Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
File: i1_lDykN2eQeX0pl2rsjlyqCytM.mft (raw, json)
Hash identifier: 2xmsWDn0ppRzOfv5XsoJembhNu2swsAceamIG/yuLjc=
Subject key identifier: 9E:38:0B:BB:D0:01:FF:C0:8D:5F:12:FB:04:88:97:8B:28:69:BF:07
Authority key identifier: 8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3
Certificate issuer: /CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3
Certificate serial: 019A725C813BA050A0D948316C5DD1CE1DE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
Manifest number: 0B2D
Signing time: Tue 11 Nov 2025 10:00:56 +0000
Manifest this update: Tue 11 Nov 2025 10:00:56 +0000
Manifest next update: Wed 12 Nov 2025 10:00:56 +0000
Files and hashes: 1: VyXgHHFFQ2oH5mDTe8acLrMgUes.roa (hash: LW13jFriZ57WfbtFccojs/LokeY+i7PgigFeLOhpQuY=)
2: i1_lDykN2eQeX0pl2rsjlyqCytM.crl (hash: 7c/Juo0+CY9xdbmGMwqAeWden16XMFQwtQwpHOBbSj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:81:3b:a0:50:a0:d9:48:31:6c:5d:d1:ce:1d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3
Validity
Not Before: Nov 11 10:00:56 2025 GMT
Not After : Nov 12 10:00:56 2025 GMT
Subject: CN=9e380bbbd001ffc08d5f12fb0488978b2869bf07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e9:7b:74:46:2b:67:95:df:55:c5:da:9b:ca:
34:10:45:71:60:a1:46:7c:51:a2:4d:52:b9:52:56:
9f:b2:b0:12:42:67:ca:e9:9b:1a:71:48:3a:b6:7d:
4b:24:c9:9a:88:fa:2a:63:5b:95:fd:58:6d:89:c1:
c7:32:5e:d9:61:af:08:4c:24:07:9f:19:19:57:06:
cb:2e:5d:d9:19:5d:be:23:8f:f5:25:2f:85:0c:ba:
2a:a9:b2:5b:97:f0:e0:71:ee:5d:b0:f8:ef:31:58:
22:01:5d:cb:44:93:37:b4:91:cf:5d:69:69:17:13:
7b:57:b6:f3:ba:71:12:95:45:ff:ca:48:8a:22:b6:
ba:15:03:ba:44:cc:01:53:f4:80:6a:2d:1d:3c:92:
39:4b:d1:56:75:e5:37:2d:9b:ca:df:1a:e8:34:31:
46:2e:65:35:91:ab:a6:6b:d7:18:9b:47:11:69:3a:
74:4f:e8:cf:dc:ed:89:b7:2c:5e:85:90:33:70:c5:
21:82:91:81:32:1b:91:cf:06:fd:9a:c4:13:b2:09:
30:6c:a6:c0:fc:68:a7:8e:ac:53:b6:a8:09:99:a8:
4a:09:a1:7e:0b:ad:ef:7a:8e:ac:44:e8:87:6c:b9:
7e:d8:1e:03:89:7f:e5:ef:91:d4:ec:4c:13:a7:4c:
69:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:38:0B:BB:D0:01:FF:C0:8D:5F:12:FB:04:88:97:8B:28:69:BF:07
X509v3 Authority Key Identifier:
keyid:8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:55:52:0a:f2:eb:5c:a4:75:81:3f:2d:30:d1:96:f5:dd:15:
61:c2:da:bb:41:51:1b:68:ac:d4:26:b2:63:9f:b1:db:79:c3:
c4:3a:e3:1c:d6:62:d0:52:3e:e6:4a:b8:44:dd:85:e4:b9:51:
19:3d:ce:b1:40:41:81:d3:14:d2:47:ca:52:01:d3:c3:96:a4:
cb:d2:fc:85:fa:42:f7:f8:02:91:76:60:c8:29:07:05:a3:8d:
55:c4:19:95:41:fe:ee:ec:bd:23:a9:fe:2e:65:a1:63:fd:97:
f4:ab:a6:13:96:1e:94:d0:28:79:49:e6:f9:60:7d:43:17:db:
4c:28:b9:7b:87:05:94:2b:1d:63:a9:43:ce:1e:aa:e8:d8:99:
22:a6:03:5e:0c:39:36:b3:e3:23:db:ca:e8:92:11:77:5b:d8:
c7:f5:9d:96:75:33:ea:a8:3c:de:56:d1:3d:2a:8e:54:f6:8e:
5f:02:89:0f:14:7f:ac:93:9b:a1:4d:7f:fc:be:4b:bf:a4:d5:
9f:f1:88:03:99:08:34:ba:18:b5:15:60:b9:d2:75:b0:d0:d8:
8f:01:80:dc:f9:ef:29:1b:21:d9:6e:8b:0a:1c:43:55:72:bf:
ab:22:7f:76:6f:a5:de:3a:38:87:22:90:c8:b3:da:ac:b4:d8:
43:2a:de:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:41 2025 by rpki-client