Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
File: hI2YANad664Rt_gWHDzogYH957Q.mft (raw, json)
Hash identifier: 04RqOVmKmKPTxmLHpOXcf/HeyhXnf5C2sRmgmTM0wE0=
Subject key identifier: 68:35:16:97:BE:55:71:DE:61:C4:72:7A:49:DD:DA:9B:88:C4:92:C4
Authority key identifier: 84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
Certificate issuer: /CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Certificate serial: 0199FCC6B1D854E9F30F0C2883E95C299290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
Manifest number: 0ADB
Signing time: Sun 19 Oct 2025 14:01:44 +0000
Manifest this update: Sun 19 Oct 2025 14:01:44 +0000
Manifest next update: Mon 20 Oct 2025 14:01:44 +0000
Files and hashes: 1: Pi13Jn_f8QNwlYweA6cENA4uaSs.roa (hash: UZD7c+7NUs2opXS6uWJEcxhLpAXCSZYdWwe68q1uABI=)
2: hI2YANad664Rt_gWHDzogYH957Q.crl (hash: Es7MZoW5gI0hAqFtWXKtQK9xbjBV+8MIKh7u3QhmNZE=)
3: kSeV1NXuoW2kMAhRuEJXNL0G3J8.roa (hash: BCpFIjkEeCfOQHY9iAYyAPzCmQqEp82NEt+xGk7yxzQ=)
4: sXoE76O0g9HbvTQdsrTuLQ6BEGY.roa (hash: 2c9XhIaXdBcwGvuorQuJKcEG+b0v5OcuRLvlracJLGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:b1:d8:54:e9:f3:0f:0c:28:83:e9:5c:29:92:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Validity
Not Before: Oct 19 14:01:44 2025 GMT
Not After : Oct 20 14:01:44 2025 GMT
Subject: CN=68351697be5571de61c4727a49ddda9b88c492c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:45:ae:d2:44:e4:f9:d0:fb:db:6e:fe:e8:51:
61:ba:35:76:92:f6:c0:b8:3d:a6:14:a5:cb:46:ee:
4e:11:ca:05:83:2c:dc:e5:cc:8a:f3:c0:60:77:02:
4b:38:b1:b9:e3:d6:19:1e:f3:3f:65:bc:a4:eb:a3:
62:c8:76:be:79:1d:65:6b:3f:dc:2e:2b:f1:d8:56:
39:16:7d:ae:91:81:68:91:63:54:9a:b1:91:35:3c:
d8:3c:ad:e6:b5:41:4b:a1:2c:cc:4d:71:e5:72:8d:
04:46:1b:ee:18:1b:c0:a5:e8:55:9c:63:24:0c:d5:
b5:f4:bb:7c:65:8b:47:9e:ac:2e:ec:38:cc:10:19:
8f:5e:36:12:58:43:4d:30:ff:57:2b:1e:99:69:10:
8c:28:3c:62:68:1a:e1:e7:a1:8d:b1:c1:c3:c2:ca:
fa:09:4c:a6:eb:8a:05:20:df:be:d2:6c:63:04:91:
55:00:7c:2c:40:93:20:f1:83:b1:40:14:9d:42:10:
8f:7e:45:ab:2a:87:63:cd:2b:4f:f8:7a:95:0b:aa:
d4:b3:29:e1:c5:41:6c:95:a4:ad:34:33:91:b9:ec:
b8:36:51:04:2f:eb:9d:73:0f:7c:23:32:d4:de:15:
87:65:40:71:90:10:4f:de:9a:bb:0e:33:2d:bd:5e:
9d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:35:16:97:BE:55:71:DE:61:C4:72:7A:49:DD:DA:9B:88:C4:92:C4
X509v3 Authority Key Identifier:
keyid:84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:77:e0:63:bc:dd:76:f7:9d:6c:60:48:d0:bc:e7:1d:fa:7e:
97:c0:3f:5f:fe:91:f1:ab:d0:66:fa:3a:32:be:c4:5c:b3:4b:
bd:10:f9:e8:c0:02:92:e3:e1:d4:a0:17:d5:b0:4d:ad:bf:ef:
c1:bc:52:67:86:42:46:3a:fc:96:a0:29:32:a3:a6:64:e0:4f:
e3:ed:46:40:e0:30:c6:b6:d8:44:99:c3:cc:b1:b4:a1:4d:82:
07:3b:21:69:f5:b4:53:24:d4:92:57:98:4e:fa:2a:fc:c0:04:
25:15:4b:bb:00:a9:01:be:d4:be:b1:78:6a:f9:c1:7e:05:8c:
48:5d:09:fd:c8:c4:64:c5:f5:d0:0a:47:c7:8b:41:2f:35:e5:
7a:4d:f1:e7:54:2c:70:26:24:19:40:23:cd:81:5c:af:96:3a:
8f:94:57:93:27:25:24:2a:32:ef:af:c2:e4:02:93:df:09:9a:
ba:c7:0f:50:63:a5:84:fc:69:b8:e2:f2:6d:fb:95:49:cc:ab:
59:0e:56:60:80:2a:12:16:be:d1:ee:40:5d:e1:13:ab:b2:7e:
e1:99:cd:43:c5:23:66:ec:c3:35:de:1c:11:91:dc:3e:85:f2:
83:c4:cd:17:21:1b:87:e4:b0:12:14:02:b7:ad:12:70:e2:90:
31:6b:ee:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:39 2025 by rpki-client