Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
File: IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft (raw, json)
Hash identifier: ubfs4welMtL+oQi8qwtYm0e6cYlICuOH6kavY3tq1Yg=
Subject key identifier: 5A:94:3A:61:64:8E:75:25:0B:B6:2F:4D:9E:57:68:A5:EA:C8:09:3D
Authority key identifier: 22:A7:2F:3E:D2:3E:22:94:F9:BB:6B:A6:60:24:61:66:C1:3F:83:24
Certificate issuer: /CN=22a72f3ed23e2294f9bb6ba660246166c13f8324
Certificate serial: 019A72CAB02C2F790FEF1888B76C388BB3B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
Manifest number: 1506
Signing time: Tue 11 Nov 2025 12:01:17 +0000
Manifest this update: Tue 11 Nov 2025 12:01:17 +0000
Manifest next update: Wed 12 Nov 2025 12:01:17 +0000
Files and hashes: 1: 6LkNfXDGOHhf8gBsIaO1gA2Q-VM.roa (hash: NThSJkZPm+DD4/mAcNhw9miEjuzZudxLC0TeMXxTy6I=)
2: IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl (hash: c/oqb3mWYSPlT6W/NZJW0XA4v049IQ0SjV5RVQ0lorQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:b0:2c:2f:79:0f:ef:18:88:b7:6c:38:8b:b3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a72f3ed23e2294f9bb6ba660246166c13f8324
Validity
Not Before: Nov 11 12:01:17 2025 GMT
Not After : Nov 12 12:01:17 2025 GMT
Subject: CN=5a943a61648e75250bb62f4d9e5768a5eac8093d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:bd:f8:15:26:b6:61:c4:6d:dd:6a:1c:ba:6b:
84:99:df:bc:4f:8e:41:8b:6a:cd:18:89:56:f0:65:
ef:09:d0:21:71:63:3f:0e:99:02:5c:88:37:35:15:
72:a2:39:a7:1a:e2:8b:5b:56:c1:b2:c2:4f:3f:9c:
9a:bf:19:b1:95:fb:aa:b7:e9:b2:2d:a8:a4:4a:bc:
9b:bc:cd:4b:cc:70:05:9c:fd:0f:ea:25:f9:05:72:
54:5c:07:94:e6:e4:8d:f5:eb:29:ff:0f:5b:e9:69:
0d:bb:37:5a:3e:67:4e:1b:a5:ce:46:fd:3e:4a:8e:
1e:56:d6:1d:01:6a:de:49:b1:09:bf:f1:6b:d0:5a:
dd:91:46:2f:01:06:7f:6a:7d:79:8c:0d:27:45:78:
c5:ac:95:cd:9d:0e:10:d8:83:d5:5d:f0:13:d4:5a:
6e:af:aa:de:0b:6f:7a:c8:60:d5:b1:0f:d9:66:f4:
91:0b:48:5d:87:24:45:c2:40:3f:fd:98:53:b5:90:
e5:8a:a7:84:8e:c4:82:09:54:fa:33:a9:ad:4b:44:
bf:53:2a:0a:d3:e7:63:64:53:24:f0:ba:38:2c:a7:
54:77:cf:be:c6:02:91:98:b7:92:ac:73:86:b7:20:
e2:5f:3d:b9:a9:95:26:4a:ee:64:90:0d:e8:2c:84:
7e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:94:3A:61:64:8E:75:25:0B:B6:2F:4D:9E:57:68:A5:EA:C8:09:3D
X509v3 Authority Key Identifier:
keyid:22:A7:2F:3E:D2:3E:22:94:F9:BB:6B:A6:60:24:61:66:C1:3F:83:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7e:d0:e0:a6:3d:2a:63:90:4e:95:77:3e:5f:27:9f:07:cc:
80:9e:d1:63:19:8e:c8:c8:55:31:e8:0a:66:41:32:5d:3b:75:
53:a4:b8:5c:37:cd:06:2c:ec:9c:31:a1:04:ce:aa:c9:76:a4:
cf:15:59:b1:71:46:42:ba:bc:b1:31:c9:f8:b2:f1:a5:1b:7c:
25:4c:46:3c:a1:d8:ab:69:79:86:93:4a:a5:19:54:79:14:96:
ac:ec:27:f3:e1:01:58:4c:de:63:c4:95:1b:b1:71:0e:e0:1b:
37:e0:34:1c:a9:44:a8:4a:68:c7:64:a4:58:3d:78:25:cd:e3:
a7:13:e4:eb:c6:79:36:ae:58:81:17:7d:9c:f8:f8:c2:c6:23:
e6:25:df:f2:9f:37:27:9f:9b:41:17:44:cc:28:49:ca:87:ca:
b2:bc:40:1e:d3:6d:a5:5c:50:10:00:c4:23:31:80:fe:5a:49:
32:de:a1:97:61:a3:12:97:74:d8:21:0d:59:94:73:f5:79:e6:
69:34:6f:00:02:ea:52:8b:8a:ef:f4:28:c0:f9:ae:13:33:3e:
e3:17:00:4a:46:7b:71:27:b0:8d:58:d3:84:d5:f6:c5:a0:66:
f2:39:4d:06:a3:54:79:04:fa:33:90:8a:bd:4f:73:b5:9a:63:
77:97:a3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:34 2025 by rpki-client