Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
File: iC-gGQL06MNH8hFuRkXaGmtOCWI.mft (raw, json)
Hash identifier: ajNP8jTx2+TM4U9bWIrdz5nmfIbWhfvaU2IcNXDPACM=
Subject key identifier: 39:D6:4C:AE:7E:59:7C:02:F2:B6:7F:00:BB:DE:F8:A2:D7:C4:4E:53
Authority key identifier: 88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62
Certificate issuer: /CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
Certificate serial: 019A18E23C211B698FD6570991A062B8F6BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
Manifest number: 14B1
Signing time: Sat 25 Oct 2025 01:01:10 +0000
Manifest this update: Sat 25 Oct 2025 01:01:10 +0000
Manifest next update: Sun 26 Oct 2025 01:01:10 +0000
Files and hashes: 1: ENS55DqOSCIACYKV88lsj2-9Qt0.roa (hash: DHbJggMAa2s1Y5SQ9CvEy1KweRl3G7QnT7Ch9hrVq4Y=)
2: Eh5XcZTOlwwjICZ8D5e6YinN9to.roa (hash: i3hRAhyXtajePfAySoecKpTzxKsfIbEuHCpoNygQqoo=)
3: iC-gGQL06MNH8hFuRkXaGmtOCWI.crl (hash: sA73WqFVJCB0Az63ZQxadSl1DdtPrJIhmfrOpjaVBzo=)
4: rqFZA9uVkdGBL0x6Ei0L9MHEurQ.roa (hash: L0IGvxVXiMO117M8Wm4IgrHBTq1xuhWbcFCP05D3zJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 17:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:e2:3c:21:1b:69:8f:d6:57:09:91:a0:62:b8:f6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
Validity
Not Before: Oct 25 01:01:10 2025 GMT
Not After : Oct 26 01:01:10 2025 GMT
Subject: CN=39d64cae7e597c02f2b67f00bbdef8a2d7c44e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:50:97:1e:8a:82:fa:4a:a9:95:82:6f:c1:cf:
fa:55:81:44:72:9e:85:c9:51:08:2e:fb:8c:a0:2c:
75:69:e6:4b:5d:89:76:56:84:e4:52:c5:64:e2:c8:
d7:ba:1d:b6:eb:60:c1:34:64:c2:e6:5c:ac:06:af:
24:11:8e:0f:0b:0b:e8:da:26:ff:4f:39:29:8d:6c:
31:e0:0e:b3:30:98:b6:33:e1:f4:9e:f0:2b:21:b4:
3e:ff:3d:71:c1:69:53:3d:1e:42:c2:67:a0:84:dc:
64:57:b9:7d:bd:3b:08:ae:12:69:f6:56:a0:38:5b:
4b:af:24:6a:93:de:92:07:a9:69:15:77:bf:52:5a:
8c:69:a7:c8:bf:ee:70:af:31:07:dc:b3:b9:fa:71:
94:af:a8:51:0e:f9:eb:f5:27:c5:2d:98:08:54:0c:
a6:32:3e:35:54:e7:a9:9f:d2:71:b6:b7:19:fd:c4:
e5:40:11:33:12:76:2c:2c:74:39:65:94:b1:7f:b8:
ed:24:21:e0:71:cf:1a:f8:e7:c3:b2:e3:f7:02:5b:
90:8f:26:73:55:af:a2:13:14:92:e2:b9:d7:ec:7e:
c2:f9:14:b7:ae:ec:38:ea:de:35:7a:f3:a4:47:37:
db:ac:0f:ad:5b:92:95:af:88:5e:1f:9c:65:b8:25:
eb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D6:4C:AE:7E:59:7C:02:F2:B6:7F:00:BB:DE:F8:A2:D7:C4:4E:53
X509v3 Authority Key Identifier:
keyid:88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c0:bd:9d:b6:76:0e:32:fd:82:3e:1e:35:f1:1f:50:63:99:
4b:39:b9:8f:80:83:e0:f2:5e:7b:80:25:d4:cd:5f:c6:57:e1:
9e:67:0e:a7:05:b5:10:32:ac:ea:56:91:b7:d7:0f:82:00:16:
2c:8b:e0:03:b7:ec:d8:72:e0:f3:45:f6:08:23:4b:e3:51:3d:
fc:9a:48:c2:8e:21:ee:f5:f7:85:60:1e:c4:b9:94:11:81:bd:
f3:b6:93:a0:47:1c:7b:f3:bc:9e:9d:6a:ed:5d:18:5b:17:1f:
01:00:35:6e:a5:8a:fb:8a:49:3d:f0:c1:b4:30:e4:4a:c7:1c:
34:7d:75:52:73:8c:2e:ff:f4:1f:b9:09:46:87:83:46:13:db:
07:7c:a3:6e:80:53:f1:70:7d:f7:72:f7:bd:40:b0:41:6b:17:
16:33:01:ef:11:13:fb:9b:0e:86:ac:d5:21:58:3b:3e:97:a9:
fd:68:14:5c:b4:a9:1e:0f:92:c2:e1:49:74:79:7b:72:f1:43:
b4:a2:7d:80:6c:66:ae:82:18:68:13:e8:16:0f:63:e9:ab:08:
7b:da:40:02:f4:9c:02:1c:0d:b5:41:ce:39:b9:09:ec:e0:18:
33:11:bc:72:8f:9e:97:69:5e:02:c6:03:a3:04:31:76:f6:59:
65:a9:4e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 03:01:47 2025 by rpki-client