Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.mft
File: IYOyVqIVtNb-JhfRJitji_p9bUA.mft (raw, json)
Hash identifier: lMGYe6okkFr7xhlaw1rmcECt4OIXobenAG9tWq5aqDs=
Subject key identifier: BE:D5:2E:CA:6B:15:AF:12:EE:8A:08:9D:6B:7B:46:BB:BD:1D:A3:49
Authority key identifier: 21:83:B2:56:A2:15:B4:D6:FE:26:17:D1:26:2B:63:8B:FA:7D:6D:40
Certificate issuer: /CN=2183b256a215b4d6fe2617d1262b638bfa7d6d40
Certificate serial: 019A71EEA11FA20C687654696CEB90E0B79D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYOyVqIVtNb-JhfRJitji_p9bUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.mft
Manifest number: 010B
Signing time: Tue 11 Nov 2025 08:00:55 +0000
Manifest this update: Tue 11 Nov 2025 08:00:55 +0000
Manifest next update: Wed 12 Nov 2025 08:00:55 +0000
Files and hashes: 1: 44WqLxBoNN2QK30ATokBgtKLkeI.roa (hash: r1vcmWXJ0IlZk5aHbff1XD3Hg2Mieqe53U03waIk5x4=)
2: IYOyVqIVtNb-JhfRJitji_p9bUA.crl (hash: Y0S82AajV2G8dyOHmHnEBO/AaQKSYIJC9Vz9OFZLQk8=)
3: RQGn1IVlE_4Qq709uXK_6OsLiXk.roa (hash: P0lwWTGt3C2Kl+U7DDbrCt9t+ME/jcoeCzRbUtSo834=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYOyVqIVtNb-JhfRJitji_p9bUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a1:1f:a2:0c:68:76:54:69:6c:eb:90:e0:b7:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2183b256a215b4d6fe2617d1262b638bfa7d6d40
Validity
Not Before: Nov 11 08:00:55 2025 GMT
Not After : Nov 12 08:00:55 2025 GMT
Subject: CN=bed52eca6b15af12ee8a089d6b7b46bbbd1da349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7e:f0:72:d8:33:48:e3:80:0e:cf:35:d6:9c:
57:f2:ba:98:5a:46:8b:a3:f2:bb:1c:ae:b5:43:5c:
cc:79:9c:e7:42:9c:8f:38:b2:dd:c0:8e:93:cf:4b:
f9:7a:ee:bd:16:15:06:a0:04:ea:94:ae:77:36:6c:
c3:d5:ab:e6:92:23:6a:0a:92:40:00:de:f4:27:0d:
7e:95:d0:27:72:e3:2f:9c:24:1a:92:29:1c:44:8b:
81:88:19:86:d2:ab:f2:cd:da:aa:e1:23:98:e2:0b:
27:da:aa:05:3f:e0:62:a8:e1:7d:d5:28:88:17:65:
ed:cf:ed:18:24:36:57:b6:1d:d0:cf:bb:78:04:01:
c6:55:39:07:da:9f:09:54:2a:46:3d:be:64:33:8c:
ec:aa:2a:e9:93:73:8c:c7:b4:9a:bb:22:1d:dd:2a:
66:3c:c7:0d:21:a8:58:25:5b:e6:17:96:3c:2e:a3:
16:98:0a:79:72:b7:4a:ec:fb:82:1b:21:46:f8:86:
19:9b:42:fe:a5:d1:90:e3:75:fe:84:82:44:85:14:
eb:3f:7e:21:c7:9f:cc:65:ea:68:6a:5b:37:b5:3e:
44:9b:22:3d:e3:df:59:00:81:ff:7d:cd:ad:8a:c0:
bb:fd:3c:2e:18:4b:92:18:6c:49:11:9d:69:c5:5d:
02:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D5:2E:CA:6B:15:AF:12:EE:8A:08:9D:6B:7B:46:BB:BD:1D:A3:49
X509v3 Authority Key Identifier:
keyid:21:83:B2:56:A2:15:B4:D6:FE:26:17:D1:26:2B:63:8B:FA:7D:6D:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYOyVqIVtNb-JhfRJitji_p9bUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:1c:30:70:38:48:3e:d3:57:2c:51:e5:a3:00:02:26:e3:7a:
77:a8:1b:bd:8d:af:8d:f1:86:43:af:46:6f:dd:e3:c4:01:8c:
ec:b8:f7:a5:85:e6:11:4c:91:e2:cd:46:09:62:2d:27:3f:c8:
50:e2:35:2e:aa:f8:2c:0a:83:a3:05:3d:4e:96:ed:97:30:78:
b0:dd:c1:6d:1f:8d:29:9e:d3:95:4b:5f:da:3c:cc:af:7b:a2:
b8:d3:07:da:96:05:ca:f5:35:41:4c:89:a5:f1:56:53:0b:86:
8d:36:66:c5:13:6b:e1:d2:29:10:92:fc:46:38:5d:31:93:b1:
2a:38:77:6e:41:4d:9d:ad:ed:99:13:25:61:7d:34:62:98:16:
cb:e4:d6:44:14:63:84:72:01:80:e5:1b:b3:7d:83:2b:1a:96:
29:50:fe:03:2a:c8:1f:80:e6:f1:14:de:7c:b3:2b:47:21:89:
a5:84:02:2a:ca:9b:0a:96:21:76:0f:40:23:88:65:5c:3d:56:
9c:d8:30:2b:46:6f:4c:a6:fd:8a:8e:8c:6d:6a:a6:7e:80:0c:
6b:b6:37:15:38:95:8e:91:9f:ed:0f:83:9a:48:de:d5:16:fd:
cc:16:41:26:83:19:ff:b0:81:ef:e3:40:92:f7:4d:ca:26:cd:
fd:1d:24:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:15 2025 by rpki-client