Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
File: irW5qTaHl6hrrryB9iOz9OeG9Ro.mft (raw, json)
Hash identifier: f68iuiJqkWBTG5/yKAqsOaNEOKAlZ7kS55oLCom3kcw=
Subject key identifier: C9:FC:6D:24:95:E0:25:F9:E4:ED:C2:1F:76:15:2C:51:B6:71:07:38
Authority key identifier: 8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
Certificate issuer: /CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Certificate serial: 0199FC216256007552EF07CBCD91EEBC1748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
Manifest number: 0B39
Signing time: Sun 19 Oct 2025 11:01:10 +0000
Manifest this update: Sun 19 Oct 2025 11:01:10 +0000
Manifest next update: Mon 20 Oct 2025 11:01:10 +0000
Files and hashes: 1: 8Ztwq8Ff-jJd_sBf28s8lvQ9SqU.roa (hash: QWa/HtnKYiYQsWevU25s3knaSRBSQ+SLuyEHZRqaj0Q=)
2: RMQRbyTVfc3R_WDxvN9gz-bLDAA.roa (hash: yUAcbteBmeavQmfUpyblSFjPWzK2WK88NO5Ejqu8jfI=)
3: irW5qTaHl6hrrryB9iOz9OeG9Ro.crl (hash: 4nbNsCx2hGyCnRTgA20EufiHSyxXQ13KeaOdrhBw1Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:62:56:00:75:52:ef:07:cb:cd:91:ee:bc:17:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Validity
Not Before: Oct 19 11:01:10 2025 GMT
Not After : Oct 20 11:01:10 2025 GMT
Subject: CN=c9fc6d2495e025f9e4edc21f76152c51b6710738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f8:b9:95:6f:af:59:8e:6d:66:01:7a:37:94:
01:a2:bb:26:a9:b4:fb:6f:76:56:7d:3f:cb:97:18:
72:fb:96:b7:6c:9f:55:ee:dc:4c:f0:38:5a:7b:7e:
98:2f:f0:5a:f4:a7:16:34:7b:42:1c:96:18:65:3d:
eb:82:3f:ec:8b:7e:90:a5:58:15:20:7f:5a:95:b5:
36:52:c5:e2:a1:eb:2b:42:9a:e5:cb:af:0b:71:c3:
46:ef:43:30:14:f0:0e:46:72:de:9e:ef:99:6c:25:
59:7b:f1:67:60:9b:08:4c:b9:83:da:c3:57:9f:bc:
a9:4a:ab:1a:f6:ec:fd:ca:f2:f3:cd:25:72:20:ef:
a7:06:cf:a6:f2:1a:c6:9a:53:c9:74:d4:50:7d:e3:
6e:ae:d8:da:c8:84:7b:43:f4:f7:b4:a4:96:25:ec:
af:00:5c:e5:a6:a8:58:87:40:60:05:33:fa:cb:b9:
07:0f:d2:24:6a:62:92:8a:2b:53:1f:e4:06:78:93:
0c:0d:2d:ab:72:e3:30:14:25:db:2d:f8:8f:f0:82:
fc:b8:bc:eb:d3:59:ac:94:01:0f:1e:e6:36:da:20:
ba:c9:ff:f5:14:96:c1:73:9d:51:29:2b:a1:e3:08:
a0:63:6c:72:37:b9:f6:5a:8c:78:f7:5e:c6:de:8f:
ac:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FC:6D:24:95:E0:25:F9:E4:ED:C2:1F:76:15:2C:51:B6:71:07:38
X509v3 Authority Key Identifier:
keyid:8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:2a:52:5e:b8:9c:eb:59:b8:bb:af:68:ee:91:7f:00:4d:1b:
ae:ea:e0:2c:62:12:00:8f:10:a5:23:48:c5:79:3c:f9:50:4c:
69:60:a9:af:66:bd:84:21:27:a1:40:70:61:b1:aa:ab:cf:8c:
f4:56:3c:55:56:53:86:fb:52:9f:43:cc:16:2a:de:f4:e3:01:
e9:c0:b4:63:8a:65:b1:51:a3:6c:f2:d2:6f:63:37:39:58:f7:
25:6c:cc:28:6e:6e:77:23:3a:ab:94:8a:1d:29:90:43:63:a0:
5b:ee:da:c8:8d:b3:0e:aa:dd:5c:d0:0a:3d:6d:69:5c:67:a2:
b3:0c:11:2b:21:d4:97:5d:1a:66:19:38:7a:be:7a:0e:95:7b:
2f:ff:36:49:66:05:d6:e0:f7:95:1f:ee:25:bf:99:0d:1e:1c:
7e:94:77:1b:97:7e:92:14:44:f8:9c:11:57:94:88:b4:c7:b3:
e7:e3:ce:dc:37:51:df:46:c3:d0:48:8f:c9:47:9a:af:d2:b8:
9f:bd:0b:db:7d:c5:37:0c:49:a2:50:6d:e8:ab:a6:22:d0:1c:
91:6d:b7:80:71:4c:94:fe:d5:88:7e:de:93:83:19:c4:9c:50:
2b:19:52:f0:5b:ae:90:fd:86:1f:0d:d1:bc:9c:26:68:a8:71:
c4:c7:c5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:43 2025 by rpki-client