Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
File: iGUv5lKWbXKKUnrubkPEhcaTn0U.mft (raw, json)
Hash identifier: tFW9d2K69UB57OrzeSqV/CyFxhk4FXLQxAs0EaE+lto=
Subject key identifier: 80:3D:82:97:D6:4C:D4:FD:07:47:F9:54:49:3D:5F:1B:5C:5A:49:C6
Authority key identifier: 88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
Certificate issuer: /CN=88652fe652966d728a527aee6e43c485c6939f45
Certificate serial: 019A71137F170994BA3178ABAACA782CFFA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
Manifest number: 1443
Signing time: Tue 11 Nov 2025 04:01:34 +0000
Manifest this update: Tue 11 Nov 2025 04:01:34 +0000
Manifest next update: Wed 12 Nov 2025 04:01:34 +0000
Files and hashes: 1: 1b_wV0k49kuwRrhHplXiK2XiroA.roa (hash: RH2MIMTVkHxoiPuLQAUrE2Rqg6UxaLBroHReV0YDdhs=)
2: iGUv5lKWbXKKUnrubkPEhcaTn0U.crl (hash: WEItO8H3vGNp4PEDwO0JcGPzXp5GgJ1zs8smdehRBDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:7f:17:09:94:ba:31:78:ab:aa:ca:78:2c:ff:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88652fe652966d728a527aee6e43c485c6939f45
Validity
Not Before: Nov 11 04:01:34 2025 GMT
Not After : Nov 12 04:01:34 2025 GMT
Subject: CN=803d8297d64cd4fd0747f954493d5f1b5c5a49c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:96:12:e7:6c:0f:f2:6b:04:db:7f:c5:68:4a:
ae:c1:9b:de:3a:5e:86:4f:03:bb:2a:bb:71:3c:8d:
1c:08:74:55:9b:e3:08:3a:cc:f8:29:f2:cb:aa:9e:
1b:51:cb:fa:5e:91:f9:9f:d2:34:f0:55:32:04:e2:
14:c3:7d:44:a4:6f:e0:e6:8b:21:6d:26:e0:9e:6c:
64:72:c5:d0:24:5e:36:7e:d7:c4:ea:4e:a9:18:bd:
d9:58:01:45:7a:ed:fc:c1:d1:01:d5:64:c4:b2:7c:
7c:05:c8:c1:53:48:f5:d1:3a:73:9e:66:18:d6:df:
9c:33:48:30:ee:16:dc:b6:35:5d:d0:ec:81:ce:02:
c1:7c:28:17:49:31:e4:3e:8c:f7:74:b6:24:c8:b4:
58:d1:17:85:50:a2:7a:28:8c:71:91:11:e4:53:6f:
e5:46:26:b6:8c:ac:79:5d:e1:6a:db:92:ce:35:11:
54:28:5b:0e:47:15:8e:3b:78:c6:15:0b:d5:29:bc:
2e:77:cc:bd:a0:af:36:7f:7e:a7:87:0e:10:a2:34:
aa:88:e1:f3:1d:0e:12:56:27:03:07:78:97:b3:c4:
5a:33:12:7f:b8:49:11:51:ae:e7:7d:5d:0d:30:94:
f3:4f:93:e8:f8:0a:cb:97:85:0a:a4:5b:e2:d1:30:
87:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3D:82:97:D6:4C:D4:FD:07:47:F9:54:49:3D:5F:1B:5C:5A:49:C6
X509v3 Authority Key Identifier:
keyid:88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:74:b0:0c:8a:bb:fc:2a:54:51:95:83:2e:0c:99:e6:b7:90:
ab:de:c3:b7:7d:e1:2d:4e:c6:d5:e2:74:58:eb:7b:03:b6:29:
9f:77:47:fe:68:23:a2:7e:e7:99:bc:ef:c0:a5:c8:5e:e8:a0:
64:57:0b:93:53:f3:1e:82:d0:38:39:27:3c:8c:a3:12:f1:15:
3b:e8:10:f4:2c:a5:33:eb:97:0d:2d:bf:0c:a3:97:b9:d9:7b:
1e:c6:a1:f5:6a:1e:9f:69:82:1d:bb:5f:8f:a2:d2:a3:42:96:
0d:01:51:c1:2a:2b:fb:dd:d7:45:fc:46:4b:21:0b:fa:00:24:
97:92:08:e0:f3:f6:4a:88:1c:43:b3:8b:f8:a4:0f:60:c1:98:
50:f1:20:5c:3e:3c:cb:31:ca:90:92:47:03:e6:3e:0b:1c:da:
ef:3c:99:88:79:27:2d:b1:9b:e7:0a:ae:31:ab:02:be:d0:bc:
ce:5f:6b:24:40:2b:78:30:52:c4:e4:06:8a:d2:10:91:5d:77:
89:11:de:36:d7:1d:96:3f:2e:01:58:89:9c:f1:41:97:f6:a0:
80:0c:54:03:4c:5e:41:8b:21:5d:7e:d5:e4:6c:ea:d1:ec:b8:
67:f8:38:ab:73:63:19:ff:7d:98:dd:f0:3a:81:ce:47:4f:cd:
67:9d:e1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:28 2025 by rpki-client