
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
File: i7i2EnIdTUwtB8v-LklemGoPAm0.mft (raw, json)
Hash identifier: NnE4Fa8WumzSk4s9O/GslKqn9aJIteohIIhWtvQ11FI=
Subject key identifier: D1:8B:F6:DD:CC:8E:BE:56:88:61:8E:CF:EE:C9:63:82:07:1E:A3:92
Authority key identifier: 8B:B8:B6:12:72:1D:4D:4C:2D:07:CB:FE:2E:49:5E:98:6A:0F:02:6D
Certificate issuer: /CN=8bb8b612721d4d4c2d07cbfe2e495e986a0f026d
Certificate serial: 0199FC590C8CD0B37164DF3EE173E086557C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
Manifest number: 06C3
Signing time: Sun 19 Oct 2025 12:01:58 +0000
Manifest this update: Sun 19 Oct 2025 12:01:58 +0000
Manifest next update: Mon 20 Oct 2025 12:01:58 +0000
Files and hashes: 1: i2xjHboexoRTpg38Qi-okoPsUcQ.roa (hash: x9dOoFm67St5fPryA+wWNLVDwzCG4EBSO5jTeQtPIqE=)
2: i7i2EnIdTUwtB8v-LklemGoPAm0.crl (hash: DkRlnEsFh+79EFMsiQOwmbnh4Jx2YGV9XQmQnvoD6Ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:0c:8c:d0:b3:71:64:df:3e:e1:73:e0:86:55:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb8b612721d4d4c2d07cbfe2e495e986a0f026d
Validity
Not Before: Oct 19 12:01:58 2025 GMT
Not After : Oct 20 12:01:58 2025 GMT
Subject: CN=d18bf6ddcc8ebe5688618ecfeec96382071ea392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2d:86:94:d3:f4:1d:67:18:90:85:70:15:ab:
6a:32:93:82:cb:22:a0:db:d0:90:1d:7c:9e:dc:9e:
6e:fd:29:70:a3:99:61:e4:4a:34:a4:c6:cc:6c:3d:
0f:f5:51:a2:9c:47:cb:b8:3b:d4:79:67:c7:34:f9:
e0:42:c6:ee:ea:e4:3a:f8:1f:f1:3e:c3:71:b1:de:
a4:70:b5:b8:8b:ab:90:9c:02:5a:ed:f2:14:67:45:
12:5b:5b:52:71:04:cf:21:7d:97:78:a8:24:18:30:
e8:c0:8f:2a:02:bf:5e:9c:cb:74:86:49:e3:66:24:
50:1e:6d:58:06:3f:b0:ac:61:ba:8c:9a:2b:62:4d:
c2:66:20:4f:8f:91:a9:c2:8e:fd:f6:d9:dd:f4:89:
a8:8f:f7:eb:40:17:80:68:9e:3b:e1:4d:d7:8c:f9:
5d:e9:8b:61:87:90:1d:86:69:9a:9e:30:49:41:c4:
01:24:ba:cc:51:0e:4e:39:d6:aa:90:ef:a7:7f:81:
94:ca:82:77:03:7f:7f:5e:5f:40:a7:1a:bd:b8:9c:
e6:01:8a:0e:5b:36:ee:63:1f:63:b4:7e:13:33:36:
38:c9:4a:61:02:bc:94:ec:a6:c8:25:03:65:d6:da:
19:e5:5d:dc:0e:e9:63:3b:d1:3c:ed:ca:bc:2c:af:
4a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8B:F6:DD:CC:8E:BE:56:88:61:8E:CF:EE:C9:63:82:07:1E:A3:92
X509v3 Authority Key Identifier:
keyid:8B:B8:B6:12:72:1D:4D:4C:2D:07:CB:FE:2E:49:5E:98:6A:0F:02:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:1d:48:76:99:5f:fa:df:93:2a:46:a5:df:fb:8d:55:59:ed:
40:13:1b:e9:cf:8c:7b:73:8e:9e:35:58:9f:cb:50:48:74:63:
f2:3c:31:df:03:01:7b:ff:3a:6d:05:e3:2b:8e:f6:58:d2:d6:
98:73:77:83:85:71:1f:5c:3c:45:97:56:a2:e1:e7:91:8d:30:
07:07:96:a6:c7:ff:a2:b4:fb:a0:29:7a:07:68:af:b1:10:0d:
fd:89:67:67:ad:0d:83:38:69:b0:1b:20:5e:d3:d5:1f:14:8d:
8f:02:81:6c:57:7e:18:94:a0:db:34:2d:58:1f:1a:a8:f5:39:
ae:2d:a0:97:72:25:37:61:37:2a:85:4e:2b:7d:61:03:16:72:
8c:12:c7:7c:14:5e:ac:3b:3d:02:45:10:f5:31:f8:51:2b:32:
94:dd:63:f8:31:a4:f1:0f:4d:f6:ab:d8:64:86:76:09:89:02:
b8:7f:ad:4d:ef:57:92:f3:b8:9b:fd:74:87:6a:a8:d9:77:49:
8f:85:32:51:f8:16:6e:35:6e:c9:0f:04:18:9a:c5:f6:ae:a6:
02:9e:ff:ed:4f:1b:1c:8b:8f:79:08:16:99:6a:bf:ac:5d:1e:
14:b8:c5:ca:56:f5:d8:e0:49:b9:43:76:05:b1:54:8c:89:bf:
7a:27:d2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:21:56 2025 by rpki-client