Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
File: i4GUQccJMDSp1GVqL202qyQDP-Q.mft (raw, json)
Hash identifier: tA/kdEZWkb86yohMYsa1En5CG6Wogbawam1UmxPhRWE=
Subject key identifier: 94:C8:3B:A7:F0:CB:6B:A9:AA:2C:56:3E:8D:42:30:93:16:96:92:48
Authority key identifier: 8B:81:94:41:C7:09:30:34:A9:D4:65:6A:2F:6D:36:AB:24:03:3F:E4
Certificate issuer: /CN=8b819441c7093034a9d4656a2f6d36ab24033fe4
Certificate serial: 019A7293AD013EEBA0641ADA9D8666AA344D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
Manifest number: 0195
Signing time: Tue 11 Nov 2025 11:01:11 +0000
Manifest this update: Tue 11 Nov 2025 11:01:11 +0000
Manifest next update: Wed 12 Nov 2025 11:01:11 +0000
Files and hashes: 1: Dm667XnaRqtK2i3UfsThVeXTWc4.roa (hash: 8yEFF1MNlsRKs74/fi+3dMb5d+dLJ3drU0IwlTP+fus=)
2: i4GUQccJMDSp1GVqL202qyQDP-Q.crl (hash: 99RNuRaZInt0BujcbLfbEDb/nB6t7zh5n6UhCE6KBAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:ad:01:3e:eb:a0:64:1a:da:9d:86:66:aa:34:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b819441c7093034a9d4656a2f6d36ab24033fe4
Validity
Not Before: Nov 11 11:01:11 2025 GMT
Not After : Nov 12 11:01:11 2025 GMT
Subject: CN=94c83ba7f0cb6ba9aa2c563e8d42309316969248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fc:d5:8e:99:8e:09:85:18:db:2e:f9:c3:f8:
d8:10:59:82:94:a0:ba:d0:b8:f1:c5:59:24:85:49:
83:ba:28:8a:ca:41:65:c0:47:f8:9c:de:f1:f0:7a:
9c:00:19:b0:96:6c:7e:24:b8:f8:ac:8b:50:8a:6e:
97:c9:cf:ff:25:60:30:d1:26:54:9e:3d:ff:0a:e3:
10:d8:a7:f3:91:be:f0:e7:00:19:68:94:26:bb:7b:
2f:49:19:ad:4d:65:79:14:a3:de:7c:7b:68:33:20:
41:d9:47:d7:c3:26:7b:be:cc:41:83:e7:87:75:81:
68:4e:9e:81:12:c5:bf:8f:b1:07:8b:44:b2:f6:0b:
86:41:fe:9f:00:73:5e:b9:c3:ae:2a:d0:2d:98:60:
7e:81:b5:9b:fb:e3:5f:fd:4e:44:02:e6:62:b2:b6:
1c:92:29:46:95:91:b2:18:a1:ea:b7:ed:ac:d1:1a:
77:37:8d:ac:b0:4f:6b:84:19:81:54:4d:d5:4e:2b:
5c:e9:ca:6a:f0:d2:a1:56:88:7d:bb:8a:01:2e:9d:
11:5e:71:ce:25:19:be:00:78:0d:80:eb:06:6e:20:
6c:ed:29:87:6a:0f:bf:ea:da:f3:1b:19:1e:f9:f6:
8e:16:02:df:43:eb:ce:2a:30:58:f0:5c:88:1e:e5:
0d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C8:3B:A7:F0:CB:6B:A9:AA:2C:56:3E:8D:42:30:93:16:96:92:48
X509v3 Authority Key Identifier:
keyid:8B:81:94:41:C7:09:30:34:A9:D4:65:6A:2F:6D:36:AB:24:03:3F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:48:56:de:c2:59:f0:89:e5:f0:1a:92:7f:06:14:e3:42:d3:
3b:8e:5f:cd:05:ea:be:40:2e:d1:2d:2c:20:2d:b7:27:a1:d9:
de:15:0e:d1:2b:3e:22:4b:6c:d8:56:bb:e3:2b:df:8f:01:35:
64:ab:5d:8a:c4:6f:d1:eb:a6:d9:01:10:ba:a5:40:3a:42:a3:
e9:11:4d:92:c9:5e:6f:79:b8:67:ef:15:b5:23:f8:ec:c2:ef:
4d:d9:41:f0:7a:31:53:62:c2:9e:71:e2:50:bc:1d:61:22:42:
b9:8c:b9:47:ac:5e:cb:3d:99:a2:94:c6:ec:f4:b6:5e:4e:0d:
f0:cb:2f:51:92:c3:69:19:6a:55:f7:d1:21:e2:d6:6f:f3:f4:
f0:ba:76:15:92:7c:4a:f8:d8:fd:ac:5d:bc:dc:2d:e2:6f:fa:
9e:42:7e:f4:db:65:e2:ad:c1:1a:40:cf:be:41:c1:cb:60:d9:
ea:19:e1:d3:d2:12:7b:71:80:ba:b6:05:2a:d8:2e:27:0c:d7:
bd:33:5f:d4:dd:56:f0:cf:8e:3e:27:ea:34:d7:db:b5:78:43:
a9:ad:70:35:c7:7b:e4:87:da:e5:6b:19:86:03:67:89:10:46:
eb:ff:6d:1d:57:29:84:59:4d:68:0f:4e:99:e3:c9:07:d4:60:
86:ab:c7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:37 2025 by rpki-client