Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
File: iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft (raw, json)
Hash identifier: Wqpv1qXP23CxAEl6+tFkyTbXkHheeQW6lh9c9b9wBM0=
Subject key identifier: E4:79:86:EC:0B:CB:D2:12:E0:DD:04:AC:10:A1:43:5D:33:92:F1:F0
Authority key identifier: 88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5
Certificate issuer: /CN=88987ed4e73d0407483cc224ccf45aedf4969dd5
Certificate serial: 0199C6B3B5A3F9ACC39B5196942214D1606F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
Manifest number: 165C
Signing time: Thu 09 Oct 2025 02:01:30 +0000
Manifest this update: Thu 09 Oct 2025 02:01:30 +0000
Manifest next update: Fri 10 Oct 2025 02:01:30 +0000
Files and hashes: 1: iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl (hash: 1ErddgHCQHmknLBWAuPM0HbZFksatafM+oZa3En+yWY=)
2: ja_rBF-mVB6I6AG5Sq3U_cQoltk.roa (hash: nVfwFtdg/ueuXQpAAMHTHZq3sXCbrECHNWhALLqW2Vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 02:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c6:b3:b5:a3:f9:ac:c3:9b:51:96:94:22:14:d1:60:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88987ed4e73d0407483cc224ccf45aedf4969dd5
Validity
Not Before: Oct 9 02:01:30 2025 GMT
Not After : Oct 10 02:01:30 2025 GMT
Subject: CN=e47986ec0bcbd212e0dd04ac10a1435d3392f1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c5:a1:51:34:84:18:3e:ef:bb:5a:31:03:bf:
82:e3:3a:bd:db:40:49:e1:0a:c6:58:90:30:35:8a:
54:38:35:f6:24:07:e0:f9:bd:53:dd:09:29:4b:32:
62:0e:97:8b:c1:01:59:8b:93:f4:72:4e:de:d1:f8:
34:80:36:b7:e6:8e:6a:c2:04:bd:ff:7f:86:e4:e1:
21:7d:5c:5b:f7:67:26:13:cb:e5:c7:0c:62:d0:aa:
7c:28:67:7b:cd:34:70:64:94:f3:5b:28:bc:e3:25:
1a:86:59:91:e2:14:83:9e:b7:3c:73:67:6c:15:9b:
a2:d4:78:5f:e8:18:f1:05:c5:fa:6c:0f:9f:e8:fd:
ca:2f:af:d9:b8:cd:e3:cf:5e:c4:b1:45:13:50:df:
3e:c4:ec:ab:52:53:09:34:3a:78:9c:36:7d:db:40:
86:e3:49:c3:8b:2c:22:f6:67:49:c6:c6:ec:9b:24:
72:d9:b0:0b:38:b5:f7:bf:e7:0b:2f:b4:25:8f:2f:
8e:3d:31:50:26:bd:6d:4b:c1:b4:e8:c7:89:68:80:
d4:e1:31:81:cb:8f:96:d0:a8:08:38:79:02:46:d8:
70:32:c7:ec:a3:73:11:cd:0d:1c:85:e2:d0:29:cc:
9a:2f:58:df:62:2b:29:89:04:a5:30:e1:d7:d9:df:
26:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:79:86:EC:0B:CB:D2:12:E0:DD:04:AC:10:A1:43:5D:33:92:F1:F0
X509v3 Authority Key Identifier:
keyid:88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:fd:b4:42:e1:d7:4f:1f:57:14:ca:6f:ee:61:1d:27:56:2a:
21:42:b7:9e:c2:24:15:f3:19:81:46:bc:0e:e0:b2:7c:2b:71:
bd:8b:a4:26:81:bc:61:54:cd:80:5a:5c:29:3c:44:52:6f:35:
69:64:bc:64:aa:3a:f9:c4:6c:eb:81:46:68:8c:ec:d0:20:c8:
42:28:44:83:66:f9:6c:a1:b5:6d:9f:e1:40:ae:63:a3:92:f1:
9f:1e:38:db:55:8b:89:91:5b:62:91:b1:c4:f8:cd:e9:87:79:
ba:12:67:7f:5a:2a:fe:0a:bc:b4:4c:98:80:26:40:bb:90:71:
cc:cf:74:df:26:51:97:2b:de:bb:69:16:97:a8:b8:4d:42:66:
ef:80:51:77:dd:35:9a:8e:81:7e:2d:d4:8c:16:46:4d:37:9b:
51:bf:11:0e:37:54:a2:b2:37:b6:0b:be:96:83:a7:96:1e:55:
7b:fb:d6:c3:3c:9c:ff:96:e2:25:14:28:45:7c:d7:dc:26:0b:
f8:3f:7d:97:18:0b:69:dd:7e:53:46:c5:b2:3b:9d:03:64:b3:
c7:d7:d3:ee:b2:7f:d6:d2:49:14:a2:d3:21:f0:16:58:c9:a5:
bc:35:78:a1:ad:ce:a8:25:c0:50:95:4c:2b:27:b4:cd:44:9f:
da:dc:06:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 08:52:27 2025 by rpki-client