Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
File: iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft (raw, json)
Hash identifier: QTYYLFjrbzeMEXaAsR8rv6Su/8WIaIfFaeUKwkf96dM=
Subject key identifier: EF:54:E2:31:57:15:8A:AE:4D:8F:6A:7E:BF:9B:7E:E5:07:34:9F:58
Authority key identifier: 88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11
Certificate issuer: /CN=88fc58875608970d9a728347d05ef00d0f1d5611
Certificate serial: 019A1FF63993CD42422D6416891C52F2AF43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
Manifest number: 1060
Signing time: Sun 26 Oct 2025 10:00:21 +0000
Manifest this update: Sun 26 Oct 2025 10:00:21 +0000
Manifest next update: Mon 27 Oct 2025 10:00:21 +0000
Files and hashes: 1: glHtLecTNUxeR4oxupaJRTlQLos.roa (hash: tjH899kftJHgu4JmkbHHTA84WKPpmWW00cLzLNo7wBg=)
2: iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl (hash: ykDo8TH9q2B4vQ/49F4dwJciVJRDEF2AEa+aBFaYWOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:f6:39:93:cd:42:42:2d:64:16:89:1c:52:f2:af:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fc58875608970d9a728347d05ef00d0f1d5611
Validity
Not Before: Oct 26 10:00:21 2025 GMT
Not After : Oct 27 10:00:21 2025 GMT
Subject: CN=ef54e23157158aae4d8f6a7ebf9b7ee507349f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b1:07:b8:91:75:f5:e7:62:44:6b:09:02:40:
7d:c0:ca:b6:2d:92:87:c1:62:78:92:db:11:e8:4a:
77:48:bc:76:27:3f:3f:35:b3:e4:cd:23:dc:e8:f9:
e3:2d:0a:1c:a9:3a:ee:13:bb:88:f9:e4:b3:ab:d0:
e7:61:83:41:3b:58:04:14:10:df:de:9b:59:3e:9f:
c7:b5:93:19:f0:76:25:90:23:1c:22:9b:c6:b3:fc:
a7:40:27:59:d4:92:aa:b3:0c:d4:b0:fe:80:2c:64:
11:66:1f:38:87:48:01:82:9b:c2:ad:a1:f6:b4:35:
20:a7:73:a8:1f:f6:05:fe:a8:e4:ff:5d:56:cb:d2:
79:46:6b:3d:0e:c2:bd:a2:41:62:3b:b0:54:30:c6:
4e:51:56:d0:1a:6a:b9:fc:90:02:42:a9:c1:1c:90:
d6:e9:c9:dc:62:ef:b1:38:88:65:51:6a:8a:0b:31:
2f:5e:e3:4a:40:6f:e5:9a:87:7f:86:97:dc:5d:fa:
90:30:b4:b7:06:7f:89:a8:9c:17:a1:3d:f5:9d:cf:
2e:29:7c:49:63:4b:b1:e8:db:91:ce:b9:79:be:a2:
0c:1b:2c:2c:ec:b4:52:dc:dc:65:f4:a0:ec:53:9d:
7a:25:12:7c:da:54:dc:7f:03:81:ad:ac:b7:64:ee:
49:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:54:E2:31:57:15:8A:AE:4D:8F:6A:7E:BF:9B:7E:E5:07:34:9F:58
X509v3 Authority Key Identifier:
keyid:88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f7:5c:14:6b:33:95:b4:f8:49:d3:f8:7e:0d:e1:05:af:0b:
39:43:74:84:30:8d:b5:0b:33:98:9b:6a:df:c2:ef:7d:2c:34:
3e:35:9d:2d:43:9b:f7:ec:75:34:8c:c6:42:65:68:c2:73:57:
6f:34:67:62:b7:25:70:1b:1d:bd:a4:ad:b0:6f:09:be:91:89:
67:e5:63:6a:14:0b:42:02:97:77:c5:90:f3:d9:4c:62:d9:16:
79:4d:6c:11:59:bf:79:14:7c:c8:6a:7d:2b:1b:c1:6d:f0:68:
38:d8:36:80:ee:3a:40:8f:28:b7:fe:62:96:ad:b9:e4:7b:ef:
7b:2a:eb:ad:fa:e4:ba:2a:f9:32:4e:7a:8b:55:f4:50:b8:74:
46:91:20:9d:4c:2a:60:7d:f8:20:0b:39:a5:4a:b2:54:66:29:
3c:1b:32:4f:22:07:02:94:28:1f:03:16:01:63:fe:bf:e4:5f:
b3:4f:4a:21:d4:77:7a:35:86:40:bd:5c:ab:1f:d6:5e:bd:40:
76:dd:97:14:14:06:16:c4:50:60:fc:ab:06:68:c9:b3:c9:1a:
23:76:61:80:f7:4c:84:d9:8c:fc:a3:60:6a:50:e6:ca:7e:e7:
2c:9e:c9:b6:1e:c6:8c:94:3e:32:56:85:92:1a:45:fe:b5:ed:
e3:d6:c9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:07:05 2025 by rpki-client