Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
File: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft (raw, json)
Hash identifier: UgO7G/TRQUIATrZli96BuRXY9xGqBz1ZaQZjoUWNNBw=
Subject key identifier: B7:5C:05:0F:A5:70:DD:67:1E:C0:93:47:B0:27:40:2B:CB:65:D3:31
Authority key identifier: 89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
Certificate issuer: /CN=8986e25683302c38270d0f90c4aad1519393d545
Certificate serial: 019A2855C5B9EC5DD20B631ACDEE0E25D233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
Manifest number: 130B
Signing time: Tue 28 Oct 2025 01:01:40 +0000
Manifest this update: Tue 28 Oct 2025 01:01:40 +0000
Manifest next update: Wed 29 Oct 2025 01:01:40 +0000
Files and hashes: 1: hBtuYA8NQ04R8tq6jZPsM1-BvhU.roa (hash: K70nTdo1e1FCrO48Dr3FeEO2IPCXhYeBeZlKIyFXxPc=)
2: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl (hash: 8cQVUBADdY4O34zZCrcaQ1uLwIGvvgpEjNrVbob4DHw=)
3: yYfUODDume9xFNHrgw8kXHPMP18.roa (hash: X3WTz4JdrFUIjxDVjaUEhmRWKqzFmlYHhSjsH9h5dXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 01:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:55:c5:b9:ec:5d:d2:0b:63:1a:cd:ee:0e:25:d2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8986e25683302c38270d0f90c4aad1519393d545
Validity
Not Before: Oct 28 01:01:40 2025 GMT
Not After : Oct 29 01:01:40 2025 GMT
Subject: CN=b75c050fa570dd671ec09347b027402bcb65d331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:63:b1:83:36:f6:ea:d2:9a:e3:aa:ca:c5:15:
48:ae:51:0c:52:07:cb:10:27:14:15:57:d4:7b:01:
92:69:44:83:5e:32:46:ff:b1:2f:81:8f:cb:9c:a3:
ce:a0:7b:7a:31:b5:86:a7:ac:13:93:e3:59:2b:bf:
3c:2a:46:e0:3a:4b:4c:5d:ec:d5:ba:d7:b8:0a:bd:
04:47:00:95:fb:f4:46:5b:62:a1:e4:03:31:ac:a4:
84:1e:7e:1f:5c:23:76:f7:a4:25:e2:e8:f5:2d:a6:
cb:da:ca:91:12:e4:0c:17:ea:94:29:09:56:d3:d3:
a4:e1:41:2b:27:94:85:be:a5:8e:59:3a:c6:50:f9:
83:38:47:1c:df:67:89:26:03:8a:64:be:c6:79:a6:
5a:7f:e0:86:ca:54:8e:40:bc:cd:ff:38:31:35:56:
7b:94:35:20:c9:33:35:63:cd:c8:2c:04:92:65:61:
b3:57:c6:b2:d3:39:5d:44:37:ca:d3:7a:7c:a3:88:
32:69:46:3e:85:af:9f:f7:eb:76:ee:43:ed:95:17:
e2:c8:2b:27:bc:a0:57:47:22:2c:74:5a:c9:19:84:
6b:b6:98:78:9f:18:8b:63:8f:e1:a7:7e:b4:62:c8:
39:55:39:24:0c:05:9f:f5:2f:bc:76:b0:28:e3:e9:
f9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5C:05:0F:A5:70:DD:67:1E:C0:93:47:B0:27:40:2B:CB:65:D3:31
X509v3 Authority Key Identifier:
keyid:89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b7:3a:0f:f8:cd:02:c3:55:14:4e:b2:75:66:ca:e6:56:01:
f3:17:78:18:00:83:8b:c7:dc:0a:1e:6e:be:d6:7e:11:16:34:
57:6b:4b:73:e7:29:a1:7c:fb:93:9c:c4:38:be:e3:bf:3e:24:
ed:ae:c7:b8:c0:41:50:22:8d:db:fb:6d:28:6c:4d:86:cb:d1:
77:3c:b2:4e:71:3b:d7:31:c3:45:87:02:cc:33:41:82:58:7e:
24:e2:97:22:0b:cb:de:fd:ba:35:bc:a3:6b:c8:df:43:73:d7:
bd:33:e8:8d:04:45:50:87:f8:40:71:2a:b2:d7:08:59:bc:35:
ac:4f:3e:2c:45:f8:8d:02:d7:dc:13:fd:18:7f:ec:9d:7a:f0:
c9:e3:8f:71:82:c7:c1:5c:1c:e4:4d:96:b1:7c:ea:f8:78:a9:
2e:7c:c0:b2:62:03:09:9b:00:31:bc:6a:a6:52:fd:8c:e5:f4:
e6:7d:e8:3b:90:7e:43:ff:8e:92:bb:5a:9f:31:69:cb:88:cc:
75:46:50:c1:90:d0:f7:83:6e:14:bc:a0:3b:30:5d:62:20:58:
8d:c7:69:f4:1b:57:1c:9c:7d:f2:10:d4:6a:48:e9:c6:b3:9c:
72:4a:8d:18:2d:be:83:7c:20:bc:40:ab:ea:69:24:c4:66:d6:
5e:7b:c6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:44:00 2025 by rpki-client