Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
File: iBDn48kXXrmP94FdMHb7Aplqc0o.mft (raw, json)
Hash identifier: 6lvl/NLytw/ZhrcxtH25PTN1ZJtNm6WWursgo+N+pYA=
Subject key identifier: C1:C7:D4:AA:9E:2F:03:16:0D:F9:E1:D8:81:6C:F6:D4:25:EA:69:80
Authority key identifier: 88:10:E7:E3:C9:17:5E:B9:8F:F7:81:5D:30:76:FB:02:99:6A:73:4A
Certificate issuer: /CN=8810e7e3c9175eb98ff7815d3076fb02996a734a
Certificate serial: 019A71B9280A506B01C1EEF87CDF6D809F88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
Manifest number: 032C
Signing time: Tue 11 Nov 2025 07:02:31 +0000
Manifest this update: Tue 11 Nov 2025 07:02:31 +0000
Manifest next update: Wed 12 Nov 2025 07:02:31 +0000
Files and hashes: 1: 98GklQIoHkHkn0CoFh_6Dud54bo.roa (hash: M+9C1iQsySZxvMjL702thfggxvSIoF6cEK1D5Lq/ro4=)
2: iBDn48kXXrmP94FdMHb7Aplqc0o.crl (hash: vwA4ubrYELLJdAlhYS7t8EpKArl5B4v+iOvSdg3S9zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:28:0a:50:6b:01:c1:ee:f8:7c:df:6d:80:9f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8810e7e3c9175eb98ff7815d3076fb02996a734a
Validity
Not Before: Nov 11 07:02:31 2025 GMT
Not After : Nov 12 07:02:31 2025 GMT
Subject: CN=c1c7d4aa9e2f03160df9e1d8816cf6d425ea6980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:67:54:1e:65:fd:36:29:1e:1c:78:2d:8c:c2:
61:b0:eb:5f:fb:87:ac:85:b6:50:df:e9:ac:71:8b:
e3:4e:d6:c8:0d:39:94:e7:9b:45:eb:4d:ab:97:43:
eb:ce:89:ec:f0:2c:44:89:ee:fc:08:e2:ff:2a:97:
0c:f3:71:ae:6f:ca:88:f9:8a:a2:1b:9b:21:66:f2:
d1:a9:c9:a6:f5:1a:34:a1:64:dc:1e:ba:4f:da:05:
b1:61:92:17:25:d3:54:63:27:16:a6:16:3b:6a:d9:
91:4c:2b:bf:11:2a:25:a3:fc:85:4a:4d:21:24:8e:
3d:8e:64:eb:d8:15:99:28:51:da:11:3e:fb:9f:51:
dc:ff:4b:f6:dd:77:2f:94:ef:07:42:00:2a:bf:38:
91:e3:0b:f4:45:f7:39:51:47:fb:12:c9:d4:12:67:
0f:95:a7:9b:38:e1:6f:e7:a2:45:72:87:47:ed:fe:
0f:6a:48:b1:27:39:4f:71:19:db:f5:a5:6e:19:a2:
26:25:38:3d:f7:c0:44:30:1a:4e:86:a6:47:52:65:
7d:76:87:d3:b6:aa:a0:00:5e:fd:57:34:24:75:46:
9d:c4:68:75:0a:7d:93:4c:d6:02:20:81:72:5d:ee:
61:b4:c7:2a:46:b6:c3:9c:e4:5a:e9:86:bd:18:21:
7b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C7:D4:AA:9E:2F:03:16:0D:F9:E1:D8:81:6C:F6:D4:25:EA:69:80
X509v3 Authority Key Identifier:
keyid:88:10:E7:E3:C9:17:5E:B9:8F:F7:81:5D:30:76:FB:02:99:6A:73:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7d:b8:10:28:ac:9f:36:5a:e0:07:08:31:7c:81:01:d1:95:
cc:46:ae:4d:40:99:69:5c:41:81:c0:a3:a1:30:58:cf:b9:63:
6d:24:cc:52:b4:1f:32:70:b0:32:79:3c:e5:4c:b0:fd:fd:13:
4c:a6:54:14:85:2b:ce:05:f3:31:d2:86:99:37:e2:fd:08:71:
ef:56:bf:2e:64:64:b1:36:c9:e0:7b:45:34:de:78:b7:cd:d9:
ec:94:bd:99:a5:b4:75:d1:29:2e:b1:bd:24:12:f7:a9:e5:69:
3d:10:e3:5a:3a:8e:03:ea:6a:36:0e:ab:14:ff:96:ac:a3:d9:
8d:85:78:75:e4:17:41:ed:15:6e:30:2f:60:ac:23:73:cc:12:
8c:bd:27:7f:4a:5e:f4:0c:8c:91:5b:2e:ca:c8:be:c2:db:6e:
68:2e:f7:1b:f9:f1:2a:d9:b0:f8:93:5b:f2:78:da:bb:65:53:
2d:0f:33:f6:ac:91:aa:cb:98:e2:f9:7e:d2:00:a4:92:26:6e:
9c:10:59:0b:9d:f6:d2:03:5e:a9:71:c3:fd:cb:c4:6f:b3:4a:
04:24:c3:19:24:a1:ce:65:e5:26:55:e8:7a:3d:5b:8a:e9:69:
1d:89:c5:ba:97:66:44:3d:53:f9:47:ce:e3:bc:e7:7a:54:ea:
cf:ef:d4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:48:50 2025 by rpki-client