Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.mft
File: iYgl0vBkmJs4x4HyqFNRiaJpKMM.mft (raw, json)
Hash identifier: 7Rrj4HWpiwCUhtOsj8a/lA86c8IM06z7HCtmt0DdCWU=
Subject key identifier: 05:6F:3D:F2:DC:96:F1:DF:F4:56:B0:02:DD:01:01:5B:C1:23:CF:97
Authority key identifier: 89:88:25:D2:F0:64:98:9B:38:C7:81:F2:A8:53:51:89:A2:69:28:C3
Certificate issuer: /CN=898825d2f064989b38c781f2a8535189a26928c3
Certificate serial: 019A71B7C298A94AB1BD030ED01AF1636455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYgl0vBkmJs4x4HyqFNRiaJpKMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.mft
Manifest number: 15A1
Signing time: Tue 11 Nov 2025 07:00:59 +0000
Manifest this update: Tue 11 Nov 2025 07:00:59 +0000
Manifest next update: Wed 12 Nov 2025 07:00:59 +0000
Files and hashes: 1: iYgl0vBkmJs4x4HyqFNRiaJpKMM.crl (hash: zpiYT0dwKKD/MefFGf19hkq01HuVq5iNRFEnTx69g9s=)
2: zbnBRUeVPnEEwLI2vvj0r39FPtE.roa (hash: 4AvpkRySedv9+g3/SFfJUIRAayJwpWmaa1FdREtJu9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/iYgl0vBkmJs4x4HyqFNRiaJpKMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c2:98:a9:4a:b1:bd:03:0e:d0:1a:f1:63:64:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=898825d2f064989b38c781f2a8535189a26928c3
Validity
Not Before: Nov 11 07:00:59 2025 GMT
Not After : Nov 12 07:00:59 2025 GMT
Subject: CN=056f3df2dc96f1dff456b002dd01015bc123cf97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:37:78:3e:99:0c:dd:84:f9:9c:c3:01:eb:4e:
db:d3:e0:93:73:d6:15:28:84:ce:a4:73:7e:b6:45:
90:f2:2f:96:a2:9b:b9:f9:ce:56:f7:99:71:5a:e5:
8d:2b:39:26:eb:5c:8a:0c:8e:53:fe:57:0e:fc:f9:
64:41:a2:a6:ae:71:1f:04:a8:d8:81:bb:4f:a3:87:
3e:bd:b1:58:84:a9:33:74:c9:e5:f0:4a:49:30:b3:
b7:2e:18:f4:1d:98:37:20:5a:d4:47:34:c8:05:9e:
d2:90:0b:fc:e5:be:7e:e7:c7:3f:df:99:4a:e2:2b:
ee:c2:77:fc:bf:d3:c3:6d:53:63:ec:be:b2:14:98:
48:3b:9d:ce:c9:45:74:ad:0e:2a:f2:c9:65:e3:ad:
e6:c8:b0:0b:8a:61:05:e1:a5:dd:c9:11:1c:95:cb:
bb:78:27:73:2d:27:33:4c:53:d9:e8:48:3a:1e:cc:
b8:73:bc:4f:26:8e:d7:28:42:56:02:f4:9c:bb:e8:
36:ba:c1:90:d9:88:00:86:73:12:a5:b1:22:37:d2:
61:3f:84:e4:90:a0:42:e1:9a:fe:e3:5e:7c:85:7d:
db:23:3c:32:0d:31:97:6c:9e:1b:73:cc:3b:ce:33:
63:4d:db:99:7c:55:d1:c8:f0:9e:23:81:a3:54:f7:
f4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6F:3D:F2:DC:96:F1:DF:F4:56:B0:02:DD:01:01:5B:C1:23:CF:97
X509v3 Authority Key Identifier:
keyid:89:88:25:D2:F0:64:98:9B:38:C7:81:F2:A8:53:51:89:A2:69:28:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYgl0vBkmJs4x4HyqFNRiaJpKMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9e:d1:32:b0:76:91:dd:92:9b:a6:3a:af:66:0f:a7:d5:0f:
52:fc:ca:2e:06:b3:f7:17:79:50:2d:b2:26:ce:c1:fa:49:cc:
8b:df:76:59:f5:3e:9f:d1:36:0e:cd:d6:e2:c2:7c:12:79:1e:
53:0c:5e:3d:9f:b0:ba:99:7e:0e:94:94:04:c7:7b:15:1e:60:
fe:43:ee:96:38:2a:6d:05:1d:3d:4a:cc:53:e9:08:31:48:18:
95:31:de:f4:91:22:c7:58:67:8b:bc:30:f8:a2:8f:8e:00:1c:
07:a1:ff:8b:17:00:a3:ae:95:1b:61:bf:3d:d5:41:2b:e8:59:
2e:e9:51:a5:42:e6:2a:a6:9c:fd:dd:19:7a:92:06:69:12:c7:
c3:b0:cc:39:64:43:18:04:82:05:4a:13:73:3c:16:66:97:76:
f4:0c:05:32:8c:c7:dc:f7:ba:f8:7c:03:57:d8:a3:48:1d:80:
8e:a9:12:2d:de:40:4d:1e:d4:2f:ff:8f:9b:65:91:91:03:58:
68:d4:c3:b5:e3:ac:c7:27:3a:c9:4f:4f:20:82:41:b0:26:42:
79:dc:ef:fd:22:19:c0:31:1d:11:5c:97:23:d0:9a:c1:8b:90:
97:48:a3:bc:55:bb:34:bf:08:bf:7e:ba:81:4c:1c:be:78:93:
d8:f2:7f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:53 2025 by rpki-client