Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.mft
File: IYOyVqIVtNb-JhfRJitji_p9bUA.mft (raw, json)
Hash identifier: hxZyWQ6ujc3EkYvW1mlE1jAe/gGIxnQU0xLPtJjL6TQ=
Subject key identifier: 45:48:E3:6F:A1:FA:0E:4B:91:AE:C3:60:FB:F0:31:BE:E1:F5:62:49
Authority key identifier: 21:83:B2:56:A2:15:B4:D6:FE:26:17:D1:26:2B:63:8B:FA:7D:6D:40
Certificate issuer: /CN=2183b256a215b4d6fe2617d1262b638bfa7d6d40
Certificate serial: 019923D5E258B1A2F0F8EB8DBDEDB321243E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYOyVqIVtNb-JhfRJitji_p9bUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.mft
Manifest number: 5E
Signing time: Sun 07 Sep 2025 11:00:43 +0000
Manifest this update: Sun 07 Sep 2025 11:00:43 +0000
Manifest next update: Mon 08 Sep 2025 11:00:43 +0000
Files and hashes: 1: 44WqLxBoNN2QK30ATokBgtKLkeI.roa (hash: r1vcmWXJ0IlZk5aHbff1XD3Hg2Mieqe53U03waIk5x4=)
2: IYOyVqIVtNb-JhfRJitji_p9bUA.crl (hash: EMKla8Rzf2LmXX5hxnxlqH055lO2kL5ERsez3iHfeEE=)
3: RQGn1IVlE_4Qq709uXK_6OsLiXk.roa (hash: P0lwWTGt3C2Kl+U7DDbrCt9t+ME/jcoeCzRbUtSo834=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYOyVqIVtNb-JhfRJitji_p9bUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:e2:58:b1:a2:f0:f8:eb:8d:bd:ed:b3:21:24:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2183b256a215b4d6fe2617d1262b638bfa7d6d40
Validity
Not Before: Sep 7 11:00:43 2025 GMT
Not After : Sep 8 11:00:43 2025 GMT
Subject: CN=4548e36fa1fa0e4b91aec360fbf031bee1f56249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ab:81:40:e3:33:3b:36:b2:be:01:06:07:5c:
59:76:d5:b2:78:c8:c2:be:b4:07:cd:14:12:14:08:
31:5a:16:7f:73:4a:c1:6e:b5:04:78:e9:19:ef:2e:
98:5f:6e:3a:12:10:94:26:0e:71:8e:e2:f0:93:d0:
8f:94:11:39:fb:03:ae:ad:7d:a7:34:1b:f1:4c:cd:
f5:54:f7:6e:d7:0a:59:6d:0d:ca:48:a9:d9:75:83:
ec:50:da:3e:5d:4b:81:75:f7:31:51:d1:88:5a:e6:
19:79:ae:72:42:1d:f6:09:8b:7b:56:be:c9:95:1b:
c3:8c:25:78:ae:ef:9b:00:05:64:e4:8a:af:c8:4d:
16:bd:85:f3:59:10:dd:af:7a:ab:e2:1e:7e:c4:f0:
d5:07:ec:55:8d:c7:bd:0d:0c:78:a7:c6:0a:c4:13:
4e:13:a3:6c:94:43:44:e6:a8:58:8e:dd:35:d4:d9:
61:56:36:13:77:b7:23:79:55:37:03:39:95:05:6a:
aa:87:6e:45:c2:ba:9c:ec:d5:57:2e:2d:7a:62:79:
0d:5a:93:2c:fc:4f:17:0d:e1:fe:93:b0:3d:68:70:
84:91:77:ee:55:58:59:a8:ec:61:4b:36:3b:cb:2c:
e1:ef:81:90:70:25:d4:59:99:67:f0:95:32:48:b7:
44:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:48:E3:6F:A1:FA:0E:4B:91:AE:C3:60:FB:F0:31:BE:E1:F5:62:49
X509v3 Authority Key Identifier:
keyid:21:83:B2:56:A2:15:B4:D6:FE:26:17:D1:26:2B:63:8B:FA:7D:6D:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYOyVqIVtNb-JhfRJitji_p9bUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:08:6c:39:2a:5f:af:e1:3d:1a:7b:02:22:f3:4a:c4:16:39:
bf:19:09:b1:4c:7e:7d:61:44:65:71:17:34:b6:3e:8c:0b:36:
6c:12:b1:cf:39:3f:79:08:44:57:bf:d3:c6:19:95:36:aa:7b:
8d:a6:ae:b3:50:29:85:49:2d:04:71:6b:4e:38:99:6e:1d:72:
96:24:ce:e6:67:66:76:ce:30:2e:58:54:ad:a9:b6:bf:65:41:
77:29:a8:ef:6b:50:11:01:97:24:ba:71:e4:2a:08:b0:1f:27:
80:8a:20:c5:fd:2e:43:26:5b:3d:06:bc:70:17:52:1a:1e:70:
88:82:84:e8:84:08:b3:83:f9:f4:ab:ea:24:14:aa:5d:4f:49:
3d:65:c9:e1:f2:8e:92:38:52:05:52:fd:5e:bc:60:8a:21:28:
21:e8:93:3c:81:02:9d:33:22:16:27:ec:d5:a9:c4:15:e5:fc:
57:75:44:d9:40:5a:a6:d1:ac:f6:90:23:9b:c9:dd:b9:35:88:
29:d4:24:17:54:80:83:e7:83:a6:51:a4:1b:ee:26:99:ab:f6:
9c:b1:4a:6d:55:5a:9c:26:ec:14:0d:b3:16:56:83:6d:60:fa:
08:df:77:d3:f9:6c:d8:cf:0d:48:5b:21:92:c3:74:4f:6d:2f:
a4:59:85:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:47 2025 by rpki-client