Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
File: iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft (raw, json)
Hash identifier: z/S/Fuumrcd9kDmbvgd0ncyTjtyiqOFIyluLyD+NoZc=
Subject key identifier: 18:E8:4A:BE:A3:09:4D:1E:F7:84:C0:CA:1F:92:E4:2F:3C:BF:1F:C5
Authority key identifier: 88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45
Certificate issuer: /CN=881ab180cb3517186221b3999b08b83af4f66945
Certificate serial: 019A5FE8B59A628928255EF2180684E94A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
Manifest number: 0603
Signing time: Fri 07 Nov 2025 20:01:17 +0000
Manifest this update: Fri 07 Nov 2025 20:01:17 +0000
Manifest next update: Sat 08 Nov 2025 20:01:17 +0000
Files and hashes: 1: iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl (hash: +RRkgcPweuYdKa3LrK88gupIQeRc6RpNlSGzQ1Rm+zc=)
2: vy5zTXe1FQxKmoVnLtT-YONwy5w.roa (hash: AqKcisSO89b2UHYN+H37mx/RlCQTo8dhRQYzWSzGyh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5f:e8:b5:9a:62:89:28:25:5e:f2:18:06:84:e9:4a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881ab180cb3517186221b3999b08b83af4f66945
Validity
Not Before: Nov 7 20:01:17 2025 GMT
Not After : Nov 8 20:01:17 2025 GMT
Subject: CN=18e84abea3094d1ef784c0ca1f92e42f3cbf1fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:13:02:33:bb:54:7e:24:d0:65:6c:45:dd:09:
4c:45:6a:55:81:a1:69:fa:8c:f7:4d:50:7f:b6:d6:
27:5c:33:a6:00:e4:13:00:c7:3b:b0:84:68:37:cc:
57:16:b7:b5:de:5e:68:fd:a3:d8:f5:96:1e:37:ca:
8c:e8:50:78:c1:05:76:31:1c:12:17:9b:5f:d7:6c:
e0:03:0e:9d:1b:65:7c:a2:77:6f:37:d3:4c:40:71:
72:7c:f9:3a:f9:19:82:32:10:50:80:b9:54:ac:65:
84:1c:0e:63:16:37:c9:b2:89:0b:b4:fa:be:b8:c3:
78:e0:cc:dd:d5:34:46:48:c0:46:5c:75:02:a4:8f:
cd:15:9a:3b:89:c0:6e:f0:41:97:eb:44:64:44:73:
b8:97:a2:99:46:88:ca:3f:ba:28:4d:6d:39:dd:d9:
cd:88:dd:cb:53:bb:a5:df:58:dc:0e:e7:05:25:86:
15:5f:ec:d8:7e:cc:49:9a:50:13:75:57:85:5f:19:
8f:68:71:24:19:f5:a8:b3:01:e4:22:b0:b1:95:3d:
20:6b:33:80:03:68:4d:b4:3c:57:a7:2d:0a:47:a2:
8a:8c:3c:42:22:3a:eb:54:a7:2c:f1:be:c9:d8:38:
cc:30:3d:db:d0:aa:78:fc:0a:b7:70:33:f3:6f:cb:
66:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E8:4A:BE:A3:09:4D:1E:F7:84:C0:CA:1F:92:E4:2F:3C:BF:1F:C5
X509v3 Authority Key Identifier:
keyid:88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c1:f9:8c:64:b4:7d:a1:09:1e:4d:c5:35:b4:10:65:2d:9c:
f7:d9:7c:23:fc:1d:a3:04:4c:8e:50:52:dc:6d:ad:d3:b6:45:
10:4d:ca:b6:13:80:e5:c0:10:70:6b:2a:97:fd:a1:d4:f7:44:
f5:f0:f5:18:50:14:d3:4b:88:2e:8c:2d:23:f9:39:cd:fa:4f:
2c:17:43:a1:78:b4:99:80:c3:df:fe:1d:07:2d:92:51:f4:b6:
78:3b:db:38:fb:a3:d9:c0:e9:5f:54:0b:95:c0:b7:85:ac:d9:
4b:ff:10:28:86:21:26:63:20:ef:52:f5:d8:c9:6a:ad:97:18:
f7:09:52:4e:da:ed:03:a0:51:a4:94:0a:a9:7d:54:9b:55:1a:
39:d4:35:52:5b:83:2f:eb:27:d4:9b:35:a1:f2:04:62:18:86:
cd:2c:55:05:c3:01:d1:95:f0:2c:19:84:e5:c9:60:54:72:7f:
1a:74:3a:ed:2d:0c:d7:de:99:2e:c9:a5:4b:1e:e7:0f:bd:4d:
65:98:31:d6:19:46:27:72:93:1a:72:13:4d:9f:15:6d:5c:64:
c3:e4:05:96:41:d5:8e:76:9f:64:48:ca:d0:44:c3:55:50:35:
36:9c:f7:51:af:86:cb:b0:86:8f:17:cb:83:09:cb:fe:a8:db:
30:73:f3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 8 05:32:30 2025 by rpki-client