Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
File: iAsPesuH0TTDhZ1y0NGmHkdRusA.mft (raw, json)
Hash identifier: tE0+pEeQgDbqPv6RU2q6pmF9xbJDIb9saH1xuGNMXtg=
Subject key identifier: 8E:2B:BB:E7:4D:8A:ED:30:29:73:37:E4:F7:6C:DA:DA:C9:08:59:B5
Authority key identifier: 88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0
Certificate issuer: /CN=880b0f7acb87d134c3859d72d0d1a61e4751bac0
Certificate serial: 019A7293E62C5BBBAF8ACE83B7BDFC4F5594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
Manifest number: 0DCA
Signing time: Tue 11 Nov 2025 11:01:26 +0000
Manifest this update: Tue 11 Nov 2025 11:01:26 +0000
Manifest next update: Wed 12 Nov 2025 11:01:26 +0000
Files and hashes: 1: UubezK0uH4JLqxbhgPEY0N-6nSw.roa (hash: Oagl7z5x1jSe2CWCzxXuth3kqDf2dweMIxQL2+jadVg=)
2: iAsPesuH0TTDhZ1y0NGmHkdRusA.crl (hash: OifmbQX6pJIZqyaFFC6aubA+Y0hKIev9hAZI4opFtJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:e6:2c:5b:bb:af:8a:ce:83:b7:bd:fc:4f:55:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=880b0f7acb87d134c3859d72d0d1a61e4751bac0
Validity
Not Before: Nov 11 11:01:26 2025 GMT
Not After : Nov 12 11:01:26 2025 GMT
Subject: CN=8e2bbbe74d8aed30297337e4f76cdadac90859b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:83:41:f1:e7:f0:56:4d:0d:18:e4:8c:c5:e1:
43:35:f1:53:c8:7e:ac:28:79:4e:2e:fd:26:12:d5:
b2:6d:69:91:8c:19:23:4e:f5:53:cf:74:fd:e1:6e:
c8:22:76:e5:88:97:b7:f0:b0:2f:70:7c:3e:69:94:
82:29:6a:38:1c:97:90:fd:d3:b6:85:fc:f0:93:3b:
1b:e5:71:30:2e:68:32:5f:4b:39:97:a4:15:3c:33:
b4:41:45:c1:4e:2a:6c:cb:58:4f:38:31:95:d1:25:
43:89:e8:98:28:01:8e:b0:e9:73:9a:3c:67:98:18:
0e:c1:9f:a2:57:db:90:2c:0b:57:bc:27:f0:11:f5:
a6:b9:8b:b6:e9:b6:84:67:d9:28:70:cc:14:3e:93:
86:32:f1:7e:45:a8:9d:e0:5a:05:4b:53:79:04:d1:
cc:00:67:f8:14:35:27:bf:78:11:7c:54:ab:d3:d7:
98:e7:19:52:58:8d:92:6b:64:b2:54:bb:1b:89:a3:
e6:5b:0d:97:7c:26:32:62:e5:46:f6:f4:ad:5f:fb:
b3:34:1d:26:b2:44:cf:c3:19:10:12:5f:f1:2a:dc:
3b:7a:04:ef:bd:e0:77:58:c1:d0:a9:9b:29:e9:17:
1f:bd:8d:fe:94:f4:e6:c3:c3:ce:1d:fe:8d:6f:4a:
fa:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2B:BB:E7:4D:8A:ED:30:29:73:37:E4:F7:6C:DA:DA:C9:08:59:B5
X509v3 Authority Key Identifier:
keyid:88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:5c:02:32:2b:04:cc:47:fa:90:bf:00:43:9a:75:c4:fc:48:
b4:b1:66:dd:7a:dc:14:c3:60:ab:a0:16:56:74:b8:56:ef:cf:
46:3c:01:ca:8d:32:b3:3b:9e:64:86:70:38:03:61:fc:6e:77:
b1:73:aa:fe:8b:da:11:e5:7d:5b:f7:c4:df:d4:e8:45:f3:50:
28:7a:e1:2f:c1:78:b6:22:9a:ab:9e:a3:0c:b8:fd:90:2e:10:
58:7c:6d:c5:6a:2a:cb:94:14:b3:a8:37:0f:dc:31:f7:86:50:
1d:3c:8b:a8:aa:4c:56:6b:1a:06:8d:31:7e:08:41:2a:bd:d2:
b5:4c:4d:d0:d1:05:c4:d8:fe:87:e7:00:b7:d6:d0:fc:34:52:
ba:f6:88:46:63:d3:a8:0b:c4:77:58:9a:79:2b:42:6e:08:0e:
1d:54:27:75:b4:21:ee:3c:08:b3:03:76:2b:32:d7:0c:5f:2a:
f0:36:35:a6:36:6e:f8:94:6f:d3:06:87:8d:6e:af:ba:0e:bc:
8b:f5:e8:31:b2:3a:4d:bd:11:db:aa:48:5d:37:6a:4d:06:d9:
42:5f:92:fe:04:6f:08:c1:98:d0:45:50:d4:25:ea:0d:3f:64:
2b:07:1d:9a:ce:0b:53:25:ab:d9:09:6b:18:6a:b9:89:a9:80:
04:19:54:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:46:54 2025 by rpki-client