Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft
File: iy4NGE_1UzdchHw41N_NzeEhn9M.mft (raw, json)
Hash identifier: nF0ebhXNMkeuGpg6w6RULBX3neVNr/pCSZgKPoiqXbo=
Subject key identifier: 67:65:1C:85:67:CE:A5:CD:B1:B8:05:E8:77:14:0E:B9:18:B1:13:2F
Authority key identifier: 8B:2E:0D:18:4F:F5:53:37:5C:84:7C:38:D4:DF:CD:CD:E1:21:9F:D3
Certificate issuer: /CN=8b2e0d184ff553375c847c38d4dfcdcde1219fd3
Certificate serial: 019A26662D4A10B1953BFC4314D43CBAA1CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft
Manifest number: 10E6
Signing time: Mon 27 Oct 2025 16:00:21 +0000
Manifest this update: Mon 27 Oct 2025 16:00:21 +0000
Manifest next update: Tue 28 Oct 2025 16:00:21 +0000
Files and hashes: 1: QhkZtHC-GArPwLlJouzdeKz4vt4.roa (hash: rYjbbMwu5klxqw8Z2ve99sKM+e3vXg5MSUYMGvpUeAw=)
2: ek-bgKo0V51DyYfh9FUoM-CKgO8.roa (hash: aPF/FaJvXVYEUFEnZVNFtJQGYrjiMzQAcdLekCScrys=)
3: iy4NGE_1UzdchHw41N_NzeEhn9M.crl (hash: JkWanfeN9kMtY0DYqagA0ybLYPlb1+pIK3Nkz6skH1w=)
4: jjb9-8iXZGVpIaiYLG1b0CgDmDQ.roa (hash: aXW8Frrn0CPPaBr+F5uNOjUESeabRZzpMHqeAGAbYRY=)
5: tyr7YT-XlbKvyQI5Aiw1lqcEPZ0.roa (hash: A8rtdyJ9paAEirlby1av+cQ7baYrwbelcvz/vsvt2z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:66:2d:4a:10:b1:95:3b:fc:43:14:d4:3c:ba:a1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b2e0d184ff553375c847c38d4dfcdcde1219fd3
Validity
Not Before: Oct 27 16:00:21 2025 GMT
Not After : Oct 28 16:00:21 2025 GMT
Subject: CN=67651c8567cea5cdb1b805e877140eb918b1132f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1f:8f:41:6a:1b:3a:cf:ec:20:5e:c9:4a:50:
5e:5f:0b:04:99:bc:c2:6a:a6:00:82:9c:a7:0b:bb:
e0:1c:9a:83:c2:e5:e5:46:c0:fd:67:7b:18:e5:98:
7a:c8:3c:71:2b:5f:85:ca:41:9e:f4:0d:c8:0e:ca:
d6:77:25:c0:37:fa:3d:6e:bc:f3:de:bd:11:44:77:
12:56:3b:f2:11:19:9a:11:f3:85:28:2d:da:49:c1:
7e:cb:c3:2c:df:a2:e2:59:f3:e4:3e:4b:11:35:e4:
0b:4a:27:c9:7e:ea:d5:ce:1b:84:d6:8e:f7:0a:53:
c0:39:ab:7a:b7:64:80:34:57:ca:31:e9:5a:f6:70:
be:6a:02:2e:ea:fe:d5:67:07:53:a7:95:e7:20:bd:
aa:6f:79:88:3f:18:8c:ee:ee:63:33:3f:4d:68:9d:
86:f3:fc:42:a6:8f:42:12:d9:74:e9:95:92:5f:77:
26:28:d3:e9:94:d9:75:79:66:76:b5:97:f6:f7:59:
2c:d7:ff:d5:25:99:d8:ff:03:05:22:d3:11:37:60:
fa:6d:1d:ce:b0:ac:8b:99:2b:8c:b8:04:87:f4:81:
1b:6b:85:b6:87:3a:b1:64:a3:a0:c3:3c:f0:ff:0a:
4b:39:cf:77:86:36:be:9f:47:a8:a3:7c:46:09:a5:
25:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:65:1C:85:67:CE:A5:CD:B1:B8:05:E8:77:14:0E:B9:18:B1:13:2F
X509v3 Authority Key Identifier:
keyid:8B:2E:0D:18:4F:F5:53:37:5C:84:7C:38:D4:DF:CD:CD:E1:21:9F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c6:5a:91:a4:e4:24:84:7f:b2:16:28:47:00:a9:27:31:5f:
ff:80:2d:e0:cb:32:b2:46:13:66:17:05:0f:23:0a:a8:f8:88:
b1:5b:9e:02:8f:dd:38:c1:d5:3e:ab:d2:95:5c:64:0f:3e:e5:
8e:11:26:1a:2a:cb:7e:69:5c:e9:26:d6:4a:a5:1e:4f:67:c2:
d1:e9:35:91:dd:31:7c:86:d6:f9:c4:05:40:91:2d:af:94:8e:
9d:99:ed:39:06:ca:4c:23:cc:a1:7c:cb:d6:8b:d5:84:51:40:
b5:f5:e5:fe:ec:f9:af:3d:40:ce:ce:9a:cf:e5:05:fa:c1:25:
8d:00:4c:3f:1e:b6:fc:4f:81:30:a5:ca:de:c0:dc:a9:cc:17:
11:ac:8c:25:50:d1:d6:ce:a0:82:54:f8:d6:7e:b1:76:aa:6c:
59:1b:1c:90:d5:1d:b7:8a:21:22:e0:cc:b4:c8:1e:90:ef:4d:
75:67:10:12:a7:f1:fe:b0:de:69:be:84:be:27:99:ff:61:17:
ca:9a:6d:50:6f:f7:cc:b2:5e:43:b9:ba:68:a6:bc:ca:e9:3e:
cc:1b:a4:9c:80:17:21:22:67:43:10:8f:1a:fc:06:70:a9:78:
85:b0:86:83:0d:bc:26:09:6f:30:a7:56:1a:30:5f:17:14:22:
e1:06:48:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 22:22:16 2025 by rpki-client