Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
File: iNEpp8ePtm0Hc7yZAINX5QfB574.mft (raw, json)
Hash identifier: 3ZycOkcsNRPwFlud/2H6qKFA555VoUTV06krVMpQZec=
Subject key identifier: 7F:BF:01:B1:89:81:73:A8:E5:BF:78:9F:B6:C6:AE:93:8A:19:30:62
Authority key identifier: 88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
Certificate issuer: /CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Certificate serial: 019A2665E6F92BC66CDE74F0F0850825B273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
Manifest number: 0829
Signing time: Mon 27 Oct 2025 16:00:03 +0000
Manifest this update: Mon 27 Oct 2025 16:00:03 +0000
Manifest next update: Tue 28 Oct 2025 16:00:03 +0000
Files and hashes: 1: 76xLkfM6kYxOK1NXh9OOS2MHsHA.roa (hash: 6Sbux0XZ8H/iAJjFbORSyS+kiaCneStSNPq6dnkA+DU=)
2: iNEpp8ePtm0Hc7yZAINX5QfB574.crl (hash: 2PfNgFF3TLM1lrexNuaF7BTiQRQ7itC9EAYI2Pn2H3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:65:e6:f9:2b:c6:6c:de:74:f0:f0:85:08:25:b2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Validity
Not Before: Oct 27 16:00:03 2025 GMT
Not After : Oct 28 16:00:03 2025 GMT
Subject: CN=7fbf01b1898173a8e5bf789fb6c6ae938a193062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0f:ff:61:6d:21:8d:7b:b1:b8:68:b2:c2:24:
44:f8:71:d4:cb:73:67:6b:46:6a:35:af:2e:41:32:
ba:64:a2:e3:fb:49:19:a1:1c:81:b1:60:2a:f5:91:
02:8f:f9:98:a9:97:ef:a1:d0:63:7b:21:35:2e:a2:
a2:c2:ed:c8:92:2f:c3:a8:5c:cd:41:41:af:08:2a:
fa:38:0b:0f:94:3f:04:2c:f4:a5:0e:67:9a:3d:db:
8d:56:af:9b:68:13:c6:9a:33:ee:a9:a6:62:30:d2:
46:59:84:de:cf:0c:c8:b5:05:5f:bf:e3:44:c9:d4:
fa:72:10:9a:a1:85:33:20:f7:a7:d3:3e:29:76:a2:
21:db:89:78:fd:e2:4e:89:05:77:bf:6a:0d:9a:c7:
23:07:f6:4b:ca:05:f0:e0:c2:cd:77:ad:91:b4:58:
67:ff:6a:21:1a:48:af:bf:3d:de:a8:bd:1c:04:54:
18:7f:18:e4:f7:9f:f5:10:d3:c6:19:04:12:76:cd:
d8:19:3a:0a:7a:47:c7:88:80:eb:ac:0f:1f:4f:d5:
10:04:f9:8b:61:ef:d4:5a:e0:74:dd:fc:7d:86:88:
74:b7:75:59:44:a9:20:76:01:7f:18:c7:08:d6:20:
99:a3:8b:54:37:5b:b5:04:53:37:5b:ef:ab:96:df:
9b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BF:01:B1:89:81:73:A8:E5:BF:78:9F:B6:C6:AE:93:8A:19:30:62
X509v3 Authority Key Identifier:
keyid:88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:09:e2:37:95:be:5c:8f:17:6c:77:14:d6:a1:f1:95:f4:58:
91:89:49:05:f0:8a:9b:cf:8b:97:ce:6b:65:2f:f5:22:61:d2:
a7:b7:78:b5:ff:94:73:ef:a8:6e:f5:d0:14:9a:9b:0c:01:a8:
f9:5c:4d:5e:c4:09:46:a5:97:82:92:d7:79:94:ae:e7:c8:a8:
53:f6:ce:56:84:f6:1e:85:67:8e:a3:32:28:5c:ca:73:9f:5b:
34:be:70:f4:5c:55:bc:f8:51:74:59:54:6f:a2:f3:27:ec:81:
8a:99:4b:c8:3c:06:dc:12:0d:de:02:33:6f:82:a9:01:f3:59:
f2:4b:f6:67:74:0c:31:b3:9a:7a:51:06:fd:cb:ba:81:4a:fb:
d4:a7:2f:e6:5c:c3:90:cf:36:bc:e8:92:88:70:2d:49:66:2c:
aa:01:60:94:c4:a1:f4:1c:04:2c:16:3e:26:32:21:80:61:6c:
f0:81:a6:45:4a:9a:11:d4:fc:38:46:76:05:4b:12:6a:2d:7b:
99:86:73:a5:47:b0:68:66:a1:14:f3:21:cf:ff:be:88:ad:9a:
7d:90:cf:2a:d3:b5:0d:fa:d6:1b:ba:d1:e0:58:6f:65:f9:24:
51:eb:96:31:31:6b:f1:35:6f:24:1e:53:1e:51:82:63:fa:48:
fe:4b:f0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 23:12:58 2025 by rpki-client