
Hash identifier: namA6Wtf/ETc17xvVeC9pgFvWctOCQwDJYjsiFiQniA=
Subject key identifier: 2C:FC:E8:5B:F0:8B:DA:25:0C:83:AD:70:FA:3D:89:A3:E0:2A:41:E7
Authority key identifier: 22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
Certificate issuer: /CN=2211f0403e97465a01dd145bc1507be565710d4e
Certificate serial: 0199FC8FCAAEFB4A0440A4B71B823A1BF07F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
Manifest number: 0795
Signing time: Sun 19 Oct 2025 13:01:45 +0000
Manifest this update: Sun 19 Oct 2025 13:01:45 +0000
Manifest next update: Mon 20 Oct 2025 13:01:45 +0000
Files and hashes: 1: 0Td-ytKd7IQkV6ppvSRDV5Vu3uc.roa (hash: vadykyjqf/87L2UrE0dzG3fnpUitaYJ3rncrWvmznpA=)
2: IhHwQD6XRloB3RRbwVB75WVxDU4.crl (hash: kiF3ZHZ0Hxb7AXXQQkNiyWAbZqiiIIrmQMEmEOukzpc=)
3: klqt66FL_fbr6-S9maCaJ71u_2M.roa (hash: veL+ZGa8+a7DgdnASURYCHEXm47JFKP1LXkF9cJkBfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:ca:ae:fb:4a:04:40:a4:b7:1b:82:3a:1b:f0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2211f0403e97465a01dd145bc1507be565710d4e
Validity
Not Before: Oct 19 13:01:45 2025 GMT
Not After : Oct 20 13:01:45 2025 GMT
Subject: CN=2cfce85bf08bda250c83ad70fa3d89a3e02a41e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2e:26:71:e5:4b:f7:bc:a2:b8:6e:09:be:14:
6c:c0:f0:a4:e1:fa:7b:f6:bc:83:c4:b0:bb:37:b6:
ea:ba:50:ac:28:8e:9a:34:a3:3c:a3:27:d5:57:8d:
09:8c:a4:09:86:73:85:53:d3:fd:3f:62:83:8f:bd:
0e:fd:85:b3:3e:6e:93:47:ef:fc:57:7c:c8:a4:db:
1c:80:9d:08:7d:c6:2a:91:45:bc:42:85:da:f9:cf:
d2:04:0b:93:10:aa:32:cf:04:53:dd:0b:89:4b:64:
9d:5e:ab:c6:0e:94:5d:a3:15:66:1b:8a:0f:fe:3c:
6d:32:6b:a8:b9:4d:08:03:12:47:4a:7e:af:0a:8f:
76:52:29:9b:ec:88:a5:6f:4b:03:de:95:e4:1c:15:
65:cf:9d:62:7c:4e:e3:37:e4:6a:38:c5:14:52:61:
ee:09:9c:9e:03:67:38:17:13:ab:35:fa:53:6b:68:
20:38:f6:5b:45:2c:bc:2b:5b:6d:f0:c1:e7:e3:0f:
57:25:0c:ad:eb:39:31:32:96:91:28:93:45:e3:9c:
6b:fe:dd:ca:f8:06:2a:9b:f1:65:5f:b0:6f:55:66:
41:cd:a4:5b:f5:42:92:7d:6a:ec:cb:b1:8d:47:c8:
98:1d:bc:3d:56:86:41:87:ce:d4:45:2f:55:76:83:
a3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FC:E8:5B:F0:8B:DA:25:0C:83:AD:70:FA:3D:89:A3:E0:2A:41:E7
X509v3 Authority Key Identifier:
keyid:22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6b:bb:ee:a6:19:d8:e9:32:7a:8f:13:9a:8b:59:1c:99:91:
e9:c7:f8:90:84:de:e4:22:8b:cf:14:45:89:ac:24:c5:36:27:
25:45:59:c9:bb:d1:2a:01:b7:f8:9b:43:91:46:57:b5:b4:ea:
04:b3:57:e3:f7:ac:66:00:03:01:f4:ed:aa:e6:fa:ea:2f:34:
cc:a5:a7:81:11:c6:e3:1e:03:5c:23:a4:c2:eb:e6:5c:4f:b5:
e5:6e:0a:e9:59:70:01:db:23:c2:79:b6:ef:3e:e4:3b:7b:8b:
d6:a9:43:dc:70:a5:a3:19:d8:01:f7:12:1d:b5:22:4a:e6:16:
21:ae:20:42:c9:3f:c0:7b:a7:84:94:99:ae:13:87:c6:f6:ca:
fa:a6:06:77:51:3e:64:8e:6d:93:28:c2:d8:c7:5f:c6:98:30:
14:23:59:76:e2:fb:44:f3:a1:3c:da:fa:53:0b:af:ab:ce:ad:
29:d6:32:74:84:3c:e6:80:7e:29:95:17:d1:7e:f6:94:57:33:
51:91:3d:91:78:a8:d8:66:d9:3a:81:44:7b:c6:3b:0b:fa:63:
c9:e6:bf:b1:5f:a5:d2:2f:8f:d3:25:2b:32:0e:8f:78:c8:c1:
fd:b8:62:a9:e9:14:e2:2b:4b:07:b8:8e:a8:31:65:fc:e5:e2:
15:0b:3a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:11 2025 by rpki-client