Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4e5d08-4267-4c78-862b-0cb562f98a52/1/IZah91DmPqz2d_fz533CxKLGyAk.mft
File: IZah91DmPqz2d_fz533CxKLGyAk.mft (raw, json)
Hash identifier: GhqzJt0mY6LoWcais2iFXy1c7xR8ncqVq1+W9lJr7GA=
Subject key identifier: CC:CD:62:D4:EF:0F:7B:5B:D4:35:97:E2:5A:C9:63:60:49:BC:2F:D4
Authority key identifier: 21:96:A1:F7:50:E6:3E:AC:F6:77:F7:F3:E7:7D:C2:C4:A2:C6:C8:09
Certificate issuer: /CN=2196a1f750e63eacf677f7f3e77dc2c4a2c6c809
Certificate serial: 019A7225BF7C0FAA040A7AF5A52DCAB312C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZah91DmPqz2d_fz533CxKLGyAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4e5d08-4267-4c78-862b-0cb562f98a52/1/IZah91DmPqz2d_fz533CxKLGyAk.mft
Manifest number: 0C
Signing time: Tue 11 Nov 2025 09:01:07 +0000
Manifest this update: Tue 11 Nov 2025 09:01:07 +0000
Manifest next update: Wed 12 Nov 2025 09:01:07 +0000
Files and hashes: 1: IZah91DmPqz2d_fz533CxKLGyAk.crl (hash: wGDK+I9tOMyzf8EknGp5rbn/u7Emn91bw/fUCqJpJ6s=)
2: knngGI39I0NVgBPG_Lf0q4HKJ1c.roa (hash: /q0F4K5neo5vF0JOJMy5NS7gJ83gwtGXNrG1p1CvIqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4e5d08-4267-4c78-862b-0cb562f98a52/1/IZah91DmPqz2d_fz533CxKLGyAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/4e5d08-4267-4c78-862b-0cb562f98a52/1/IZah91DmPqz2d_fz533CxKLGyAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IZah91DmPqz2d_fz533CxKLGyAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:bf:7c:0f:aa:04:0a:7a:f5:a5:2d:ca:b3:12:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2196a1f750e63eacf677f7f3e77dc2c4a2c6c809
Validity
Not Before: Nov 11 09:01:07 2025 GMT
Not After : Nov 12 09:01:07 2025 GMT
Subject: CN=cccd62d4ef0f7b5bd43597e25ac9636049bc2fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:87:f9:ac:16:f2:a9:45:c5:48:1c:27:bb:75:
bc:11:af:7e:74:f2:24:c2:58:0d:bc:1e:26:ea:14:
c9:e5:f0:e3:d0:6b:91:ee:71:a5:6a:96:a4:9b:2f:
4b:ac:1e:4c:1c:62:04:db:e5:6f:38:7e:c5:d8:24:
39:61:79:5e:e0:7b:8e:4a:e5:da:c7:0a:11:1a:8a:
8b:8a:86:62:2b:4d:de:9b:cb:6f:7e:ff:d0:a6:0c:
c0:d3:b9:19:83:53:cd:e2:34:36:24:d7:af:41:ad:
e3:03:60:24:dc:5e:25:f2:7e:5f:01:82:fd:74:b9:
6e:6d:2c:0b:66:c9:83:29:37:f2:b3:c4:c7:54:e7:
06:77:bf:30:ef:71:86:92:e9:6b:94:82:b2:c7:51:
86:6a:bc:e2:c7:e4:e8:42:a3:2c:79:da:55:c8:3b:
a3:0e:55:26:91:09:ab:5f:38:8f:38:98:10:a9:18:
1b:a7:66:45:f9:d7:67:70:a3:c9:25:e6:cd:86:2b:
b4:4c:d6:18:28:05:c5:20:c2:97:15:98:0a:a8:45:
89:86:e8:83:75:a9:0d:79:c6:e8:2c:1c:29:6d:79:
fe:86:9d:b4:c8:19:c7:c0:da:8d:6a:7d:ed:11:a7:
3f:36:3d:e9:74:59:51:89:6b:d6:03:cb:16:0f:b3:
8a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CD:62:D4:EF:0F:7B:5B:D4:35:97:E2:5A:C9:63:60:49:BC:2F:D4
X509v3 Authority Key Identifier:
keyid:21:96:A1:F7:50:E6:3E:AC:F6:77:F7:F3:E7:7D:C2:C4:A2:C6:C8:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZah91DmPqz2d_fz533CxKLGyAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4e5d08-4267-4c78-862b-0cb562f98a52/1/IZah91DmPqz2d_fz533CxKLGyAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4e5d08-4267-4c78-862b-0cb562f98a52/1/IZah91DmPqz2d_fz533CxKLGyAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:98:fc:d4:44:e8:ad:02:4a:8d:d4:95:d6:92:23:99:17:fb:
f8:10:a4:28:40:48:d3:92:e7:d6:f1:fe:76:b7:b9:06:7e:19:
36:e5:13:94:82:27:ae:5d:6b:bf:1d:53:52:c1:aa:9a:bc:38:
51:fb:05:60:03:0a:a4:31:8a:47:d5:46:67:3a:b8:cf:5c:61:
d5:7a:e8:38:fa:07:74:1f:83:a9:9a:00:b1:ad:2e:d6:d4:79:
cf:51:a5:a3:db:0f:a9:60:a1:bc:47:6e:7b:36:67:4e:15:f6:
b2:ee:a9:d3:3a:bb:3b:46:dd:4f:43:e3:36:79:70:1e:59:f0:
34:d5:ae:a4:b9:d7:b9:25:62:42:45:45:5e:b3:62:14:04:28:
4e:da:f0:5e:54:9f:f0:b7:ae:7f:8a:57:4f:e0:d1:f6:b1:47:
32:ce:70:71:14:b6:1c:4b:02:99:8f:f2:7d:34:e0:ba:27:40:
90:a7:7e:d0:53:6b:cd:39:29:5f:ea:ec:10:d5:81:6d:ae:cc:
aa:d4:55:ed:ba:90:2f:d9:8e:0f:56:01:3f:90:d2:3b:95:d6:
e4:01:03:0e:c8:c8:35:53:a6:a0:33:cf:6f:31:af:20:e3:d5:
0e:02:4a:b8:c5:69:85:01:39:ad:d6:33:c6:be:38:31:9f:d3:
04:ee:fd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:55 2025 by rpki-client