Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
File: IWRiyMAGWgps6vJDmFtpfPE1e_s.mft (raw, json)
Hash identifier: bqM/XSuqNLpBdlNihVD3R9pOEtwtz486P5/d5VpDylE=
Subject key identifier: 85:D4:9A:DC:14:99:36:3C:00:CE:86:08:86:2B:19:B8:1D:A8:AF:04
Authority key identifier: 21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
Certificate issuer: /CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Certificate serial: 019A71B86B15EC02A03C1DBF9C59A2CDB627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
Manifest number: 140E
Signing time: Tue 11 Nov 2025 07:01:42 +0000
Manifest this update: Tue 11 Nov 2025 07:01:42 +0000
Manifest next update: Wed 12 Nov 2025 07:01:42 +0000
Files and hashes: 1: 1-BW4odJAyxl12AYDgfFuFOqGWeE.roa (hash: qq64q7wVgL8AHerH5wdm8XW+pg0/VDQN8uM/uUKTeDM=)
2: IWRiyMAGWgps6vJDmFtpfPE1e_s.crl (hash: 7XTq6R4myd3f1KZJip73WoES6KbQDz4IXAt1PXtlOpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:6b:15:ec:02:a0:3c:1d:bf:9c:59:a2:cd:b6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Validity
Not Before: Nov 11 07:01:42 2025 GMT
Not After : Nov 12 07:01:42 2025 GMT
Subject: CN=85d49adc1499363c00ce8608862b19b81da8af04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:66:ba:fb:3f:c7:86:d5:17:53:2a:57:6e:
0b:17:af:63:97:25:d6:8e:7a:09:b1:49:a3:13:f4:
58:e4:ab:ed:f4:26:01:0c:2a:d8:e1:fc:97:74:d3:
5e:55:0f:92:00:6f:6a:73:20:a6:78:8d:42:2f:79:
53:71:e0:1b:0d:e5:2a:4d:6c:a2:d0:9a:14:1c:75:
62:e3:23:7e:d7:a3:ba:ce:5f:8b:be:b5:7d:a6:80:
66:66:8f:91:c7:ef:6f:63:84:25:14:68:1a:fe:fe:
1a:e2:d4:d4:a8:3d:8f:60:6c:19:5c:6f:a8:50:b5:
21:33:4f:06:35:1e:60:7f:c3:cf:88:81:41:15:0e:
44:95:80:9c:ec:87:3d:12:07:b5:e1:93:29:e3:0e:
22:72:87:8e:8a:2f:a2:a9:b2:62:39:8d:b5:6a:60:
00:1e:cd:4a:f7:2d:1c:c7:e1:10:7c:83:71:a3:8b:
0e:79:26:8e:4c:6d:c3:1f:96:da:30:70:d1:0f:4d:
33:be:c8:97:59:d8:75:49:a5:59:13:16:18:7f:9b:
94:85:24:18:cd:df:22:77:7e:92:fe:79:f7:f2:25:
3e:be:3f:67:18:f5:b6:97:c2:ca:70:7f:05:7d:7c:
a7:eb:f3:16:dc:e8:dd:46:b8:a0:99:8d:78:6c:3a:
f6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D4:9A:DC:14:99:36:3C:00:CE:86:08:86:2B:19:B8:1D:A8:AF:04
X509v3 Authority Key Identifier:
keyid:21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:7f:d1:a3:da:5c:29:82:30:e8:f6:de:9e:7d:aa:e5:62:3e:
81:4d:58:5e:59:eb:48:c6:b4:a5:c6:8f:a7:c2:2c:1e:ac:0d:
11:03:ff:c6:7d:e8:84:be:c4:44:35:54:86:c3:51:90:65:62:
b9:73:1a:64:93:54:2b:92:57:30:b3:61:8c:2c:15:6a:c0:36:
a3:cb:a1:44:56:24:f8:57:1d:35:e0:48:f5:2f:19:ae:4c:9e:
ce:3e:7a:89:6e:38:5d:d0:50:81:59:e5:d9:3b:04:fb:a2:1e:
fa:b7:b7:4b:21:96:6c:aa:49:f1:f4:4b:a8:6b:70:12:56:07:
7d:73:4a:dc:39:f0:6b:f6:f0:12:1e:0d:ee:56:33:26:d7:0d:
32:a8:56:cf:0a:47:2b:f0:48:64:19:e4:a3:c4:b7:8f:1d:6c:
ae:32:e5:bd:98:26:ba:5a:45:d7:b8:a3:88:fd:d0:b8:4e:87:
55:ac:c4:72:14:38:c9:25:e7:64:f8:12:6f:35:2c:54:30:cd:
7e:c5:e4:67:c9:51:12:59:76:9e:ff:6a:09:7b:45:64:80:2f:
c7:65:8d:2b:36:8b:fd:bd:a1:43:42:73:fd:d1:54:2b:91:94:
7e:38:e4:83:0c:d8:92:d6:be:69:37:a0:00:23:d5:c0:60:44:
6e:ac:59:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:47 2025 by rpki-client