Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
File: ih8K1VcrribjnIdAxoqPu0buSGQ.mft (raw, json)
Hash identifier: rj5bcRV6Oq+wbzzEIrg9uPLSW9CkH727zY4yNsn/hfA=
Subject key identifier: 61:CD:EB:84:E0:8D:B9:11:0B:99:CD:19:67:9F:90:7C:59:07:FA:C6
Authority key identifier: 8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64
Certificate issuer: /CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864
Certificate serial: 0199FB7C92F3E530EE3983C38A1591DBE6EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
Manifest number: 0A73
Signing time: Sun 19 Oct 2025 08:01:09 +0000
Manifest this update: Sun 19 Oct 2025 08:01:09 +0000
Manifest next update: Mon 20 Oct 2025 08:01:09 +0000
Files and hashes: 1: eG2Sz-NBLwpAqaii4LbUZ-cWycY.roa (hash: uPzFHNSnB/27/j7jzNn6SSjG0qijsqzpue+Zsmabwu4=)
2: ih8K1VcrribjnIdAxoqPu0buSGQ.crl (hash: a9EzIObwz6Mo0TYPyEm1e9y1L/konsgWdBa/K4Kxw/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:92:f3:e5:30:ee:39:83:c3:8a:15:91:db:e6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864
Validity
Not Before: Oct 19 08:01:09 2025 GMT
Not After : Oct 20 08:01:09 2025 GMT
Subject: CN=61cdeb84e08db9110b99cd19679f907c5907fac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1a:3a:82:30:c9:6e:3c:b6:8c:d6:36:e1:fb:
7c:5f:0b:4d:c4:03:65:94:8a:f9:08:4e:9e:8d:46:
b2:14:a3:33:a8:11:39:27:5d:93:82:d5:4f:61:1d:
41:dd:9a:56:3f:3c:9c:d2:3a:3c:55:30:36:1f:d5:
03:a0:87:ca:6f:75:4d:a5:f0:82:62:4f:c0:32:bf:
49:93:56:dc:40:94:b5:e6:85:2d:ee:51:93:76:56:
4d:d8:38:b2:20:69:dd:94:1b:e5:ab:80:b8:3b:4c:
5d:01:b8:75:7f:61:08:b2:91:57:80:ac:02:9d:db:
a6:4f:f8:37:d0:b9:c9:78:28:64:e1:d4:b4:84:2f:
9e:39:f8:5e:d8:db:28:ad:7b:e2:18:f0:76:13:7b:
6f:aa:90:6e:db:e7:03:f3:bf:69:b2:1f:40:7d:be:
aa:40:cd:5f:3d:37:60:df:01:2f:97:ad:e6:9c:cd:
47:cc:ab:9f:d2:2b:53:95:1f:50:a7:7c:7d:0f:ed:
7e:cd:aa:ab:bd:74:0a:de:19:03:20:24:7c:05:2c:
75:53:d3:e5:bd:72:33:ee:00:c1:41:f6:8c:cb:76:
f4:b8:17:8d:f9:c9:a1:c5:22:6a:6e:53:91:27:b0:
e2:90:5e:90:e0:f3:d5:6a:5e:ed:84:bc:3d:e3:2d:
8e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CD:EB:84:E0:8D:B9:11:0B:99:CD:19:67:9F:90:7C:59:07:FA:C6
X509v3 Authority Key Identifier:
keyid:8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:7e:92:c2:a1:ec:6a:ed:5c:4d:3c:9e:95:e1:7c:6b:f6:81:
60:39:08:57:a5:6f:40:6d:26:01:10:d7:58:65:79:75:2f:cb:
d5:c4:e4:08:ed:68:af:d7:a2:af:0d:5a:62:f8:df:97:12:86:
7d:de:a6:a1:e7:27:0c:26:65:20:d8:ac:c5:eb:0d:83:7f:eb:
b0:e1:21:8d:a6:17:07:01:64:44:20:9d:a5:d0:b1:94:bc:97:
2a:85:83:b5:c6:0f:1f:54:01:0d:6f:0e:ba:32:0f:8d:32:a3:
1c:ca:56:ee:cf:30:5d:79:9a:66:f9:f6:10:a4:7f:e9:1f:c6:
ef:49:c4:d7:10:b1:2e:57:1a:9b:6b:1b:0f:d9:fd:47:fa:a2:
2e:ba:b3:a2:6f:19:87:3e:0c:5b:78:54:69:aa:e4:59:df:00:
45:af:58:a0:75:53:86:14:2a:5d:55:7e:c3:ad:26:3a:4d:86:
39:4f:2d:c0:ee:b7:d9:78:d7:ff:85:76:0f:5c:7e:6f:82:f3:
71:31:39:9f:cf:6b:71:78:f1:8e:00:ee:68:dd:b8:aa:79:e0:
53:49:a5:c4:26:9a:52:50:63:3c:2f:68:79:9f:39:e2:97:80:
35:c3:e2:01:f9:99:74:ec:4d:46:c0:55:fd:7c:13:c4:1d:be:
d5:d0:c3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:21 2025 by rpki-client