Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft
File: irCobN7x1oVdGd50F1Nzzcga78w.mft (raw, json)
Hash identifier: 7djI1xU+r2SKTqx+vAMr15jR2jgh76rBMDs0l4ra2zk=
Subject key identifier: 5B:F0:C3:D8:1A:70:14:11:6A:FF:2C:56:0F:62:24:C6:DF:50:C2:53
Authority key identifier: 8A:B0:A8:6C:DE:F1:D6:85:5D:19:DE:74:17:53:73:CD:C8:1A:EF:CC
Certificate issuer: /CN=8ab0a86cdef1d6855d19de74175373cdc81aefcc
Certificate serial: 019A71B8FDAF91962822CEBCB41AE8816AA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irCobN7x1oVdGd50F1Nzzcga78w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft
Manifest number: 01D4
Signing time: Tue 11 Nov 2025 07:02:20 +0000
Manifest this update: Tue 11 Nov 2025 07:02:20 +0000
Manifest next update: Wed 12 Nov 2025 07:02:20 +0000
Files and hashes: 1: iDD0dIi8FZu6HOhyS7tjvaUtgQE.roa (hash: 0JHKcL5Vnxkq7EPVZmPbz9exzTMRAeW5CIg2FGWWjPE=)
2: irCobN7x1oVdGd50F1Nzzcga78w.crl (hash: CLbbwDhmaxDo0FL7y+yjOgg1Bab23HOAsWT8o2Uex/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft
rsync://rpki.ripe.net/repository/DEFAULT/irCobN7x1oVdGd50F1Nzzcga78w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:fd:af:91:96:28:22:ce:bc:b4:1a:e8:81:6a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab0a86cdef1d6855d19de74175373cdc81aefcc
Validity
Not Before: Nov 11 07:02:20 2025 GMT
Not After : Nov 12 07:02:20 2025 GMT
Subject: CN=5bf0c3d81a7014116aff2c560f6224c6df50c253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:96:59:9b:c8:ff:55:8b:05:4d:22:41:74:46:
e8:e9:08:3e:96:99:88:d2:ad:50:38:b5:4a:47:f3:
48:20:45:c8:25:65:94:49:76:0d:e5:de:5a:d4:8e:
65:f7:88:b7:35:3c:14:2d:b7:ee:c6:cb:b2:70:48:
65:e1:ec:10:6d:11:09:e9:bc:5c:09:b7:56:48:b4:
67:5f:c6:2c:ed:d9:85:7f:25:e1:71:bd:b7:2c:79:
c7:28:c3:58:8c:16:62:4c:32:9c:e5:36:60:f6:51:
a3:44:e7:c3:d2:e5:94:c9:73:85:f6:17:74:9d:3e:
c2:9e:38:00:a0:0e:c9:af:41:7b:76:76:2c:9b:b3:
d5:c4:56:48:79:36:30:23:90:4b:31:ff:b6:61:7b:
84:e8:ed:85:54:1f:da:b4:e7:f0:4b:38:bc:57:e4:
93:85:2c:54:2d:5c:07:0f:8a:7a:5a:ce:5c:70:df:
bb:1c:72:8d:81:04:45:36:5a:9b:ca:88:20:7e:d5:
f3:ce:5d:4d:d7:30:bb:a2:21:ed:3b:20:63:e3:6d:
6e:d5:de:29:cf:34:f4:59:bf:40:c2:cc:5e:15:19:
7a:f3:3a:d5:d6:3d:a5:3b:09:7e:7b:d2:22:be:62:
90:dc:a6:66:da:ef:f9:7b:ca:8a:b1:a6:02:d0:f9:
9c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F0:C3:D8:1A:70:14:11:6A:FF:2C:56:0F:62:24:C6:DF:50:C2:53
X509v3 Authority Key Identifier:
keyid:8A:B0:A8:6C:DE:F1:D6:85:5D:19:DE:74:17:53:73:CD:C8:1A:EF:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irCobN7x1oVdGd50F1Nzzcga78w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:30:87:50:45:b9:a0:2a:71:44:17:b1:5f:61:06:a5:57:bf:
93:c9:70:1c:c1:d3:4d:cc:5b:9c:0f:93:53:4f:b2:dc:7f:f1:
5f:6c:52:28:b8:82:63:cd:3a:45:55:08:7a:a0:85:23:28:8a:
62:30:86:39:49:1c:7a:3b:30:3e:7d:0d:29:54:b0:6b:42:0a:
f4:58:1a:09:34:93:cd:98:6f:c7:20:e2:ee:d5:ee:60:c2:65:
40:b4:a6:73:b7:a1:74:a2:08:f3:da:44:38:53:28:ef:4a:a6:
06:61:b2:17:92:92:0e:f1:39:59:7c:01:50:f4:a5:52:b3:2d:
40:6d:dc:ec:79:2f:74:88:dd:6f:19:53:55:d1:43:6c:aa:f9:
bc:95:45:b0:b0:d0:3a:d1:e3:47:79:bc:28:5a:80:2f:d7:cd:
1a:47:b5:c7:dd:a8:05:41:cf:ef:e9:c5:83:df:19:a1:34:fd:
8e:03:46:56:2f:67:2c:09:91:1b:4e:de:59:39:95:0e:c0:9a:
fd:50:3f:ea:05:a1:c4:6e:d2:5d:53:f9:eb:bd:a1:cb:1a:67:
e4:86:ec:39:98:58:ce:96:45:26:b0:b1:94:57:0b:2d:f2:80:
fb:42:a5:38:d6:35:6b:50:2f:1b:61:12:e4:4d:32:81:d0:40:
9b:30:33:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:09 2025 by rpki-client