Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
File: iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft (raw, json)
Hash identifier: XnUN844Wrq6gXFJE9EvchgnQ/ZVtA20eDa1Hy19KF4A=
Subject key identifier: D5:1B:6C:2E:A1:E7:A3:31:3C:FD:E0:2C:A6:38:9A:20:5C:07:B9:6D
Authority key identifier: 88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C
Certificate issuer: /CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c
Certificate serial: 019A71EEB60CABCFBE15CD06CDCEC6FCF11E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
Manifest number: 142E
Signing time: Tue 11 Nov 2025 08:01:00 +0000
Manifest this update: Tue 11 Nov 2025 08:01:00 +0000
Manifest next update: Wed 12 Nov 2025 08:01:00 +0000
Files and hashes: 1: PMwAzTvxWSjXFX28MV2s8k9HrhI.roa (hash: t71gV8OtnRcF1xNLqmy1I40UHYgIb7svkEMIzmfxErA=)
2: iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl (hash: azhwNZjnMHFBoI92nfwVuHfn5NsEPRuIurwTtzWrbMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b6:0c:ab:cf:be:15:cd:06:cd:ce:c6:fc:f1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c
Validity
Not Before: Nov 11 08:01:00 2025 GMT
Not After : Nov 12 08:01:00 2025 GMT
Subject: CN=d51b6c2ea1e7a3313cfde02ca6389a205c07b96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:59:a5:5b:8a:5f:20:be:24:67:13:91:52:10:
c9:ce:2a:c9:87:68:2c:ad:8f:b1:43:0e:4b:6d:25:
44:3f:38:b4:93:b0:3b:69:2d:86:27:58:4a:a2:5f:
d2:c7:d3:ea:0c:14:6f:8d:9a:76:30:91:a2:e1:97:
3e:45:5d:04:e0:6b:a7:7c:27:34:24:02:96:24:29:
6f:91:f3:e9:13:49:b4:e0:a9:51:2e:13:b5:eb:f0:
fe:cb:4f:1d:b9:3a:78:34:d5:e5:af:13:19:67:af:
d5:41:f4:67:71:cb:0c:79:fe:29:a8:d9:6a:25:d0:
f8:77:6a:ed:d6:15:c3:59:60:c0:3f:0f:ef:87:28:
11:07:fa:96:3b:04:38:5f:e3:7c:25:d4:69:d5:db:
73:91:4f:15:b1:75:d1:a1:67:68:6b:48:5f:49:74:
6e:2b:22:1c:75:01:2d:87:c5:dc:f3:87:5c:9a:71:
23:5d:cd:c6:4f:60:4e:9d:aa:b7:37:bb:14:17:e4:
57:b6:0c:df:4e:8c:c6:f7:31:85:4b:6f:f4:ef:dd:
eb:54:8c:e6:1d:a7:72:04:17:06:7f:aa:d3:7b:ec:
65:81:56:0e:cd:e4:25:67:e7:21:88:4e:0a:1a:f2:
34:94:47:fd:71:33:01:f0:e5:67:8a:7f:4b:6d:92:
b3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1B:6C:2E:A1:E7:A3:31:3C:FD:E0:2C:A6:38:9A:20:5C:07:B9:6D
X509v3 Authority Key Identifier:
keyid:88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:58:93:33:64:a9:62:e7:37:27:c6:92:fd:80:f9:a1:bb:2e:
6b:94:59:cb:29:3d:16:49:26:9a:93:a5:49:f2:d6:2f:0d:a7:
b7:7c:78:6c:85:f2:2c:51:1b:81:90:72:ef:34:d1:23:a8:ab:
de:d9:99:6e:bd:94:9f:f6:a2:03:af:58:c0:96:86:1d:9d:0c:
da:e7:90:ef:f8:f3:7e:2d:5f:9a:aa:64:74:97:b3:bf:0e:ab:
4a:56:30:c1:e1:a1:24:6a:b3:e6:61:7b:73:26:58:a7:4c:36:
22:93:c4:ef:32:02:f9:99:89:05:e9:99:65:d6:66:9a:44:3f:
d3:26:30:f2:61:f0:58:1c:ae:9c:32:65:94:ba:61:95:9b:0f:
e8:05:51:3c:aa:2c:81:06:b0:62:d7:8c:05:57:45:1f:ac:9e:
7e:e2:39:53:92:6c:10:6a:7b:90:97:6b:eb:f7:8b:95:fc:66:
66:de:5a:2c:69:d0:70:ab:3f:04:38:2f:c2:8b:16:0f:51:5b:
eb:83:cb:82:da:15:ba:a0:57:62:5b:39:c5:c4:c9:3b:28:f5:
b6:ed:6e:05:df:fd:52:0e:43:b2:1c:c3:f8:b6:08:46:5f:3e:
f5:6d:0b:c7:47:f7:83:7c:bb:e1:e4:ac:b6:10:da:a2:ed:0a:
5a:1f:c5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:08 2025 by rpki-client