Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
File: iBD8MZigq5lkeHfb5XJeBc7gE_A.mft (raw, json)
Hash identifier: TKSub4ZBUQPXMjHSUIw6+RFPvTQvcLeAuX4gYI7f1W0=
Subject key identifier: B9:E1:94:D7:D7:84:D4:D9:95:FB:21:F2:3F:79:2E:4F:7C:D1:48:FC
Authority key identifier: 88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
Certificate issuer: /CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Certificate serial: 019A2D0D409AA528AFE6171F7EC6868DED25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
Manifest number: 0F6E
Signing time: Tue 28 Oct 2025 23:00:34 +0000
Manifest this update: Tue 28 Oct 2025 23:00:34 +0000
Manifest next update: Wed 29 Oct 2025 23:00:34 +0000
Files and hashes: 1: hGQAPrEg70xi3dTAsr6AkflPwzQ.roa (hash: fq94rKVVa6d3kPByOte4hBdKvb2vGf30OOEdIeQW7uc=)
2: iBD8MZigq5lkeHfb5XJeBc7gE_A.crl (hash: TY1P8iQV4wYx4OjDXrXBnb2W/rLITHbQic1raScyLGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:0d:40:9a:a5:28:af:e6:17:1f:7e:c6:86:8d:ed:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Validity
Not Before: Oct 28 23:00:34 2025 GMT
Not After : Oct 29 23:00:34 2025 GMT
Subject: CN=b9e194d7d784d4d995fb21f23f792e4f7cd148fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3a:b0:ff:14:a1:2b:96:12:61:44:62:df:ae:
34:9a:9b:cf:cf:27:90:4f:50:ab:7b:67:85:6c:38:
b7:5e:78:fd:d1:ab:3c:64:35:49:ed:e9:1c:3b:fb:
fc:97:52:7e:76:79:15:a9:45:0c:8e:ac:2c:0f:ea:
a2:26:40:6e:10:a8:d6:99:cc:19:de:19:0d:46:4b:
35:dc:27:c6:7c:d1:b4:9d:5b:9c:f0:0a:80:b1:f7:
85:63:03:da:e4:03:fa:e2:e9:77:54:f1:67:78:4c:
72:53:8d:68:77:86:f9:57:f1:d8:ca:50:89:1f:2c:
31:88:b3:40:0a:40:29:3d:d1:f5:fc:28:97:3a:f9:
31:53:d0:54:77:8d:7b:d5:5f:fc:b9:36:b2:7e:73:
2d:5f:ca:1f:67:08:86:69:57:3a:bf:0a:2e:70:6f:
5e:ce:8d:c0:18:4c:30:d3:ee:39:7a:a8:c7:f3:a2:
f2:ca:2a:19:ad:8f:ac:4b:89:83:60:87:2d:f5:c1:
5f:17:f6:bd:8b:b9:a8:5f:80:2a:dc:40:a7:aa:cf:
e2:88:12:77:9b:94:78:f4:37:af:3a:3b:b9:d9:17:
23:70:57:cd:dd:b6:a5:f3:66:f3:e5:5f:05:e3:ce:
82:9c:e2:3d:a7:6a:9a:57:6c:8d:b2:7f:64:fd:5f:
36:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E1:94:D7:D7:84:D4:D9:95:FB:21:F2:3F:79:2E:4F:7C:D1:48:FC
X509v3 Authority Key Identifier:
keyid:88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:5f:59:28:ca:1d:c3:57:b3:3f:2b:0f:7a:d5:ef:2a:59:3b:
4f:78:32:0d:b0:6b:85:c6:d5:6f:e0:20:27:38:c2:12:21:23:
2c:ca:b5:c2:97:5c:c0:92:12:93:28:53:2f:d9:f8:09:02:83:
14:ae:ef:b1:48:91:46:37:94:3e:8e:ac:01:c3:f9:82:39:ec:
56:dc:96:33:3d:fc:6c:ec:de:63:23:fe:7a:3a:e7:bf:d9:e1:
86:85:9f:46:0b:8a:95:ab:b8:6f:8c:d6:f7:b1:88:21:b2:fb:
e2:f4:e5:3f:53:12:d6:81:ca:2e:70:a7:27:86:64:45:5d:ec:
59:5b:3d:fa:a0:c7:b4:0f:66:e7:95:f4:70:db:89:d9:f5:b4:
d3:08:0c:5c:b2:b3:6f:c8:77:70:e8:ab:6a:10:82:70:76:e5:
b4:51:1e:d3:d8:60:96:54:4d:bd:e9:e2:47:6a:8c:91:2a:fa:
11:54:1b:01:7b:04:c1:ae:fd:7a:38:a7:38:28:35:e7:6b:c2:
a6:aa:1b:82:02:ef:02:ae:96:a1:30:cc:31:e1:44:fa:f4:da:
c0:11:6a:32:59:dd:be:dc:5c:95:8c:06:c1:a4:eb:92:07:28:
1d:37:c5:fc:88:68:f5:9a:fe:fb:5a:e5:e4:8e:e3:bd:3a:af:
0c:a6:de:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 09:18:15 2025 by rpki-client