Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
File: iOpSVfiNS5VxicFC-KxWgcUMaKY.mft (raw, json)
Hash identifier: EfTL9gHoJ4jlq7LqhLQIJf17/6y9iR1dDhhfW55lMY4=
Subject key identifier: 73:35:9F:26:02:58:D5:3E:4E:DC:A1:CE:6E:74:0E:0D:E2:71:B8:33
Authority key identifier: 88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6
Certificate issuer: /CN=88ea5255f88d4b957189c142f8ac5681c50c68a6
Certificate serial: 019A71EED088CEE3BDE3945FDF02C67BFC64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
Manifest number: 09A4
Signing time: Tue 11 Nov 2025 08:01:07 +0000
Manifest this update: Tue 11 Nov 2025 08:01:07 +0000
Manifest next update: Wed 12 Nov 2025 08:01:07 +0000
Files and hashes: 1: AhbInrBuBxUhLDDb6t4H_dnP0SQ.roa (hash: LnUMs+GFvbcxwBQi1CgG4kL2ZNmGdakKt42fC58+8no=)
2: iOpSVfiNS5VxicFC-KxWgcUMaKY.crl (hash: z5J5zSq9rcDsGMS7QHxnyKCEoC45nsXQOFncBdsn73g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:d0:88:ce:e3:bd:e3:94:5f:df:02:c6:7b:fc:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ea5255f88d4b957189c142f8ac5681c50c68a6
Validity
Not Before: Nov 11 08:01:07 2025 GMT
Not After : Nov 12 08:01:07 2025 GMT
Subject: CN=73359f260258d53e4edca1ce6e740e0de271b833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:78:85:80:ad:1e:66:34:b9:a4:c5:ac:a8:37:
0c:bc:a8:b5:73:ea:ed:9d:61:e5:b7:49:bb:72:9f:
7a:fb:56:75:40:a0:65:e2:f2:8c:39:5d:b2:56:b6:
20:bf:37:ff:f8:f1:b9:f8:94:d1:02:6d:54:78:d3:
b4:1f:3d:19:ec:b0:44:b0:41:04:ce:61:22:0d:ea:
b4:0b:30:a7:e8:5d:28:66:15:d3:93:af:27:e1:f9:
bc:60:60:f1:87:5e:2d:36:de:19:7d:26:39:4e:fd:
60:a0:bb:a5:6c:77:59:1e:9f:e5:c9:64:e4:9d:16:
7c:46:03:41:b4:15:fe:d5:97:24:7f:5b:98:e2:b9:
fa:d5:2e:5d:bc:fe:eb:a5:75:16:a2:6c:00:a7:71:
d6:d5:72:65:de:52:0b:c2:8b:d2:c2:d5:dd:63:74:
f5:22:1e:f9:a8:d9:e6:e0:2f:fb:4a:b4:14:63:18:
ad:ba:68:48:1c:ba:42:a0:ce:53:8a:be:2f:59:ce:
3f:86:9d:bc:b8:56:d5:7c:3c:21:80:46:e1:75:2b:
31:9e:77:3b:34:c3:62:08:c0:85:02:6b:c1:80:3a:
b9:ea:e7:95:5e:8a:37:ad:9e:3a:e1:78:17:16:76:
e8:42:0f:10:f4:d9:b1:8d:5d:02:64:1b:d3:c5:f9:
4e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:35:9F:26:02:58:D5:3E:4E:DC:A1:CE:6E:74:0E:0D:E2:71:B8:33
X509v3 Authority Key Identifier:
keyid:88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:68:85:f3:0f:d7:1c:30:7c:5a:93:14:30:b4:0b:03:b2:db:
19:78:2e:de:81:27:69:57:cf:b1:cc:11:2e:c5:a9:24:d9:e5:
3b:be:d1:34:1e:a3:a1:88:a2:29:77:77:f9:2b:80:bc:69:7b:
32:44:dc:5e:45:34:a4:b0:fa:cf:a2:2b:9a:03:3f:72:98:da:
79:1c:1f:76:93:ee:38:8b:1a:a7:de:0c:dd:57:c4:34:62:27:
bf:43:d1:53:4c:87:51:98:46:aa:e5:cb:27:e4:3f:0c:46:6e:
a1:ab:e7:a6:f4:74:b0:2b:d2:3d:d5:56:8c:ab:2a:51:dc:ac:
52:19:b4:2c:b4:12:12:12:7b:ed:49:aa:f9:b9:96:18:0c:52:
46:23:53:cf:96:20:9d:ad:e1:73:0b:fd:92:50:87:f0:bd:83:
c3:e6:ae:06:01:e6:a5:f0:a1:9f:78:90:83:08:da:59:1a:49:
51:30:6f:98:41:cc:71:70:13:ef:52:01:9a:c7:fe:f2:81:b2:
63:4a:7a:36:7f:49:c9:ea:60:d8:68:a7:c2:96:f4:4b:e7:64:
76:b1:17:2a:93:f8:ba:be:22:18:0c:02:78:d6:1f:30:44:82:
44:4a:4d:9b:f5:7f:3b:04:04:92:5d:44:9d:dc:0f:d2:87:08:
e0:c7:ba:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:05 2025 by rpki-client