Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft
File: Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft (raw, json)
Hash identifier: rzFDBYA/nyMWFqEOHl1AfkB36dmHrQ/EtMvCWBxQ2DA=
Subject key identifier: 3C:08:B1:B8:9E:BB:F0:E9:40:40:59:F0:83:2A:A3:30:6E:FD:DC:AC
Authority key identifier: 22:FD:1B:59:D5:CA:AF:75:06:BC:0D:5C:34:F3:0C:21:59:B0:43:98
Certificate issuer: /CN=22fd1b59d5caaf7506bc0d5c34f30c2159b04398
Certificate serial: 019A05FFA7078AA96B3598ED7DAF9EB2CDB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft
Manifest number: 0DD1
Signing time: Tue 21 Oct 2025 09:00:31 +0000
Manifest this update: Tue 21 Oct 2025 09:00:31 +0000
Manifest next update: Wed 22 Oct 2025 09:00:31 +0000
Files and hashes: 1: 5h9N95WR6G3ZttKnfAaRL_2XfKs.roa (hash: Wu3zPxSXCsayNSHW7YvNoHAYtN3gQjTl9ho9qfJB69k=)
2: Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.crl (hash: iYRcrmP57YJtxU4XP7suNVsB5HVG2CpO4vWdJ7QpUOs=)
3: mWDbGVVpCQ84rC7Zv5fGnlAS0IM.roa (hash: p+WC5acLc9Vp8ZBrdZrqWpaCEJthWpQv4NHUQY+p8+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:ff:a7:07:8a:a9:6b:35:98:ed:7d:af:9e:b2:cd:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22fd1b59d5caaf7506bc0d5c34f30c2159b04398
Validity
Not Before: Oct 21 09:00:31 2025 GMT
Not After : Oct 22 09:00:31 2025 GMT
Subject: CN=3c08b1b89ebbf0e9404059f0832aa3306efddcac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:e1:78:3b:63:fb:d2:18:a9:d8:99:f5:66:
cb:ed:fa:b9:64:01:5d:7a:19:4d:81:ed:7c:43:63:
8e:38:1e:78:e9:ca:18:10:92:52:71:5f:38:a5:39:
c7:df:4d:0a:46:f3:02:d9:19:d0:84:c0:fd:90:ec:
3a:17:d4:82:e2:a5:d8:71:08:ac:b1:89:fa:0b:d3:
5b:4b:6b:90:8f:7b:df:97:6b:ab:a4:a3:7e:37:86:
f3:3d:ad:00:b6:ce:82:94:f7:01:76:a6:03:fd:3d:
fb:ca:e9:b3:eb:fd:ae:ed:e3:28:b4:47:d3:11:c9:
dd:50:51:33:fa:37:47:db:48:7d:d7:50:5f:a4:23:
78:cb:c4:54:29:c0:f6:d9:fc:4f:61:1e:20:e5:f5:
5a:36:6a:a8:55:cd:7b:8e:08:21:25:1c:c9:3b:26:
84:10:4a:41:6d:c5:4b:4c:1c:1d:2d:96:c3:16:93:
e2:20:c6:84:c9:4d:bd:41:c7:ea:da:d7:2f:65:06:
e9:10:3d:0e:df:b7:d7:b2:90:18:37:9d:3b:42:ce:
f4:b2:36:f2:33:07:31:11:86:95:96:60:51:55:74:
10:38:48:f9:c7:de:89:1d:96:fc:b3:46:d7:79:8b:
0e:11:c4:23:ed:30:6d:da:13:9c:34:b7:5f:e2:6b:
2d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:08:B1:B8:9E:BB:F0:E9:40:40:59:F0:83:2A:A3:30:6E:FD:DC:AC
X509v3 Authority Key Identifier:
keyid:22:FD:1B:59:D5:CA:AF:75:06:BC:0D:5C:34:F3:0C:21:59:B0:43:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f0:2d:d5:da:e5:58:fa:1a:f9:f4:d7:b6:a9:47:be:66:8c:
96:cb:f4:f1:9e:70:53:b7:65:7c:08:cc:ff:0e:a5:e5:b8:0a:
84:96:87:35:50:76:7c:d3:81:6a:54:df:9a:75:dc:fa:d1:73:
4e:48:a2:74:ae:5f:6a:9a:dc:f1:51:ef:d5:d3:03:3f:9a:de:
bc:6e:33:53:13:47:35:65:f6:84:c6:29:82:c5:3e:d4:49:fa:
3a:2b:a3:5c:f3:61:62:52:fa:ab:06:03:c7:fa:b3:e1:dd:31:
13:ee:21:4d:6d:2d:35:e9:97:2d:92:c1:9d:57:4b:82:2a:d3:
9e:f5:fa:b0:68:72:8b:02:e7:06:09:5d:11:2f:1c:a0:6c:67:
01:fa:42:03:af:9a:4a:dd:0a:cb:d1:58:6f:8e:e6:1b:27:ac:
41:fe:db:43:6f:fe:93:11:f6:ae:b7:b5:f2:33:f2:f4:f9:60:
af:d9:2c:7b:41:1a:4b:0a:cb:5b:b3:55:24:c8:ff:43:44:6a:
c0:99:8b:ce:20:bc:35:31:f6:3a:ba:51:fb:9f:82:7f:91:04:
51:c9:fa:a0:9b:ef:48:04:1f:8d:89:85:0b:07:db:28:b1:0f:
c1:c1:fb:cb:17:06:51:4c:03:c1:69:12:12:3f:a1:90:f7:bb:
8c:3e:50:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 13:47:34 2025 by rpki-client