Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
File: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft (raw, json)
Hash identifier: UWBCD/0tp7xkBkWE+XpJJpJC0JQA1RY0hQWxCc8TZ1M=
Subject key identifier: 88:6C:96:B0:BA:F9:55:6E:E6:0E:D5:56:EE:48:95:59:FB:32:BB:EB
Authority key identifier: 23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
Certificate issuer: /CN=230e9ac64510fa391846bb139ab52b8001d58038
Certificate serial: 019A07EE248C193B90CAB19AAA76C9ACAB2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
Manifest number: 137D
Signing time: Tue 21 Oct 2025 18:00:38 +0000
Manifest this update: Tue 21 Oct 2025 18:00:38 +0000
Manifest next update: Wed 22 Oct 2025 18:00:38 +0000
Files and hashes: 1: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl (hash: AgG02394GN/xs7l7zojesT2/hcqwbv8JFu2iajB+znk=)
2: UoyH2jgw3TjRmBGXcoIbjkHpXYk.roa (hash: 7Hn5Nml4HR5xVhJraj44LXb5goEfvTP/sHQKgiuE26I=)
3: pSCPepTx67SC5l3Ed1hdUBnE5IA.roa (hash: MWvK8q7nznQKhnSv15ZjQ+g2Xqx0IxpC4fGczjIPPSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:ee:24:8c:19:3b:90:ca:b1:9a:aa:76:c9:ac:ab:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230e9ac64510fa391846bb139ab52b8001d58038
Validity
Not Before: Oct 21 18:00:38 2025 GMT
Not After : Oct 22 18:00:38 2025 GMT
Subject: CN=886c96b0baf9556ee60ed556ee489559fb32bbeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:55:47:65:1e:50:52:5e:69:ba:31:c5:2a:
bb:1d:8a:42:25:cf:04:08:eb:f1:c6:94:7a:84:3a:
8e:7c:8e:79:cc:60:6a:b0:7e:69:24:17:cf:b2:3b:
68:2d:a8:be:4f:08:76:08:c8:88:d1:e3:26:08:92:
ed:5e:ec:e2:9c:7c:03:2a:4c:a3:9d:87:d0:e0:2e:
03:17:ec:09:29:50:3a:5f:23:07:10:da:93:e4:42:
93:7f:85:84:ff:51:d7:f4:18:31:47:75:c5:2e:00:
51:eb:3b:e9:9c:22:3f:2a:36:9d:33:62:e3:25:6f:
d2:fb:56:fc:14:22:91:dd:ff:d8:31:66:6a:a0:d0:
c0:1c:09:b1:9d:73:49:85:81:a8:6d:04:c9:b9:5e:
a5:27:75:b0:f8:46:a6:09:5b:c3:2c:ec:ad:27:43:
f2:7f:14:24:2f:0c:af:5d:2f:48:db:9d:20:20:0f:
4c:d5:28:f2:7d:70:30:e7:00:35:51:99:41:e1:e6:
ee:9e:b2:67:ea:0b:29:f2:3a:c1:27:45:2f:89:f1:
be:8c:4a:99:2c:14:1e:50:6e:44:0f:28:d6:8e:e7:
09:94:d5:ac:f0:54:ba:23:a9:06:8c:5d:50:99:64:
b6:2b:05:b0:cb:fc:7c:75:8a:11:6f:90:4b:dc:4f:
cf:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6C:96:B0:BA:F9:55:6E:E6:0E:D5:56:EE:48:95:59:FB:32:BB:EB
X509v3 Authority Key Identifier:
keyid:23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:7e:45:44:5c:e6:b0:28:fd:71:13:0b:6a:3c:a6:c5:d5:12:
25:ba:63:fe:af:19:15:63:91:0b:81:85:d7:ba:17:18:9d:4d:
a0:1e:25:f9:6c:f7:6a:22:a9:61:bb:b3:fd:f1:ca:de:4c:41:
34:b4:6e:00:6d:6f:66:85:d0:6c:ef:0d:b4:07:d3:a5:20:a6:
61:2f:c2:1c:47:3e:f8:bf:0a:a2:5c:d2:f0:31:51:f2:b1:f8:
34:65:5f:1d:ca:16:70:b5:73:00:86:77:41:f6:f4:c8:7d:11:
d6:6e:0a:bf:d9:a8:2f:dc:a1:e3:1a:8f:c1:35:ef:d9:4d:5c:
1d:b9:90:eb:63:08:54:22:00:ad:67:06:e5:e4:98:6e:b8:7c:
0c:a6:0e:0a:b7:90:db:08:50:b4:11:e7:9d:5e:64:f7:2b:a0:
b0:29:3b:66:99:62:3d:59:98:8c:f0:10:7f:91:8f:1f:61:85:
89:f8:6e:28:25:d1:e5:17:07:dc:a2:09:94:76:90:1a:a2:6e:
89:c8:36:a1:e5:8d:05:9a:ff:9b:04:e5:9f:2e:35:d8:5f:1a:
70:28:48:d1:e9:d3:e5:55:2d:db:cf:56:96:a7:c2:41:01:b4:
72:99:9d:4b:95:81:8c:bc:1d:5b:de:f9:0e:90:df:67:cb:c4:
63:0c:66:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:53:15 2025 by rpki-client