Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
File: I02TlaK6I5y50njrWJty7VyWctE.mft (raw, json)
Hash identifier: EDuuadsPGYCmCmiRY/kmNEvc6fBSP7YVP/oDKlnBG+g=
Subject key identifier: 8E:8D:02:E3:46:FD:9B:1F:8C:B4:60:35:B5:72:C7:61:18:39:1F:69
Authority key identifier: 23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
Certificate issuer: /CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Certificate serial: 019A0C3841942A4ABEBC7AC07C2326CC646A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
Manifest number: 1133
Signing time: Wed 22 Oct 2025 14:00:04 +0000
Manifest this update: Wed 22 Oct 2025 14:00:04 +0000
Manifest next update: Thu 23 Oct 2025 14:00:04 +0000
Files and hashes: 1: 1rz_9CUxf9DVS-YE4VuUc49q_EU.roa (hash: UNeHGEwryJnNi0oicKcUP2+AX+MdC5294S5To8LCDxA=)
2: I02TlaK6I5y50njrWJty7VyWctE.crl (hash: BmXozjW4zGOsWABatoLxiphwFYp60xigD1B56ozWwWk=)
3: JuGf7pzc4HCrM3We2--OeQqSX4U.roa (hash: H4A47OUP6tLe0HcSGtfbX99Pdjm0iQtczsTWsqdmMN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:38:41:94:2a:4a:be:bc:7a:c0:7c:23:26:cc:64:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Validity
Not Before: Oct 22 14:00:04 2025 GMT
Not After : Oct 23 14:00:04 2025 GMT
Subject: CN=8e8d02e346fd9b1f8cb46035b572c76118391f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d8:51:36:b6:5c:81:4a:cb:a5:be:bc:0f:b4:
d8:37:00:d7:3a:01:2f:25:95:a8:16:e1:f6:73:b4:
38:f6:d7:77:7e:08:7d:ee:80:bc:84:31:77:0a:0b:
12:54:ea:c1:11:a1:ec:6a:9a:73:df:20:6c:ea:63:
e4:de:65:49:46:bd:ee:85:13:6f:70:00:08:e0:be:
2d:e6:6e:21:7a:3d:af:3f:cd:21:5f:17:69:1d:62:
32:d0:93:56:dd:09:fd:9c:49:dd:62:7e:54:fe:52:
f5:5d:33:38:9c:0c:36:3c:d4:57:44:4f:94:a0:cb:
50:b3:47:bf:cf:88:52:be:4b:41:98:09:13:82:63:
53:de:59:25:46:e8:21:d6:df:cf:6e:f5:9c:f5:04:
b7:1f:d1:16:2a:10:9d:9e:cd:6b:53:4e:c6:a9:f1:
00:83:94:7f:2a:e2:30:29:7d:a0:24:bd:6d:1f:0d:
64:ba:84:45:61:b7:3c:a7:11:0e:b6:81:17:16:70:
4f:12:ae:ca:f2:15:b5:09:32:f4:9a:78:76:55:b5:
04:06:43:ca:ad:ee:c0:0d:89:c4:8b:63:92:bb:e6:
45:bc:d2:30:da:1e:d4:3c:9a:cb:9f:ee:71:4f:34:
17:2b:6b:63:28:11:07:d3:2c:7b:ca:3a:40:6f:bc:
03:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8D:02:E3:46:FD:9B:1F:8C:B4:60:35:B5:72:C7:61:18:39:1F:69
X509v3 Authority Key Identifier:
keyid:23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ac:a7:57:47:9c:71:5e:b7:3a:ea:cd:69:eb:61:01:e4:42:
8a:15:37:96:32:55:bc:ef:03:e7:55:7d:fb:34:db:29:db:05:
09:2d:82:39:d6:69:e2:38:c0:32:f3:aa:20:3a:01:cd:c7:10:
20:83:60:15:3b:d1:a7:85:f9:c2:e8:dd:66:f5:36:d1:29:53:
8f:66:6b:4d:ce:70:4b:d4:cf:de:96:b4:27:eb:4d:d2:f3:0c:
46:96:42:e5:b7:77:61:f7:6f:84:81:5c:cf:31:d1:b1:3f:4e:
13:92:29:98:6f:39:2c:e1:dc:c6:74:c4:4f:7c:33:a0:a9:88:
81:e3:7c:e7:9e:0a:da:f6:11:85:38:cc:0e:84:60:65:a4:97:
02:c7:41:c2:2c:78:f6:ba:d3:da:52:de:39:0c:d9:af:0b:6e:
72:93:44:13:f2:d5:73:09:c1:68:16:ea:e8:d2:d1:93:ae:ae:
56:94:00:b3:eb:b3:2c:42:a8:0e:9e:42:77:54:fa:66:9b:11:
c6:9f:79:13:c8:68:af:19:16:b4:6a:b5:b5:39:3a:d1:c7:73:
7e:26:79:60:69:b0:22:6d:5d:cd:13:e1:a1:2e:55:8f:f5:93:
0e:47:04:a6:e3:7a:16:e4:b5:b7:49:f9:6e:d5:22:7b:f4:6e:
43:76:6b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 16:45:12 2025 by rpki-client