Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
File: IW66tPRvJU2V9JZbhKjPJBlrnJU.mft (raw, json)
Hash identifier: WCv9CHDm2WzFCn6j0TYVHE1SkZzyE4f7GDDuxR+iiXY=
Subject key identifier: DD:8F:D9:C3:88:8E:3C:C3:DD:E2:DB:10:E3:4C:BB:2E:75:0F:42:E6
Authority key identifier: 21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95
Certificate issuer: /CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
Certificate serial: 0199C56986A856AF6E8FC11CB3F3F73DA04F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
Manifest number: 05DF
Signing time: Wed 08 Oct 2025 20:00:51 +0000
Manifest this update: Wed 08 Oct 2025 20:00:51 +0000
Manifest next update: Thu 09 Oct 2025 20:00:51 +0000
Files and hashes: 1: IW66tPRvJU2V9JZbhKjPJBlrnJU.crl (hash: 8aVph7MfXCNiMWZv+1F6NSRNQEQ9GejlOtPT9k8LGLE=)
2: jevuz_hOgaa6W3MBuj-Sool4n-A.roa (hash: US9acN1N+sUj9TGOZu9sAfJQOkLuvKlT0/RKaeqAgXI=)
3: luM_lJTE2hly8-J3vWjwvVwVcis.roa (hash: GZ+X8TMn7AtOBR08KIlVoGK4dcs2JQzhXXW1m64U66U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:69:86:a8:56:af:6e:8f:c1:1c:b3:f3:f7:3d:a0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
Validity
Not Before: Oct 8 20:00:51 2025 GMT
Not After : Oct 9 20:00:51 2025 GMT
Subject: CN=dd8fd9c3888e3cc3dde2db10e34cbb2e750f42e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6f:33:80:a3:df:55:f4:81:ce:f7:f1:81:5b:
94:e0:6a:93:9e:0a:6b:d1:63:21:61:ba:6b:9a:7b:
c7:d5:24:d7:cf:81:f0:fc:7f:cc:36:2f:c5:31:49:
69:9b:f6:e1:81:55:0f:8d:ef:16:c4:b1:3c:a2:5d:
ec:dc:c5:36:74:fa:a0:67:9d:18:e2:d7:99:00:f8:
f2:13:af:66:51:ed:ca:6e:33:21:8d:0b:90:f1:ac:
a4:df:9a:79:1c:23:a1:49:ac:48:53:7b:02:46:e1:
ad:0f:90:52:5e:92:dc:0d:81:96:e9:39:ec:bc:9c:
0b:01:16:c8:ac:cb:bd:79:4b:02:92:8e:9b:16:54:
de:ad:46:a9:8c:5b:4d:74:f7:35:da:98:6f:86:ec:
cd:95:d8:dc:9c:e3:e8:4c:b4:c0:fd:4d:ab:2a:7a:
7c:96:ed:d8:a8:f6:a2:08:3c:9a:99:ea:bd:6a:41:
1b:b8:8c:3f:d5:20:75:5f:c9:06:ff:a4:18:a6:79:
c3:73:f0:82:84:f6:33:89:70:f8:50:01:ab:29:6b:
c9:21:39:11:1b:cf:a6:50:86:27:2a:e8:b0:a6:46:
3c:4c:0b:84:20:44:fd:40:cf:32:af:d0:6f:cc:91:
20:ed:cb:5b:b4:8d:65:2a:cb:ca:d4:61:b6:b7:0b:
04:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8F:D9:C3:88:8E:3C:C3:DD:E2:DB:10:E3:4C:BB:2E:75:0F:42:E6
X509v3 Authority Key Identifier:
keyid:21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a5:fe:8a:56:23:66:e5:37:f0:c7:92:91:ce:82:88:da:8b:
74:55:e4:28:2c:e0:6c:05:6a:db:41:be:e0:a3:ee:d8:16:0d:
dc:93:5d:45:ba:90:a2:25:33:7c:d2:5d:a5:f6:b1:94:b9:cc:
89:a6:da:ba:d1:2f:78:84:84:8f:92:44:e9:16:2d:89:91:e8:
dc:71:be:44:4f:ca:4b:8d:d7:39:12:eb:38:17:54:a6:30:f2:
9c:4c:f0:5e:c8:b8:3b:c2:b2:63:dc:d4:61:d0:45:57:69:d4:
ff:2b:72:8d:46:a3:6d:8f:e1:b6:f6:a3:68:2e:90:80:f7:5a:
ca:31:da:48:c1:50:3e:1e:23:8b:5e:6d:a6:4e:fd:c7:e5:1d:
cc:38:dd:62:e4:88:7b:95:06:f7:1b:4a:7b:87:ac:53:d7:bf:
05:57:7d:f3:a4:81:81:65:80:af:dc:73:87:60:6d:e6:5f:15:
b2:33:34:64:c3:81:8f:4e:77:2a:1c:85:56:39:30:4d:21:40:
d7:23:04:f3:e5:bd:9a:33:45:57:b1:ef:eb:65:3a:a0:df:39:
e8:22:00:72:be:31:41:20:b8:ba:c9:49:18:8e:71:85:09:cf:
39:c5:91:0a:85:3a:56:e5:69:0f:03:c5:3a:0a:42:04:38:b1:
ac:a0:3e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:51:15 2025 by rpki-client