Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
File: iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft (raw, json)
Hash identifier: QBlidQjp5FOjYZcaAZvMYK3FK3mEs8JMKRrVZ21Qkvc=
Subject key identifier: 3E:A1:4C:65:BE:EC:FF:F7:5B:A7:0B:15:33:AE:3E:2D:EB:55:67:00
Authority key identifier: 8A:A1:FE:9A:4C:03:D0:15:AE:C9:74:E2:D2:97:09:A9:79:EB:82:F1
Certificate issuer: /CN=8aa1fe9a4c03d015aec974e2d29709a979eb82f1
Certificate serial: 0199571F697D86CBF8DA6A2CDF1BA5F6BD75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
Manifest number: 0F5C
Signing time: Wed 17 Sep 2025 10:01:40 +0000
Manifest this update: Wed 17 Sep 2025 10:01:40 +0000
Manifest next update: Thu 18 Sep 2025 10:01:40 +0000
Files and hashes: 1: 03mz0LQjzt1ORtulSs8-RgKcMnM.roa (hash: o7HH4upfGHhmSB89uCr8oSYNHbC8ZdA+S7MeD1sbYe4=)
2: 2Qr14eAD37nuU_5fo7_UeplXIWU.roa (hash: usgUNw1aFsserU4Vh7SHZUsSrOPQTJ2Wa8CALhVnFWI=)
3: XcS7NtVySUtUzIKZEZ4PM2dCvo0.roa (hash: RI3/B49k5u7aP42xJ7PCHqmPzqodpebWnjl4/ch5Tn4=)
4: iqH-mkwD0BWuyXTi0pcJqXnrgvE.crl (hash: ou8ik0dbW32jOnpNc50s4dMKth+d6iJ+uoG1n9Sb6Z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 10:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:57:1f:69:7d:86:cb:f8:da:6a:2c:df:1b:a5:f6:bd:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa1fe9a4c03d015aec974e2d29709a979eb82f1
Validity
Not Before: Sep 17 10:01:40 2025 GMT
Not After : Sep 18 10:01:40 2025 GMT
Subject: CN=3ea14c65beecfff75ba70b1533ae3e2deb556700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0a:90:eb:a3:ec:9c:b8:8a:fd:0e:cc:f6:8c:
34:57:98:4d:6a:69:00:98:e7:d6:4d:5e:a9:fc:fa:
d2:3a:70:ca:68:05:af:d8:99:77:6e:96:81:6c:10:
b6:e8:78:fc:7c:41:73:55:2a:36:8e:15:d5:d4:d2:
e4:95:bb:8d:79:a6:a2:06:7e:db:84:04:c1:c8:95:
53:0b:aa:a6:5f:cb:70:7e:25:a9:1b:e7:71:68:d9:
d7:42:4a:af:8a:60:51:c7:65:e6:05:d8:f8:58:b5:
d9:fb:ab:31:45:38:7f:d2:c4:c4:f7:c3:6b:66:f3:
99:b9:46:c1:e1:88:fa:1b:5d:68:ed:1f:79:5b:03:
f0:1b:55:5f:d8:a7:ee:3b:54:5f:c5:b5:f4:80:6f:
a9:b8:ea:1a:2e:9c:81:9c:d2:70:bf:1b:8f:41:95:
28:7d:69:f1:94:32:d3:4d:86:a3:03:4e:23:4f:cf:
92:86:1c:db:f2:b9:8a:e2:52:32:63:d5:f3:aa:36:
89:14:f2:e4:47:2b:10:16:f5:31:2e:01:3a:35:25:
11:25:61:e8:f1:78:bc:96:2f:de:92:a6:8e:3c:6e:
49:99:a9:dd:59:4b:8f:f4:68:a3:7f:af:73:55:77:
73:c8:08:09:c3:b5:55:18:c8:02:3b:e7:83:02:9f:
f8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A1:4C:65:BE:EC:FF:F7:5B:A7:0B:15:33:AE:3E:2D:EB:55:67:00
X509v3 Authority Key Identifier:
keyid:8A:A1:FE:9A:4C:03:D0:15:AE:C9:74:E2:D2:97:09:A9:79:EB:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:9e:ac:f4:04:e3:08:59:51:30:79:e2:08:26:2c:8c:32:6c:
01:9a:20:10:06:d4:7f:37:f3:99:2c:69:59:47:e6:40:6b:c2:
de:43:5b:2a:30:a5:79:c8:5a:e1:22:96:47:11:e8:7b:4a:c9:
13:97:aa:b1:46:fe:a0:0f:ba:8e:d1:02:9d:48:e5:2d:4f:36:
10:4a:b1:2b:63:9f:37:ef:94:7e:93:bb:3f:1f:b8:0c:e5:8a:
52:85:95:c7:81:0f:01:03:f0:95:4b:30:72:29:ee:97:67:b4:
95:57:c9:50:9b:f6:71:9f:35:46:f4:6d:12:18:79:fa:b9:8a:
52:89:d1:37:d7:87:16:12:22:18:cc:aa:2c:7b:8d:d2:8a:29:
f1:30:35:9e:1c:e2:6d:f4:0e:0c:ad:e1:0e:01:0a:9f:3f:e0:
de:2a:ba:6e:79:d2:a9:b7:d9:01:85:64:99:44:a0:c7:75:cc:
12:9a:2e:ff:99:9c:71:f3:57:00:ce:20:8f:23:76:0a:69:ac:
bc:fd:9d:62:4f:99:3a:ab:2e:59:3f:c0:40:d9:88:59:f2:11:
4f:1a:36:38:5d:89:76:8e:0b:ab:0f:de:17:39:2e:52:1e:57:
f2:bf:0e:7f:a1:4c:a5:ca:a7:52:05:ec:6f:08:a9:0b:db:07:
65:41:e6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 19:57:33 2025 by rpki-client