Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
File: iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft (raw, json)
Hash identifier: Ad14rQ0EnYtCJM7iX6Erwu6bu6fMkDXR/ehZjsimMbk=
Subject key identifier: 01:B0:AD:2F:50:C2:22:83:80:09:07:63:87:7D:41:A0:11:58:6B:14
Authority key identifier: 8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00
Certificate issuer: /CN=8aad9c0ce5ba3905b41970a04e51976076c67e00
Certificate serial: 0199C5D8BF86C4DF5126644E922CACC4FB70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
Manifest number: 0A25
Signing time: Wed 08 Oct 2025 22:02:20 +0000
Manifest this update: Wed 08 Oct 2025 22:02:20 +0000
Manifest next update: Thu 09 Oct 2025 22:02:20 +0000
Files and hashes: 1: 2N-Ad_PjuCdbWMhOkKca0e_4aH4.roa (hash: mX5PwA+5z3mRrepVsPYas6Uu6jFtb6sejxlwArRN7qw=)
2: 9qSGcGsaAT-Orj-BviLbbFBnobc.roa (hash: KGQdMGZUYXqZM3Cup0R+gwjVZv7t7VL1nDYpfpe2mMo=)
3: C6v3z8kGbpGtAYhEGvbIA9POeJ4.roa (hash: dVnxKmSOxpULCnBph8ARAXzts2lzvI7njmrNqMweylU=)
4: Q3cz4EEEExax1nv4wtLZZPPEgSk.roa (hash: ML1oxtfPutOEqYHFMGiG3+QvRpl8345MdKNoHGmCBSQ=)
5: iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl (hash: /5oT36RbVlMOTmU4rMu6NHt8GHCaPQiV0Z1Mmjhed6I=)
6: raR6qfZ5L-9hzvpYVK9us-1wIug.roa (hash: ARfa5iwtjYV/gUtHJTALBEg3MfK/IBejlaZvsXofCl8=)
7: tBuToTypjDQ6u5RK5DBD-fEJHi4.roa (hash: iFrIeR1iIdBgXE0Q5UKDG34iIF6/jJkNwFYF+l/o72M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:d8:bf:86:c4:df:51:26:64:4e:92:2c:ac:c4:fb:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aad9c0ce5ba3905b41970a04e51976076c67e00
Validity
Not Before: Oct 8 22:02:20 2025 GMT
Not After : Oct 9 22:02:20 2025 GMT
Subject: CN=01b0ad2f50c2228380090763877d41a011586b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7b:d6:1d:df:16:c0:b5:a3:b5:4f:7a:57:39:
d7:d5:3d:cc:11:ef:c1:b1:ff:bf:22:5f:39:df:63:
b4:8f:9c:76:39:4d:bc:1b:0b:2b:c3:2d:9e:49:fb:
df:68:e5:fd:08:7a:b0:38:78:cf:20:e6:76:d0:c8:
55:a8:4b:ff:6e:7e:1c:1d:9b:47:11:ec:bf:39:60:
9c:47:a8:00:14:65:c2:72:fe:ab:15:9b:8e:b0:f4:
1e:9a:b9:33:0c:b3:13:ed:59:44:e9:27:df:e0:e6:
4c:02:61:6c:39:76:a0:d4:3e:12:7d:d4:fb:f0:16:
06:98:4a:b6:5a:e0:1a:10:6f:f2:26:96:38:22:2d:
ef:9c:da:7f:3c:37:f6:6c:a4:38:59:8d:0f:de:9a:
ce:fd:2d:3a:00:87:43:d4:41:b5:82:a8:16:00:be:
97:46:10:18:d1:f5:56:09:68:5a:92:60:bb:94:41:
8c:7a:24:10:0e:bf:42:52:b4:80:51:ea:c8:4b:25:
3e:77:35:fa:f6:2d:8b:69:f0:b2:ce:dc:9a:43:ec:
82:ee:d0:56:5a:3f:ed:08:5a:32:ef:41:e5:3f:92:
87:25:d7:ab:62:70:7b:59:ba:2a:6e:de:7a:0b:00:
2e:a3:cd:8e:aa:e0:a6:48:b7:68:40:d5:03:e2:a6:
80:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B0:AD:2F:50:C2:22:83:80:09:07:63:87:7D:41:A0:11:58:6B:14
X509v3 Authority Key Identifier:
keyid:8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:39:ff:c9:5c:ec:aa:79:80:d0:7e:13:98:be:fa:8c:e8:c9:
5c:90:41:ec:eb:0e:b9:7b:98:40:76:64:c9:54:cd:32:95:c5:
a1:fe:08:b7:30:d1:3a:d5:ec:3e:b3:97:0c:b0:b6:58:8d:74:
70:95:60:30:e3:01:f6:29:e4:db:0b:c9:33:37:9e:29:5c:28:
47:6d:d2:46:1a:c8:bf:58:27:be:8c:c9:89:c3:0c:89:8d:48:
e7:00:f2:2a:73:7a:de:d6:c3:e5:9d:30:0d:7a:7f:b2:2e:9a:
81:37:be:9f:ea:94:ad:cb:e1:2a:c6:26:df:9d:ac:83:61:00:
0c:43:08:80:39:7d:a6:56:c1:b4:1d:84:73:24:90:73:49:63:
42:ea:8c:aa:18:ab:a5:08:d9:05:50:87:f7:02:a9:0c:af:4d:
af:bc:ac:84:df:11:99:9d:5c:c3:20:89:39:9d:70:54:65:d6:
97:c3:4b:64:b7:ae:89:7d:49:89:2f:60:0d:8c:56:92:7c:37:
a5:bf:48:f9:eb:64:cf:ec:ba:81:56:6d:cf:5d:92:9b:aa:91:
71:0f:ec:c2:1e:93:f1:76:ae:53:f7:fe:0a:72:63:b6:85:56:
6a:60:64:a7:40:a6:2a:0a:77:4f:40:17:bf:fe:f4:ec:a4:3c:
b9:d8:7d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:14:40 2025 by rpki-client