Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
File: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft (raw, json)
Hash identifier: aci1rEt86e53AgIg54UfmZood9DCiF8C1XVHUkMQ0qM=
Subject key identifier: 24:28:23:CE:C8:CF:A8:7C:7C:3B:00:B6:4D:36:D9:8F:A8:15:60:2C
Authority key identifier: 22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
Certificate issuer: /CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Certificate serial: 019A15730075255F3F7511543DF52DCF0C29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
Manifest number: 11D2
Signing time: Fri 24 Oct 2025 09:00:49 +0000
Manifest this update: Fri 24 Oct 2025 09:00:49 +0000
Manifest next update: Sat 25 Oct 2025 09:00:49 +0000
Files and hashes: 1: 0qW5Y4yA32z4Dny6mIJ-qLW2XWk.roa (hash: q9HOhDrTziiN8dHNBG3tLes1wQlniZAzuxjJOEin3Rw=)
2: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl (hash: B+EDYZi1BjmwRPeas6/+XQUatt70D4LntWgqIc6qBSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:73:00:75:25:5f:3f:75:11:54:3d:f5:2d:cf:0c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Validity
Not Before: Oct 24 09:00:49 2025 GMT
Not After : Oct 25 09:00:49 2025 GMT
Subject: CN=242823cec8cfa87c7c3b00b64d36d98fa815602c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fa:f5:c0:7b:8e:ce:69:24:db:7f:85:30:8b:
bf:bc:33:4d:5d:b0:0d:52:9a:e6:21:4c:4f:27:b3:
3a:ba:74:68:9b:3f:1a:51:6d:95:14:77:74:26:06:
ca:e0:e1:23:e9:4a:0a:a1:2b:33:13:38:13:2f:eb:
97:b9:e0:04:5a:40:1f:e5:48:2c:3f:a0:6b:ba:99:
33:21:fd:b5:e0:41:eb:44:4d:65:4a:8c:c0:1e:42:
f1:fc:2b:ed:08:54:59:c4:b1:e3:8c:5c:03:41:3b:
c7:ff:8e:4a:e6:fb:c7:1c:81:de:b0:fc:2c:16:c6:
66:1d:ff:4e:72:eb:32:7b:6c:e1:f0:27:da:8e:b5:
af:2d:c5:fe:da:68:06:d2:30:f6:42:3e:58:d1:fe:
8d:0e:3e:fc:db:4e:c6:81:1d:45:dd:bc:78:d9:86:
d1:25:cc:c3:f6:4f:95:c1:19:bc:4d:40:82:cd:13:
1c:ac:43:9e:d9:12:45:50:6c:23:be:e0:7a:0f:e1:
99:b7:ee:eb:a3:12:25:45:49:ea:ac:41:e8:6d:bf:
4c:67:38:b1:d3:49:08:56:b2:89:74:1c:e8:d7:64:
6a:a4:d3:91:bb:a5:79:b2:93:8a:8d:84:23:fe:0e:
d7:fa:10:6b:65:25:dd:5c:11:47:9e:c7:f8:ff:69:
a2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:28:23:CE:C8:CF:A8:7C:7C:3B:00:B6:4D:36:D9:8F:A8:15:60:2C
X509v3 Authority Key Identifier:
keyid:22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:84:92:e4:c2:8a:0a:77:a4:d8:54:62:05:cc:f3:b7:1d:82:
03:ba:a8:6c:ed:68:51:39:9e:c0:2b:c6:e8:da:0e:08:f3:26:
cc:51:0e:ac:38:d1:ed:e2:e4:39:8e:35:e5:f7:f2:62:25:5e:
ab:d5:4c:aa:72:ed:51:a6:34:2a:08:2f:1c:1b:67:92:ba:07:
a0:2b:66:0b:ab:e0:7b:4c:3c:97:7b:1e:15:50:50:51:10:5d:
42:dc:0f:7b:5d:05:78:ed:8a:b4:59:81:36:8b:fb:98:a6:b3:
2d:6a:b2:b0:68:77:76:eb:32:69:86:65:21:a7:b2:cc:5e:da:
19:b7:51:6d:f8:10:88:1d:11:b7:29:e6:e3:06:d6:8b:44:04:
63:83:36:e8:79:51:50:02:fd:bb:de:81:d3:69:57:29:c2:71:
9c:26:c7:a9:60:90:e3:53:b7:55:85:72:fb:59:db:02:90:8a:
6d:45:ca:cb:89:0c:54:6c:43:e1:b3:b6:38:21:9e:e5:88:43:
e2:d9:04:aa:5c:d2:4d:e3:9f:1b:47:14:8b:91:bd:26:4e:37:
fe:61:9b:eb:8f:15:39:32:c7:b0:b6:cd:20:75:ee:5a:06:1e:
de:d3:74:46:54:c7:5e:08:1f:21:12:ee:b8:5d:b2:2c:80:a1:
0e:e3:3c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 19:18:32 2025 by rpki-client