Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
File: iPNC3REnxnrxEWqx-ZfifLTIhOg.mft (raw, json)
Hash identifier: 7wPiONO9+X1d9W82hvj8bj3yE9U2qgcsNGcGnjC1vr8=
Subject key identifier: C5:1B:4D:04:31:FD:E8:D2:F0:B1:60:BD:56:9D:05:C7:7C:19:25:B9
Authority key identifier: 88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
Certificate issuer: /CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Certificate serial: 019A28F924287F7FCA0D341C9F8E95D028B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
Manifest number: 16FA
Signing time: Tue 28 Oct 2025 04:00:07 +0000
Manifest this update: Tue 28 Oct 2025 04:00:07 +0000
Manifest next update: Wed 29 Oct 2025 04:00:07 +0000
Files and hashes: 1: 0tVPRt7zVqUIIvmXairhGKRXv0U.roa (hash: dhSo1lkIbUUIXrPA3/k2AFZiXI7dxBUbTf590V+gQts=)
2: iPNC3REnxnrxEWqx-ZfifLTIhOg.crl (hash: 9PlrnXXVH/FY3TbNFQzTVCScM+JooDYr1AlhlyOu7gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 04:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:f9:24:28:7f:7f:ca:0d:34:1c:9f:8e:95:d0:28:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Validity
Not Before: Oct 28 04:00:07 2025 GMT
Not After : Oct 29 04:00:07 2025 GMT
Subject: CN=c51b4d0431fde8d2f0b160bd569d05c77c1925b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4a:ff:06:53:ee:e0:de:81:d3:aa:9a:b0:8f:
02:32:bf:00:ba:57:89:d4:e5:16:16:ca:53:53:50:
e1:a6:d0:4a:f5:70:c9:5c:ef:da:c1:45:14:3c:1c:
ba:80:59:b2:ba:d8:08:4d:8a:c1:19:83:7d:cf:41:
f8:9f:5a:a4:33:02:cf:20:d9:97:ca:8e:e3:c9:34:
aa:a1:24:21:3d:92:78:c6:3a:2d:a8:29:8c:8f:eb:
79:ce:94:ff:9f:d9:49:60:31:a3:2f:bb:6a:88:2b:
01:03:ef:1e:c6:ea:38:5a:21:5c:b9:2a:d0:74:4a:
31:3c:47:1f:d2:a4:f0:87:e7:8f:99:ee:ae:68:b4:
ea:52:70:13:b0:b4:1e:95:5b:b5:2b:54:be:e5:ce:
5f:70:45:75:ec:bd:5f:7c:fd:b6:ef:e5:b3:56:d3:
d7:f4:66:fe:bd:47:40:7e:db:3f:e1:1a:2f:a2:b7:
f3:f5:63:70:b9:c2:fd:38:33:70:43:80:27:ef:c5:
2d:dc:f2:8f:08:24:91:fb:58:0a:4e:ed:da:6a:26:
92:68:4e:ad:e4:8e:36:0f:a8:df:31:ff:11:41:50:
69:f2:2d:06:03:68:89:56:cf:2a:60:6e:16:68:b0:
e5:8a:e2:b6:7b:2e:a0:4e:82:9c:41:ce:0f:44:1a:
a6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1B:4D:04:31:FD:E8:D2:F0:B1:60:BD:56:9D:05:C7:7C:19:25:B9
X509v3 Authority Key Identifier:
keyid:88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:be:2c:9e:08:89:97:0b:98:b1:ef:44:27:99:d0:05:11:db:
4b:a9:4b:35:2c:0e:30:45:1d:92:88:e1:72:d5:11:fe:65:fd:
26:54:e9:5c:9f:74:4e:b0:2d:99:2e:3e:78:9e:2e:44:84:ca:
6e:d5:66:64:10:20:04:d3:02:ee:01:62:39:78:64:98:40:4a:
b5:74:4a:6a:54:8e:83:f0:29:5f:89:6e:37:83:71:2b:49:6e:
03:c9:d3:30:98:25:3f:48:ad:4e:c6:c7:c9:00:85:31:ea:a5:
48:f0:45:90:15:b6:6c:80:02:c5:f1:8a:69:48:5f:a4:88:d6:
e1:4e:58:1e:4a:6b:57:51:3f:a5:cc:05:c7:d4:48:e4:38:a5:
a5:dc:c5:d2:33:92:ac:b0:54:2f:75:2d:24:01:e7:06:d7:c7:
4c:85:0a:00:36:81:63:46:6b:ce:32:46:1d:52:be:2c:2d:21:
06:f0:93:23:8e:9a:fa:57:39:ad:d7:da:b6:16:df:aa:da:1f:
80:a1:f2:67:9c:25:50:6f:2b:c4:66:1b:f7:81:f9:83:f6:fd:
af:a4:57:b8:1e:55:12:31:96:19:85:b5:ff:39:5e:e4:31:1e:
91:7e:a9:30:e6:7f:cd:81:e5:3d:6f:9c:db:72:57:6a:ec:6f:
19:45:cf:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:19:27 2025 by rpki-client