Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
File: iaQ4np9NXMjEhtaCK-8fRO987UI.mft (raw, json)
Hash identifier: bjcR1mgt8HRRFJIfdQXDftCRJKkmz1MFphDC/TCzkvM=
Subject key identifier: 12:13:1F:BE:A8:9F:2F:03:F7:D9:5B:79:BD:CD:D7:BD:7B:D7:44:61
Authority key identifier: 89:A4:38:9E:9F:4D:5C:C8:C4:86:D6:82:2B:EF:1F:44:EF:7C:ED:42
Certificate issuer: /CN=89a4389e9f4d5cc8c486d6822bef1f44ef7ced42
Certificate serial: 019A7225F049ED2677865D074CDD74BCF302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
Manifest number: 022D
Signing time: Tue 11 Nov 2025 09:01:20 +0000
Manifest this update: Tue 11 Nov 2025 09:01:20 +0000
Manifest next update: Wed 12 Nov 2025 09:01:20 +0000
Files and hashes: 1: 8ZpplWrhbVda_aSYHx2pbbAdBWI.roa (hash: KC0Osg8WEd8lVzUhmWMq6YDl/x9/ZL2h5Pd6qvq9PbE=)
2: iaQ4np9NXMjEhtaCK-8fRO987UI.crl (hash: N4d34DLXclbpmOH+x7ugCbDvK9xW8TpmnOH2Kvvq5lQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f0:49:ed:26:77:86:5d:07:4c:dd:74:bc:f3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a4389e9f4d5cc8c486d6822bef1f44ef7ced42
Validity
Not Before: Nov 11 09:01:20 2025 GMT
Not After : Nov 12 09:01:20 2025 GMT
Subject: CN=12131fbea89f2f03f7d95b79bdcdd7bd7bd74461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6b:2d:f2:3e:3b:e8:5b:34:f9:74:34:39:91:
ce:41:98:9b:63:53:a5:11:31:e7:52:6c:15:19:1a:
ff:44:68:08:1a:bb:de:c7:9c:a4:5a:4a:c8:be:de:
b5:6c:6d:5f:ad:2d:4c:97:84:2f:e7:1f:0f:88:4f:
08:f9:04:48:7c:af:a1:c2:20:36:46:31:51:14:70:
d4:a0:f2:a5:3b:6d:2b:55:86:df:4b:06:c4:1b:c0:
cb:bf:13:97:9a:73:e9:13:9c:e8:96:40:03:09:5e:
58:0b:b6:ff:07:74:49:b2:1b:68:61:f0:7d:71:2d:
4c:a8:7f:c3:92:d9:81:4c:ee:cd:42:68:76:79:e7:
06:9a:56:b0:b9:17:53:29:6c:4a:e6:ca:e6:43:79:
4c:b7:cf:12:c1:da:45:d4:52:2a:d6:91:60:dc:78:
c0:b2:d6:1d:18:02:23:d4:9c:63:9a:a9:a9:cc:b5:
d5:3c:14:3c:09:d1:a8:0e:b2:11:b1:69:8a:85:e5:
10:48:2f:96:5a:fb:3f:8e:cf:a4:6f:d4:b0:b2:26:
f4:5b:35:77:95:6f:5d:4f:c4:d4:d7:3b:d7:de:05:
12:c4:f4:c8:65:d1:f7:0e:9b:0f:fc:d9:c2:54:af:
74:5c:8e:57:af:5f:00:9e:83:b3:59:45:b4:34:cb:
d2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:13:1F:BE:A8:9F:2F:03:F7:D9:5B:79:BD:CD:D7:BD:7B:D7:44:61
X509v3 Authority Key Identifier:
keyid:89:A4:38:9E:9F:4D:5C:C8:C4:86:D6:82:2B:EF:1F:44:EF:7C:ED:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:86:3e:f7:75:09:d8:c9:3b:d9:56:c5:e8:46:fb:bb:91:80:
95:05:48:66:33:f8:0a:88:8d:75:a8:96:c2:e6:d0:89:34:b6:
ec:fd:c5:6d:17:26:6e:53:9d:ec:43:5b:a6:ad:70:51:1b:86:
2c:da:ee:b9:c3:8a:d1:0a:3f:f2:41:9c:97:34:d4:f6:ed:06:
c7:bd:c0:92:0d:02:0d:0b:10:d9:de:9a:5a:25:1d:a6:23:7b:
f5:19:3e:8b:2d:d9:50:22:8d:e0:4d:9a:77:1b:29:7a:af:dd:
ec:2a:85:f1:1a:98:d3:45:f8:86:e0:c0:6f:df:91:89:d9:8a:
cf:ca:b8:5a:6d:a9:50:29:f5:27:9f:5b:85:97:63:e3:19:f2:
5b:b4:01:2d:9a:1d:1a:73:d3:0c:e6:77:f6:2b:a7:41:3a:12:
6b:89:16:da:2f:e4:83:3b:24:7d:2f:22:30:14:d9:be:4e:7f:
69:fc:cf:2d:d4:c9:42:d0:f5:a5:c4:76:5a:0f:e3:24:23:c7:
13:82:f6:ff:17:78:28:ae:6c:67:6b:6f:47:38:b2:c1:9c:9d:
52:23:7b:93:0d:43:69:6a:b4:19:7f:16:80:9f:02:67:7f:de:
47:fe:a7:89:05:de:9d:40:93:ac:b9:d0:20:1b:3e:62:4f:c4:
33:63:71:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:49 2025 by rpki-client