Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
File: ip_Szd9LRN55pb_Iyhmlb1UutOg.mft (raw, json)
Hash identifier: hILSDfjsCyJd7iKPYZZCz/J7IxBU9voj1ROi5ZTkJtk=
Subject key identifier: 42:D8:61:3F:E1:C9:4D:F3:BE:B7:6C:7E:0E:5D:E9:F2:E1:B9:EE:F4
Authority key identifier: 8A:9F:D2:CD:DF:4B:44:DE:79:A5:BF:C8:CA:19:A5:6F:55:2E:B4:E8
Certificate issuer: /CN=8a9fd2cddf4b44de79a5bfc8ca19a56f552eb4e8
Certificate serial: 019A71EEBD660BF4606FFCEA477632399B58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
Manifest number: 03BA
Signing time: Tue 11 Nov 2025 08:01:02 +0000
Manifest this update: Tue 11 Nov 2025 08:01:02 +0000
Manifest next update: Wed 12 Nov 2025 08:01:02 +0000
Files and hashes: 1: EjHQSd2Nf6QUdVOjBa5Ak5N3IUs.roa (hash: 9F79YDrAyrZr3jGxVCvlmn8UnHKM3CvRjuESh5xZJzI=)
2: ip_Szd9LRN55pb_Iyhmlb1UutOg.crl (hash: 02tT9ULXJBfOZdpS0tXnNJ6JNqZ8ZwtZnusIPRtu9Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:bd:66:0b:f4:60:6f:fc:ea:47:76:32:39:9b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9fd2cddf4b44de79a5bfc8ca19a56f552eb4e8
Validity
Not Before: Nov 11 08:01:02 2025 GMT
Not After : Nov 12 08:01:02 2025 GMT
Subject: CN=42d8613fe1c94df3beb76c7e0e5de9f2e1b9eef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f7:dd:c9:7c:d6:6f:f5:27:4f:99:7c:49:6c:
04:7e:62:64:96:19:d4:f0:0d:e7:e9:db:0a:87:e5:
93:58:05:1e:7f:7a:a5:c9:09:03:fb:80:5e:fb:54:
6f:e2:ed:71:3b:6b:b9:20:3b:44:57:f3:c8:2b:2c:
80:4c:5c:b5:45:ac:12:ce:6b:40:ec:80:a6:24:67:
9d:d7:82:5f:94:4c:df:bc:15:78:b8:7a:83:c8:77:
52:cc:10:9b:9a:68:55:bf:59:6f:4b:37:ad:4a:4e:
d1:90:12:52:95:a7:7b:a8:13:48:9f:03:db:e8:69:
de:63:58:95:52:f4:ac:f3:66:e2:f2:ed:02:48:db:
7d:76:a7:26:d2:fa:6c:9a:05:74:f3:1d:64:5b:e5:
69:fc:40:fc:06:50:70:a4:e2:c9:1b:51:6e:9a:da:
10:8b:c2:1d:92:bd:a6:21:79:4c:89:f0:bd:02:f4:
32:ee:25:1c:fe:0e:ad:7d:62:47:ad:ac:27:ff:7a:
0d:ee:5c:06:38:18:f4:76:14:be:3e:c3:4a:8f:b3:
91:02:d6:28:8b:6d:a7:03:19:12:48:2e:c9:e4:a8:
48:f4:46:0f:8d:2e:47:2a:11:76:19:e6:c8:8e:8a:
aa:81:fd:2f:da:7e:e0:9b:c5:11:30:63:cc:f9:f4:
8a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D8:61:3F:E1:C9:4D:F3:BE:B7:6C:7E:0E:5D:E9:F2:E1:B9:EE:F4
X509v3 Authority Key Identifier:
keyid:8A:9F:D2:CD:DF:4B:44:DE:79:A5:BF:C8:CA:19:A5:6F:55:2E:B4:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e5:ac:be:1a:36:2e:12:5f:22:81:f8:73:3a:da:ca:72:05:
ab:89:f0:e7:f4:45:bd:85:30:8d:33:8e:46:04:01:ae:40:9b:
e9:b8:5f:c6:62:23:86:03:ce:ea:50:1a:1d:1e:af:db:4f:a3:
93:c7:27:bf:87:b3:df:ca:2a:46:de:62:9e:5b:80:d8:1a:f0:
84:d5:89:11:02:b2:f5:53:ce:90:24:78:78:2f:64:3e:36:84:
52:da:5e:9a:27:96:c2:0a:88:e1:ad:08:f9:aa:13:15:b9:3b:
50:70:2c:5c:3c:34:bb:16:ee:ad:5d:82:5b:89:c9:b0:d6:41:
fa:c3:1b:f8:78:a0:83:30:52:d3:da:ac:fc:fd:fd:65:91:ee:
0f:fe:0b:a3:52:e9:44:77:58:13:1a:68:80:35:ea:02:ff:4a:
e4:d4:20:10:24:8b:60:84:b3:49:44:ae:ff:db:a1:0d:d6:02:
8b:a4:49:e9:b0:d8:94:73:d6:bc:fd:e9:37:8e:eb:5b:1b:eb:
ff:37:f6:f0:fe:17:72:7b:b9:7b:42:7c:8f:19:e1:11:6d:4a:
7b:8f:f6:13:68:f6:76:c1:a8:28:7a:b8:92:7b:ed:b8:f9:5c:
29:6e:b8:95:70:55:95:22:d1:73:ca:5c:09:9b:d7:56:a5:e5:
d0:48:da:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:46 2025 by rpki-client