Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
File: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft (raw, json)
Hash identifier: oxfkcWbBhrV7uaI+tGk/eSlzBzevjd4kc2dv2hsXjIc=
Subject key identifier: 88:52:00:25:C5:3F:75:23:D3:51:B2:35:C2:5C:E8:E2:26:77:5D:B2
Authority key identifier: 88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
Certificate issuer: /CN=88e719f426793b1e9063771460abd311a3dff116
Certificate serial: 019A4D73B95097B4DE6ABF5AB31EAF5C76F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 06:00:20 +0000
Manifest this update: Tue 04 Nov 2025 06:00:20 +0000
Manifest next update: Wed 05 Nov 2025 06:00:20 +0000
Files and hashes: 1: 2JOqb_FcM3JCaikWzh1QzLM3NNs.roa (hash: isQtSQoVI4VnIJhK4p6fvX5w7lFtKPVqkwJW/rfKCwA=)
2: KkqNZ54Qewj5mCBLo3rtzCSFt7g.roa (hash: Rbv/KvRW9C13yYdCBXyUxqLUAuWNRC3szrxFy+NiiA8=)
3: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl (hash: Awji3rSp1TStQ6PE2pBiIEjrG1JfP2BC44iEDXB+ch0=)
4: soZKqGzihNQNfxzcrDh_Qn-1Tnw.roa (hash: +H581vOHkrLuu+UEmJR0K8H+S0wh9yACSCN32HI4jio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:b9:50:97:b4:de:6a:bf:5a:b3:1e:af:5c:76:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e719f426793b1e9063771460abd311a3dff116
Validity
Not Before: Nov 4 06:00:20 2025 GMT
Not After : Nov 5 06:00:20 2025 GMT
Subject: CN=88520025c53f7523d351b235c25ce8e226775db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c4:bc:52:b9:c6:ee:39:6d:65:0e:9b:b2:50:
2c:c2:07:8b:fb:57:31:d4:9c:00:06:62:92:b8:30:
f2:c7:1c:c6:bd:48:0d:89:b6:8a:90:63:3a:e0:ab:
57:5b:e0:63:76:49:68:ee:5c:ab:6c:e8:26:ce:c4:
86:56:a8:e3:8b:cf:40:bd:ae:d9:c3:3a:10:4c:64:
03:3a:bb:5f:2b:44:dc:c8:4b:09:83:5d:2b:20:2b:
19:a7:c2:93:f5:28:4c:f0:c4:fc:63:47:f3:ad:44:
e7:c1:ee:b9:63:52:c7:6a:57:df:51:8a:3f:a7:df:
66:13:bb:07:76:c1:a5:6e:ba:d0:7b:e9:02:0e:58:
33:0c:90:9c:97:0b:10:84:4d:1d:c7:f9:3a:37:b7:
92:35:16:e3:36:22:69:17:02:3c:09:fb:d3:f0:42:
88:d6:3a:ae:3a:61:57:a6:9f:31:45:87:43:a2:a7:
5b:43:9d:ef:b1:86:45:a3:d0:ef:fe:a3:a3:1b:04:
7c:30:c4:ed:83:b5:cf:e3:60:4a:83:20:30:0e:9b:
b6:72:26:de:9c:88:c4:7b:20:0f:6e:ac:c9:00:08:
b2:d2:ef:a7:31:f7:ac:51:b3:52:7b:8b:dd:1b:0a:
f1:8a:78:0f:1f:42:f8:24:fa:6e:71:2a:ab:d4:da:
1c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:52:00:25:C5:3F:75:23:D3:51:B2:35:C2:5C:E8:E2:26:77:5D:B2
X509v3 Authority Key Identifier:
keyid:88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:90:cb:e5:17:fb:2e:87:6c:24:84:ae:46:36:d1:90:b9:dc:
e9:ca:1c:be:d4:82:aa:91:9c:ce:15:f4:b0:36:e5:a6:3d:f9:
7e:62:39:fb:9b:23:2d:a3:89:fd:92:60:f0:aa:20:e2:85:3f:
10:a1:f2:ea:b2:0e:5d:20:3f:b7:d8:1a:e7:45:67:ef:a7:32:
f3:b7:ed:e3:4c:ed:cb:71:f4:ab:c5:6e:f5:c8:c0:bc:d4:ab:
b4:48:19:d5:6e:80:58:37:7b:40:56:b0:ab:53:38:f1:a0:1b:
a8:20:6a:df:02:48:66:b8:16:90:6f:5c:7e:6b:10:0b:d7:47:
75:1e:c6:1e:89:85:7b:50:c4:0d:59:31:ff:1c:52:6c:3f:f6:
ec:0e:e0:ee:8d:62:57:cb:93:bf:f5:8c:25:21:e0:6f:fd:78:
cf:81:75:7d:75:c9:49:76:03:87:6a:5d:24:a5:d2:f4:33:d4:
79:c1:47:57:ed:ac:cd:5e:71:47:fa:dd:8b:c9:8d:84:93:80:
01:fe:47:87:b6:5e:3c:fc:96:c6:5a:42:b5:1d:f3:99:1c:c7:
0e:77:c2:9e:3d:ef:bc:e2:3f:53:af:45:b9:9e:94:83:bc:6b:
07:b6:c7:0a:ce:70:d1:f6:4e:4c:66:1f:eb:db:38:e1:0b:e9:
48:6e:32:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 09:42:09 2025 by rpki-client