
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
File: IixFhb2I-yfK3ynuW7ldZXX874M.mft (raw, json)
Hash identifier: LG/I4vbL/A6Gnyr7h+/S1jBMrjRT8kEWeAaqolW+EhM=
Subject key identifier: FE:CA:80:A1:60:AB:FB:B5:E0:F0:9C:1E:20:16:3E:98:11:3C:44:32
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial: 01992D0FB5C5BDE92DFF958B3F64AC3BF4EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
Manifest number: 0DC8
Signing time: Tue 09 Sep 2025 06:00:28 +0000
Manifest this update: Tue 09 Sep 2025 06:00:28 +0000
Manifest next update: Wed 10 Sep 2025 06:00:28 +0000
Files and hashes: 1: 3JkM8vUrkCbAmhwQjTJzai8PJt4.roa (hash: rKQRrUjGotUF8dzfvK33idpF0k0Q/0xTsyKVQjD8oBU=)
2: IixFhb2I-yfK3ynuW7ldZXX874M.crl (hash: tm/ECc3YlimDXa3PKLuKPJ+BBirqrNnISTpe2EpAz7w=)
3: PweeKQ13rUGHJC_k0tEblCu-L1Y.roa (hash: zztt4zPJkl+NH2hKKS9RN49WTNDOVklAQ3aZkKqs4SI=)
4: _BNEuQp4R33znBKyhfxbJ1you-4.roa (hash: 7/CTsMVYKAgpbst8k5D3ZojF839MnOC9rT+hRdFwdXY=)
5: mnqy6-9I7syV5NnsLpWi3fpLOC8.roa (hash: D7NIMHiclQcbihcQ+Xv2aL1MIBNF7eOXt+OvwoXOrNc=)
6: tanL-Od8fSFgUzHWSnn-wJATeQc.roa (hash: y2Z1JlU4KhHRVIn3hdXA35bEXloxesOZQwuLLa14qX0=)
7: w5Iwq69VXEy2z90HCaW7p6Vl6L8.roa (hash: boP/ufWZtG0JrM7c1Odfmtj3ELDe2un6UZNS+6F8TmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:0f:b5:c5:bd:e9:2d:ff:95:8b:3f:64:ac:3b:f4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Validity
Not Before: Sep 9 06:00:28 2025 GMT
Not After : Sep 10 06:00:28 2025 GMT
Subject: CN=feca80a160abfbb5e0f09c1e20163e98113c4432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fe:dd:89:81:40:96:dd:24:c0:a5:2b:8d:e4:
8e:97:ac:6d:ae:62:8a:61:a5:4b:9c:95:1c:d3:02:
3f:f0:b2:c0:d7:45:5d:b3:b3:9c:e8:b6:76:17:09:
db:0d:82:b5:98:fa:d3:6f:ff:fa:a8:7d:65:c5:3a:
9a:93:1a:bd:14:4e:4f:cd:a0:ec:63:e9:24:a7:f8:
b4:48:31:1a:c5:18:80:dd:4e:7b:e3:2d:95:c6:c0:
da:86:00:f0:92:50:1f:ed:64:09:18:d4:5c:43:6c:
a0:ac:bf:ad:5d:64:58:b8:66:43:70:ed:f8:c1:63:
57:cc:2b:f4:1d:a1:fc:33:51:18:9c:68:79:dc:53:
a4:51:32:01:fc:4d:dc:84:72:5b:9f:1f:01:99:ef:
e5:99:a2:7d:da:9e:ab:58:22:e5:01:89:be:64:27:
6b:c2:aa:11:16:f5:2d:ae:51:85:ea:8e:4f:74:41:
1f:18:66:03:0d:19:67:08:a6:17:6e:fa:72:63:96:
5d:ea:49:63:44:78:9c:48:ea:34:57:43:de:62:26:
ed:d3:f5:df:d7:9e:0c:69:c9:08:3c:6c:2b:13:b7:
fc:9e:cd:1c:72:26:b7:93:53:25:6d:8b:0b:9d:e4:
18:5f:fa:20:3f:a5:07:86:06:5e:60:41:63:74:a6:
18:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CA:80:A1:60:AB:FB:B5:E0:F0:9C:1E:20:16:3E:98:11:3C:44:32
X509v3 Authority Key Identifier:
keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:2e:ab:a3:0f:9d:ee:c1:5c:6e:23:fc:3c:38:07:8c:45:79:
22:a9:21:fc:bb:f9:69:41:cc:9c:ff:3f:98:87:80:f6:3d:cd:
32:b6:02:29:ea:0d:45:bd:e0:35:9a:eb:57:58:22:2e:15:7a:
c0:17:ae:5e:f4:0a:60:c0:e4:e5:d8:86:bb:4d:c1:cf:d6:76:
28:25:6e:e8:13:28:bd:08:c0:e6:85:8e:bf:18:ad:7d:3b:19:
ce:0f:77:f0:f8:a2:5e:18:53:9d:96:9c:d7:81:4e:4c:c7:1d:
7b:7a:fe:18:0b:9e:38:02:29:37:aa:07:d4:10:7d:d8:02:fc:
63:f3:70:f4:95:5e:06:da:21:ab:f2:51:30:78:d4:4c:ea:ea:
14:61:16:ea:9b:cd:82:bf:28:c0:91:42:a0:c8:1d:4e:c8:7b:
b3:ca:92:0f:c4:4b:11:77:a9:1d:c7:a3:2a:55:16:23:33:70:
ca:2f:38:cf:d9:d1:64:52:ca:ce:d1:d0:f8:8f:ee:0d:54:19:
a7:34:22:17:2a:cd:36:27:5e:5d:95:b8:6d:ad:53:b9:12:41:
8b:75:b2:ea:a7:fa:f5:35:99:df:48:0f:bd:1f:5c:85:ca:9e:
6f:9a:0c:e5:cc:43:9d:87:b9:61:99:3d:9a:66:e7:a9:48:54:
0b:cf:1d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 11:42:05 2025 by rpki-client