Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
File: iuE5rwiZ9da1syWBNz7aMDfqMMA.mft (raw, json)
Hash identifier: uclMbY0xlB06cBrAp90jx7oOsIhHl2ihGeFck5mPDvs=
Subject key identifier: 58:E7:9A:43:54:95:9E:C7:4E:F6:B8:2B:D9:76:9C:DF:9F:22:D2:C4
Authority key identifier: 8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
Certificate issuer: /CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Certificate serial: 019A71B79728BBC4ADA7755F060ED978B60A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
Manifest number: 0DD6
Signing time: Tue 11 Nov 2025 07:00:48 +0000
Manifest this update: Tue 11 Nov 2025 07:00:48 +0000
Manifest next update: Wed 12 Nov 2025 07:00:48 +0000
Files and hashes: 1: NGjcJESkWKoe17DLj5CiFkjFkhs.roa (hash: GPilr/syUwSnDgvatxbmfR2uNG9m+2J2hRVuK9V/K4A=)
2: iuE5rwiZ9da1syWBNz7aMDfqMMA.crl (hash: qG2GogWv6D8nrGVXeiY6D35s+q/A7CBds7ODhaE3AR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:97:28:bb:c4:ad:a7:75:5f:06:0e:d9:78:b6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Validity
Not Before: Nov 11 07:00:48 2025 GMT
Not After : Nov 12 07:00:48 2025 GMT
Subject: CN=58e79a4354959ec74ef6b82bd9769cdf9f22d2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b7:78:16:2c:f5:80:d3:13:f2:19:29:74:1a:
7d:5c:6a:47:59:7a:93:47:43:b0:1a:45:f3:3c:6a:
cd:8c:09:93:b7:3f:cc:4f:21:9e:d0:dc:8a:97:c0:
77:e8:14:4d:8c:e2:06:02:09:b3:5e:fd:51:51:f1:
91:5c:76:dc:d0:cd:27:a0:4c:aa:e3:01:bb:6f:41:
d9:db:46:6d:69:23:00:50:f1:9a:ec:d4:97:e9:8f:
68:28:d9:fb:de:13:94:7b:90:f2:ae:03:37:58:ca:
32:eb:4d:c9:2b:84:9b:f7:97:61:47:bf:cd:81:3f:
c9:5b:25:c0:59:c4:ed:21:5c:41:18:f2:c7:d2:32:
99:af:4f:c8:5b:57:26:d7:08:80:75:d6:96:dc:af:
83:8c:c8:bd:24:19:90:45:51:87:ee:5d:ad:bb:4d:
03:b4:d1:14:6a:df:87:0f:e1:61:a6:09:c1:e3:7c:
be:48:73:16:5b:cd:fe:08:0b:dd:24:ab:e2:d9:3e:
53:da:c0:7b:76:ae:21:83:56:c8:04:f0:eb:ea:40:
8c:8b:dc:f7:74:dc:a2:f4:10:3e:00:43:84:35:12:
e6:0e:66:8f:59:ab:07:37:74:02:ba:7a:ec:d1:51:
5c:23:99:67:c5:31:1d:c9:80:9f:05:d8:b7:78:6b:
63:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E7:9A:43:54:95:9E:C7:4E:F6:B8:2B:D9:76:9C:DF:9F:22:D2:C4
X509v3 Authority Key Identifier:
keyid:8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:57:96:6d:9f:76:b5:48:7d:9e:8e:e5:43:6a:ff:6b:d2:e8:
e2:3f:ce:7b:94:b7:aa:e7:5b:f3:d2:b8:92:9d:60:8d:cd:81:
ac:79:66:67:1c:c8:e1:d1:6b:e3:b8:41:fc:7b:5e:17:65:47:
a6:47:df:69:74:c8:4a:60:d7:ed:a6:fe:0e:ef:2e:6b:0d:d0:
d3:37:87:a4:d2:c5:47:cc:dc:dd:e6:70:c7:b6:a5:bb:f3:a0:
7d:98:44:a8:b1:00:69:ef:11:f9:0c:21:60:2d:93:e8:e7:0c:
91:8a:77:99:16:4f:94:ad:03:25:59:ac:bb:5c:fa:5b:95:5f:
7c:20:f2:52:1b:6c:68:52:0b:32:7c:ed:40:71:23:2b:e8:1a:
e0:f0:c0:fb:64:6b:2c:33:b3:cc:da:78:8e:d6:ff:03:c6:30:
a2:46:d1:97:bb:f5:09:2c:bd:74:48:6d:59:a1:3c:7f:95:13:
82:44:d8:b3:ca:19:f5:ae:6b:27:21:1a:78:b0:fc:f4:81:a6:
7f:9b:fa:48:48:0d:aa:34:8d:ad:79:77:a5:fc:74:2f:9f:a5:
3b:9f:77:84:fb:ff:b4:3b:93:1c:b6:b7:c7:3e:0e:b7:01:73:
4c:43:14:12:4f:5d:60:ef:9b:1f:e7:f1:b4:3a:dd:02:43:71:
b3:ff:bf:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:28 2025 by rpki-client