Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
File: iiQuCntgz9644OA_-a7DPlq30sg.mft (raw, json)
Hash identifier: UevypsW5UbnMYe63x3jOP4469Sed9833l3JqsGwc9OY=
Subject key identifier: 81:CF:C5:E2:14:21:E5:E9:4A:B8:6E:83:0B:0A:A1:4A:3F:B4:23:59
Authority key identifier: 8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
Certificate issuer: /CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Certificate serial: 019A1BABBB00B0CA53061A92002C499BF51B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
Manifest number: 0B00
Signing time: Sat 25 Oct 2025 14:00:30 +0000
Manifest this update: Sat 25 Oct 2025 14:00:30 +0000
Manifest next update: Sun 26 Oct 2025 14:00:30 +0000
Files and hashes: 1: iiQuCntgz9644OA_-a7DPlq30sg.crl (hash: giSCYwsCuSU3+GWgzOM/GK2G7/7vXbTz1Jr0hiE9M/Q=)
2: siJjmLBZP9diFC7BYX9p7SQAfZw.roa (hash: Gsh0pNObMeNVow5ebFzkqw16IE2NyBLNNUC8IDCqBag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:ab:bb:00:b0:ca:53:06:1a:92:00:2c:49:9b:f5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Validity
Not Before: Oct 25 14:00:30 2025 GMT
Not After : Oct 26 14:00:30 2025 GMT
Subject: CN=81cfc5e21421e5e94ab86e830b0aa14a3fb42359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:36:60:bb:f3:57:b7:87:dc:a2:31:ee:6d:4a:
28:46:cf:ed:dc:4f:70:8f:6e:c7:1b:c9:9a:08:c6:
38:3f:b0:a4:0d:b3:dd:b0:21:62:0f:6c:0e:c8:84:
7d:91:ee:fa:f8:d8:5b:b8:0d:aa:23:3e:83:aa:93:
dd:a7:3b:54:1e:90:53:2a:bb:ba:b0:26:d2:af:11:
b7:49:3e:3d:d2:6c:9b:97:a2:41:0a:bd:84:a5:07:
1f:32:11:fc:e6:71:7f:07:da:86:16:a5:74:97:b6:
2c:3c:2f:3d:ef:b4:d0:7a:51:eb:9c:30:16:3d:d5:
08:01:c2:c3:12:8d:18:e0:9d:36:6b:f5:1b:f2:0e:
8f:bf:ce:34:f3:fb:08:1a:5b:9d:c5:87:68:03:8b:
46:0f:3f:f6:37:a5:8e:5a:af:74:25:b0:6b:a1:7b:
44:2f:59:b4:ea:38:9f:32:ea:a0:0f:d6:5c:42:6c:
b8:07:cd:5f:61:6e:71:03:4a:6f:ea:15:24:a1:33:
43:3d:58:41:63:48:57:1f:50:41:ad:1d:ff:f4:22:
30:7d:03:84:f1:26:a9:17:d6:2a:40:c8:06:fb:7e:
35:ab:82:61:a4:11:d7:de:89:c7:f7:16:6f:dd:68:
7a:9a:cf:fb:13:bf:66:01:03:e2:dc:af:04:80:94:
aa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CF:C5:E2:14:21:E5:E9:4A:B8:6E:83:0B:0A:A1:4A:3F:B4:23:59
X509v3 Authority Key Identifier:
keyid:8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:fd:17:17:a4:0e:09:89:d9:1d:e4:29:8d:da:fb:ea:fc:08:
1a:bf:bc:d9:0c:e9:16:21:f8:2c:cf:da:7e:df:28:e6:2c:79:
a2:92:16:55:bb:3c:4c:6c:7d:ee:56:ea:b0:a5:a2:45:51:04:
c6:99:93:5a:1e:33:93:f1:9f:cf:01:6a:03:fc:c1:54:43:99:
2f:89:e6:70:4f:48:2f:08:c1:e4:f9:0f:b2:78:cf:4d:c0:53:
0c:df:46:66:c5:e4:79:a7:10:40:a2:f1:8a:7e:f5:0f:b8:2d:
cf:35:f6:0f:68:25:87:24:14:c4:21:a0:67:8d:62:13:b3:cf:
71:b8:bd:3f:2d:4b:19:55:f0:8e:34:65:2a:39:85:79:94:59:
13:5c:6f:2c:f4:01:cb:f3:d6:a0:e2:a6:f2:6a:49:90:ed:ed:
53:00:ac:22:7c:5f:f3:e0:81:8f:f9:3e:13:54:13:47:4c:2b:
45:70:42:fb:29:8c:95:be:72:11:e9:90:f6:4e:00:f4:d0:1a:
ca:c9:1b:92:58:41:80:5f:b2:8e:85:5e:7f:d3:94:82:22:f6:
16:d6:41:a3:d2:54:cc:5e:76:da:c4:a6:b7:52:8e:d2:7c:34:
55:6a:b2:01:35:f8:22:8b:5b:7c:11:cf:95:59:47:dd:cc:80:
b7:0d:01:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 19:59:40 2025 by rpki-client