Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
File: iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft (raw, json)
Hash identifier: X93ybSH1dNxElumtWZbb9rGbnrVBaMBs+VOU+iQe2gQ=
Subject key identifier: 01:39:BC:42:9B:2A:1B:7D:77:1C:8D:94:67:D2:B8:C9:7D:29:20:13
Authority key identifier: 89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67
Certificate issuer: /CN=896d5866c35093352e7b9e0762c591e08e50f967
Certificate serial: 019A1EE38A7B6A1D58BEEB43358A40E606C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
Manifest number: 16F4
Signing time: Sun 26 Oct 2025 05:00:19 +0000
Manifest this update: Sun 26 Oct 2025 05:00:19 +0000
Manifest next update: Mon 27 Oct 2025 05:00:19 +0000
Files and hashes: 1: f3yhbMEZs7I1gQ_x-WS9JokM5lk.roa (hash: xqftVmU39BBrdEog4IYR5U/f0pT7cwZITaktIflO1FQ=)
2: iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl (hash: IxtZGTPDV1is6xx76B0Wnwdzk3z1p+6vt7krTVOewa0=)
3: t3t-pfr4z9GKajIg-Z7_EPV6sNk.roa (hash: uoY/pW5jXoKIZBICE3itvMsyp7LXbbd5XR575s2v/qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:e3:8a:7b:6a:1d:58:be:eb:43:35:8a:40:e6:06:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896d5866c35093352e7b9e0762c591e08e50f967
Validity
Not Before: Oct 26 05:00:19 2025 GMT
Not After : Oct 27 05:00:19 2025 GMT
Subject: CN=0139bc429b2a1b7d771c8d9467d2b8c97d292013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:50:ee:b2:d9:fc:d0:91:65:69:d3:ae:59:b2:
5e:c7:5c:77:e9:d3:db:0a:39:ba:7a:9f:d3:8f:c1:
a7:d4:b6:c4:ba:0c:d4:c8:e1:99:5a:74:44:4c:37:
a9:ca:60:d8:37:7b:65:02:44:82:78:86:2d:f7:a6:
85:a0:1b:7c:3f:78:15:82:96:53:1c:2b:09:98:93:
bb:75:f2:ab:d1:b9:b5:67:1a:67:16:b7:37:35:8f:
66:fb:12:c1:39:65:ec:27:23:a9:ec:82:e6:af:74:
51:c4:fc:35:c2:03:b1:90:4b:29:fe:10:50:65:0f:
ea:f0:00:01:2e:c5:19:ba:1f:29:7a:05:68:ef:3f:
21:22:85:fd:c1:f0:2a:64:5b:13:7f:53:67:4b:77:
80:ff:7f:f4:7e:b7:63:d9:a2:30:5c:1b:49:71:7b:
33:12:80:f4:00:70:a6:6f:ab:3d:5a:c7:6b:6b:77:
84:5e:22:2c:e9:9a:66:fe:fb:b9:59:d0:4f:a8:ef:
1f:f9:f4:46:f1:db:d3:87:ac:18:fa:2c:ad:56:98:
2c:0e:2f:fd:1b:48:37:db:e4:14:38:c0:ba:7d:2c:
f5:1c:96:7c:28:29:f8:bf:ba:c4:dc:43:42:35:d8:
0d:93:4e:49:53:d0:00:41:d0:22:66:89:55:1b:02:
52:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:39:BC:42:9B:2A:1B:7D:77:1C:8D:94:67:D2:B8:C9:7D:29:20:13
X509v3 Authority Key Identifier:
keyid:89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f4:ff:06:09:ba:0f:cf:eb:3e:af:a4:59:b3:b6:87:a9:50:
fc:7f:d9:aa:fc:9c:ff:39:37:f9:cb:51:e5:8f:63:19:fe:89:
cc:23:09:68:42:e2:4e:3b:76:67:38:5b:45:4d:d9:9f:9f:81:
d1:ec:78:e6:90:6d:47:bc:a7:00:7a:ad:75:b5:fd:8a:e1:78:
3a:a8:91:f9:b1:2e:8d:2c:53:47:7f:09:17:e5:4a:43:2e:d1:
cc:62:36:a2:b8:4e:43:b5:22:6c:bc:70:fc:be:38:a8:72:a3:
3d:da:09:41:fa:ad:d7:8b:30:52:26:f9:e4:a8:ba:a1:95:a7:
7f:2a:d3:d9:08:f1:d7:54:e3:a2:ec:c2:54:63:9d:b6:33:45:
19:47:77:2c:b5:d5:7f:d4:29:3c:fb:8e:1a:7e:87:fe:b1:c3:
e5:01:ce:90:20:c7:e8:55:74:71:6b:3a:1d:8b:ac:f9:cd:34:
c7:08:f5:e1:3f:3d:3c:25:9e:9f:91:33:90:79:52:42:2b:66:
fe:65:35:7f:13:f8:3a:39:01:71:98:60:65:8a:8a:c3:48:0c:
f2:b2:c6:33:99:8f:a7:22:22:2a:eb:ef:d2:1f:9d:8f:40:89:
51:cf:2b:4e:e8:b4:e7:e1:84:4d:f5:f8:dd:6c:88:90:42:13:
de:58:8c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 12:10:08 2025 by rpki-client