Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
File: i5HgoQS1s93x9dCOessreeDVZvk.mft (raw, json)
Hash identifier: HMzOx2g+vVbV5vQxyhNCViMJH939q7LrF0eq0UX88Q0=
Subject key identifier: 06:E8:0F:8A:01:9A:9E:F3:3F:E6:B1:84:81:58:2B:C4:40:A3:11:BF
Authority key identifier: 8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
Certificate issuer: /CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Certificate serial: 0199C5D8AAAF7ED26AA74F9D98BB233E43E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
Manifest number: 10D1
Signing time: Wed 08 Oct 2025 22:02:14 +0000
Manifest this update: Wed 08 Oct 2025 22:02:14 +0000
Manifest next update: Thu 09 Oct 2025 22:02:14 +0000
Files and hashes: 1: KwomHtAHnCM0D-yGdW_0Sf3mopc.roa (hash: nJuUP0j6H239g1R7GMJyKq0zviXnK+AhK7Q4U43dyg4=)
2: ZYlcf7X6lFUqPdlZgjx7h6pY7f0.roa (hash: Z91lhusvfId6xXTKVa6gm5qmkQJNcO8M7YoIqY37LFU=)
3: i5HgoQS1s93x9dCOessreeDVZvk.crl (hash: i8KAoY6AjsT+wdbGDnfRWTC+6yDePJUaS3E5wg5PRM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:d8:aa:af:7e:d2:6a:a7:4f:9d:98:bb:23:3e:43:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Validity
Not Before: Oct 8 22:02:14 2025 GMT
Not After : Oct 9 22:02:14 2025 GMT
Subject: CN=06e80f8a019a9ef33fe6b18481582bc440a311bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:18:e9:bc:ab:ef:72:31:a8:34:76:5b:c7:8a:
80:fd:05:db:99:fd:ed:24:5e:90:11:66:4b:97:2a:
80:e9:9d:c3:8e:f6:94:1d:8a:56:b6:32:eb:ad:1f:
44:44:03:28:4e:eb:7a:34:67:8b:e3:49:79:98:9b:
99:0f:9e:7b:8f:ff:ed:77:83:29:34:79:25:b6:9d:
4c:1e:13:15:2c:65:9f:1f:a5:c1:2e:60:32:97:5b:
61:6e:62:e2:63:1f:9e:e7:97:81:4f:20:cd:5a:55:
82:23:d3:c4:7a:66:e0:0d:39:d2:93:ea:62:c3:1f:
0d:58:b8:ae:48:78:2e:3f:ef:87:b9:cd:a2:e7:d4:
87:74:a3:5d:e2:c6:93:1f:da:7e:7c:8e:1e:8a:b8:
47:66:26:b8:ce:02:2c:25:2c:63:6c:51:95:e9:30:
b1:6c:88:80:43:2c:c5:38:b6:55:ff:61:cd:b0:2c:
41:bc:cf:77:ef:a5:b4:8a:ad:43:92:cc:fe:b0:29:
ac:a7:69:6f:08:58:4c:f4:78:2b:a0:54:d0:a8:21:
25:ce:01:62:3f:fd:4b:2e:94:27:85:b3:da:c6:90:
23:8c:53:8b:11:29:77:3c:23:c8:00:2c:45:fb:68:
7e:34:14:4e:4d:f6:ac:c6:6a:0a:24:27:3b:91:88:
4a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E8:0F:8A:01:9A:9E:F3:3F:E6:B1:84:81:58:2B:C4:40:A3:11:BF
X509v3 Authority Key Identifier:
keyid:8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:20:7a:56:01:1a:e2:61:07:7e:c8:6f:c5:cb:3a:d7:9c:53:
4d:de:4f:f7:ea:ca:d7:18:59:bf:4c:ca:ce:db:bc:ab:72:14:
9b:eb:1b:89:45:c4:be:5a:e2:f6:53:df:07:1c:ab:40:9f:a7:
0d:5d:65:3f:fe:03:4d:40:8e:27:04:23:f7:73:8c:30:24:58:
f2:0f:06:47:9f:e6:dd:cf:2f:3c:92:fa:dc:0a:f6:b8:11:03:
c6:5d:5b:bd:31:26:68:e5:c4:ef:f2:ea:83:95:d4:5b:a4:74:
54:09:5a:d3:33:5b:bc:fa:6d:95:c4:e6:57:79:4d:b2:f4:8b:
ef:96:48:44:cf:1e:b4:d1:70:27:cf:86:ab:a6:99:7b:05:ea:
d0:b2:b7:8d:97:6f:99:bf:c4:85:bc:b8:d7:4a:04:e5:30:6e:
68:bd:d0:2b:1a:3b:19:1e:30:2d:78:53:6e:81:5b:25:4f:c7:
52:e9:6d:e6:26:44:d1:47:48:74:af:eb:62:6a:81:17:d6:d0:
b1:d4:51:20:62:a0:da:fd:d0:3e:07:e0:43:f4:50:ab:ad:fc:
31:c4:9a:3d:6b:45:99:fb:ca:54:8d:03:dd:e9:01:5a:c8:07:
92:65:a5:24:30:34:b0:fe:d5:c5:87:e7:19:a3:7f:8e:dd:3b:
80:97:7c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:33:45 2025 by rpki-client