Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
File: IS6vWaK_88qxGHEYlEeLue_5O4U.mft (raw, json)
Hash identifier: q+YPXRAZZ6Y+YFgoxaneIa4GWNI4DQYibr2c7YU8w7Q=
Subject key identifier: D1:85:94:D3:9C:DC:62:7D:BC:7F:F6:41:A0:A8:72:FE:F4:18:0D:65
Authority key identifier: 21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85
Certificate issuer: /CN=212eaf59a2bff3cab118711894478bb9eff93b85
Certificate serial: 019A70A50EFE99B7C8C0F2AFD0446FF6311A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 02:00:56 +0000
Manifest this update: Tue 11 Nov 2025 02:00:56 +0000
Manifest next update: Wed 12 Nov 2025 02:00:56 +0000
Files and hashes: 1: 9ACkzxrIX1FcdAcP7vGEcSMswwg.roa (hash: 5NgCoOKEw6pjVDqABbTS2aQr1tInYVR2kf/DOaxnI6o=)
2: IS6vWaK_88qxGHEYlEeLue_5O4U.crl (hash: aZcCKT5LvmPV2PN7hnOry3uht3QbHUTrwS7Jb2MwWWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:0e:fe:99:b7:c8:c0:f2:af:d0:44:6f:f6:31:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212eaf59a2bff3cab118711894478bb9eff93b85
Validity
Not Before: Nov 11 02:00:56 2025 GMT
Not After : Nov 12 02:00:56 2025 GMT
Subject: CN=d18594d39cdc627dbc7ff641a0a872fef4180d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ad:9b:09:fd:51:5a:bc:7b:71:f2:eb:bc:18:
21:d1:21:17:d7:cf:ad:f5:0a:98:20:e7:ec:da:d3:
0e:54:83:6a:55:7b:29:d2:cc:4b:98:f6:31:0f:ac:
ed:b9:db:65:a8:5f:cb:35:b7:a6:43:06:24:46:1b:
f1:fc:57:3f:d4:34:08:c6:90:ec:95:39:52:ef:73:
0d:c7:a1:01:54:91:29:80:0b:3b:3b:fc:76:e8:59:
59:7e:68:31:ef:36:65:d2:b8:f3:5b:28:3d:6e:9c:
a9:98:d3:a6:75:a5:1f:2a:da:8e:39:17:8c:a2:91:
a1:cb:1c:42:ed:5c:4f:bb:e4:a3:e8:4f:d3:b6:fa:
cd:0a:a4:df:4d:e1:7f:8b:c7:90:bb:5d:1e:ac:39:
02:76:a0:e3:cb:26:bc:70:b7:32:85:53:77:04:f2:
ea:09:e1:8e:4f:46:b6:cb:cb:91:cd:cc:49:17:4c:
f5:1c:f6:02:7c:03:bd:e0:dc:e4:f7:3a:4a:52:87:
92:11:98:51:96:4e:f1:00:f0:02:72:94:e2:4d:18:
03:9c:35:e4:22:02:61:b9:7e:3b:e4:82:73:2b:ad:
b1:6a:c8:93:2e:4c:c1:fc:5f:62:8e:51:29:2f:35:
73:77:3c:9e:3d:e6:83:96:fc:71:3f:d2:eb:55:38:
48:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:85:94:D3:9C:DC:62:7D:BC:7F:F6:41:A0:A8:72:FE:F4:18:0D:65
X509v3 Authority Key Identifier:
keyid:21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:3a:f2:33:11:d6:ea:bc:10:ea:fc:94:c3:73:03:32:77:a0:
d8:a5:e0:7a:28:c7:c2:82:75:39:56:50:91:75:bb:8a:47:07:
4d:5f:63:16:bf:52:14:14:b3:ad:3d:11:22:d1:6d:82:26:8e:
a1:71:87:65:12:04:9d:df:57:93:f7:73:62:92:b5:c5:b6:26:
b9:64:64:26:b7:74:e2:18:78:f5:3b:bf:a3:3d:83:ce:5a:47:
28:a6:b7:a4:5f:1f:43:f9:e1:e7:f6:e7:d2:16:94:f7:4d:6f:
cf:a7:5b:30:a0:15:9d:61:80:30:1f:03:53:fe:af:a9:b3:de:
6e:68:67:c6:76:15:63:be:de:7e:2e:85:1f:64:75:e5:44:11:
c4:b1:13:72:2d:cf:f8:aa:eb:15:37:0e:d6:55:f4:ee:51:1e:
0f:27:a4:92:09:6c:1c:46:50:8f:11:e2:2b:2f:d0:d2:58:b8:
45:96:40:ca:1d:50:7e:5c:4d:33:1b:16:2f:a0:b3:25:17:72:
da:b2:a2:cb:5f:84:64:cd:c7:fa:82:96:95:57:5a:d5:f3:52:
14:d5:80:b0:d3:a7:5f:47:3f:17:06:64:5a:9d:26:73:24:d6:
ea:c9:a0:1d:19:ef:8d:80:bb:35:56:8d:81:6b:8e:63:d1:98:
6e:ad:1a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:11 2025 by rpki-client