Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
File: IATWKTJ0OW9ajWkUhdaHagogcdk.mft (raw, json)
Hash identifier: e4JyXckFLey0aqoQsBI6xNpS5p9tdgBebhDJ9Nj4TDQ=
Subject key identifier: F4:AE:47:1F:4A:23:DC:1E:12:54:DE:C1:E4:33:D2:F5:B4:3F:2D:96
Authority key identifier: 20:04:D6:29:32:74:39:6F:5A:8D:69:14:85:D6:87:6A:0A:20:71:D9
Certificate issuer: /CN=2004d6293274396f5a8d691485d6876a0a2071d9
Certificate serial: 019A2AB15E831CADB93EF78C1ACB5AE0C930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
Manifest number: 139B
Signing time: Tue 28 Oct 2025 12:00:58 +0000
Manifest this update: Tue 28 Oct 2025 12:00:58 +0000
Manifest next update: Wed 29 Oct 2025 12:00:58 +0000
Files and hashes: 1: IATWKTJ0OW9ajWkUhdaHagogcdk.crl (hash: 8VO9pIBn1e8ywbK/zuH+5AeHLXFVKKkQTIflCQo0zhY=)
2: aEJUX-P3iWzm8iZ2YmNhX1BUm-w.roa (hash: UCW6fp2JBu8X3L8wVEatff2uZp8yn3edNh91K1NyH88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:b1:5e:83:1c:ad:b9:3e:f7:8c:1a:cb:5a:e0:c9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2004d6293274396f5a8d691485d6876a0a2071d9
Validity
Not Before: Oct 28 12:00:58 2025 GMT
Not After : Oct 29 12:00:58 2025 GMT
Subject: CN=f4ae471f4a23dc1e1254dec1e433d2f5b43f2d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:c2:0b:47:03:3e:9d:70:de:1a:39:b2:4e:
f2:d3:c9:cf:48:27:5a:8b:80:f2:5b:ac:0e:2b:6e:
28:6d:78:55:37:5c:93:3e:9b:98:bd:e8:d8:a3:29:
48:07:e6:31:bb:d7:2c:71:e2:57:8f:83:ef:10:06:
53:d5:ba:9e:21:77:1b:62:41:bc:0b:40:af:21:ef:
97:99:20:4f:0d:8d:0c:54:c4:e9:8d:4b:de:cd:1e:
a0:6a:66:74:99:92:b2:89:5e:29:b3:d5:77:b4:65:
cf:0c:69:1f:99:8a:59:20:b4:be:22:05:92:3f:b5:
59:67:96:4d:2d:8a:e0:2b:03:ed:98:d1:bb:e5:4f:
5e:5d:32:fb:8e:19:b8:38:05:b5:4b:d5:71:dd:36:
db:e7:b0:36:9b:83:42:24:34:4c:50:3b:12:f0:64:
7b:d6:b6:54:fa:3d:73:5b:05:55:b3:33:8d:b4:44:
08:fa:2e:f1:0d:da:47:70:55:97:0a:a8:d5:95:1f:
30:74:34:d9:61:ad:2d:f5:de:f7:9e:b4:2f:57:85:
7b:53:b6:09:2f:2a:df:43:f8:79:65:7f:4d:b6:3e:
ac:f9:74:f8:74:6b:9a:0d:b3:14:15:92:20:0a:5d:
2f:32:5a:e4:fd:8f:f2:b6:a2:b1:55:98:dd:b5:4b:
e0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AE:47:1F:4A:23:DC:1E:12:54:DE:C1:E4:33:D2:F5:B4:3F:2D:96
X509v3 Authority Key Identifier:
keyid:20:04:D6:29:32:74:39:6F:5A:8D:69:14:85:D6:87:6A:0A:20:71:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:95:56:50:66:77:94:2f:7b:66:61:33:1c:e3:36:46:0d:71:
b9:15:33:0d:57:d2:71:65:9d:09:8d:12:83:c5:51:96:5a:f5:
fb:85:c6:c9:51:bb:dd:49:5d:3d:cf:2c:1c:3e:36:81:d9:6a:
bf:6b:df:7e:e2:60:be:d7:b5:7c:30:5b:c5:ac:39:74:67:e5:
91:8a:0b:95:c0:85:22:18:9f:f6:fc:07:77:70:a0:7a:e8:f5:
07:42:b1:c3:b9:30:8c:90:ef:82:89:bf:3f:e1:41:5e:f7:78:
79:75:ab:60:42:c2:6d:0d:aa:66:ba:c3:82:b1:8a:b5:d2:42:
a8:6b:c7:ff:6e:d6:e5:aa:41:03:00:53:c5:2a:be:41:59:e4:
db:23:14:14:67:0c:8d:a6:d1:2b:a4:37:82:cc:f4:89:b4:39:
58:f2:2f:cd:c0:f6:81:1e:eb:d3:47:3c:73:f5:7b:24:46:56:
09:30:32:79:78:90:75:e1:cf:1f:ad:7d:41:6f:8f:9d:6b:e8:
c1:df:b3:06:2b:c6:1e:e2:bd:3a:37:ee:da:1d:90:4f:38:27:
78:cf:46:bf:ce:79:66:90:99:86:2f:dd:ae:ee:5c:21:c4:03:
1d:4d:d0:53:1c:03:5a:b8:ff:63:f0:1b:a3:63:fe:9a:8d:e9:
6c:5a:ed:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:36:53 2025 by rpki-client