Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
File: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft (raw, json)
Hash identifier: R2D7bAAGavrCyYdIDlWjJtKF1PdtNfQYOSSl/RdnaA4=
Subject key identifier: 96:FF:DE:E7:25:07:79:2B:D4:7F:09:21:EE:AC:C9:5A:07:BD:3C:50
Authority key identifier: 88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
Certificate issuer: /CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Certificate serial: 019A29304DAD500AE41075BACBA2FE76BE2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
Manifest number: 0A93
Signing time: Tue 28 Oct 2025 05:00:22 +0000
Manifest this update: Tue 28 Oct 2025 05:00:22 +0000
Manifest next update: Wed 29 Oct 2025 05:00:22 +0000
Files and hashes: 1: 11w9K2dCR0A6XsEVx-Vg9m7G5bM.roa (hash: hj3QFv3Y2FaAu9Oijuk6KKEMBTD9UQTUqjejPr1gs7c=)
2: MR9ZuC-IL_jZ4767dS-IkZgCrJw.roa (hash: Vi7lFCDHTrpEyk68a6k87cSkUHM4wyPXzIO5RtGzU1U=)
3: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl (hash: ptNFhTlwLX2g07tf0abQyjfzucbGRouefbs0E/yn5Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:30:4d:ad:50:0a:e4:10:75:ba:cb:a2:fe:76:be:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Validity
Not Before: Oct 28 05:00:22 2025 GMT
Not After : Oct 29 05:00:22 2025 GMT
Subject: CN=96ffdee72507792bd47f0921eeacc95a07bd3c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b0:46:36:45:c9:53:d9:23:18:21:f4:da:29:
8a:c0:f0:d1:73:51:7e:68:96:cd:c3:42:84:bb:90:
15:08:2a:00:c6:a2:f5:37:17:34:34:8b:2a:e5:93:
c9:86:75:9e:7b:75:ac:67:cc:86:5a:b9:81:15:12:
67:25:9c:9a:53:ea:fb:f7:44:aa:dc:b9:ab:8b:94:
41:7b:56:da:9f:b2:45:77:90:be:3c:76:7b:1a:a1:
95:93:8e:a9:4e:86:57:fc:03:d1:b4:8c:b1:34:67:
e1:41:76:51:23:e6:03:44:78:f1:05:3b:e9:05:48:
24:3a:18:53:e8:2d:45:e1:f4:31:87:9b:d5:16:79:
db:6c:61:0b:36:a2:bc:fb:cc:c1:03:78:82:4a:92:
a3:d5:25:58:ef:c2:b0:87:67:bd:c2:33:9f:1a:7b:
8e:e7:c4:2f:aa:c8:30:e0:65:c9:29:a5:2b:3d:b4:
b8:e1:fe:fa:b4:00:4a:ce:f8:52:51:8d:a1:fb:a6:
bb:d2:ed:7e:37:02:36:5a:aa:8e:4a:c1:f5:fa:d2:
b0:4b:ec:79:c8:69:99:ee:3d:49:d7:7a:37:8c:ff:
58:20:e8:ba:17:84:09:a4:e9:af:2c:18:16:ee:7d:
96:25:11:ed:7f:95:3c:c3:9e:2a:2d:2f:e0:92:d1:
5e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FF:DE:E7:25:07:79:2B:D4:7F:09:21:EE:AC:C9:5A:07:BD:3C:50
X509v3 Authority Key Identifier:
keyid:88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:85:0c:1b:49:06:56:a8:d0:3c:db:73:1c:90:f6:2c:1f:14:
a1:6f:4a:6a:63:a8:2d:6a:bc:ee:64:e8:c6:84:e2:0c:88:cd:
28:58:9a:d5:2a:9a:e7:a8:3d:c1:72:4e:39:58:2c:08:b3:07:
00:4f:9a:9a:15:f6:53:a1:d8:9a:92:88:11:44:c1:e8:ea:07:
da:37:30:32:f2:ef:1c:bc:fc:b3:0c:95:36:db:24:9e:4a:70:
f8:4b:cd:b8:67:3b:01:0e:af:fe:61:dd:dd:8c:70:96:de:eb:
a3:1f:41:34:57:aa:0a:c9:30:8e:af:9b:47:7f:16:39:96:50:
0a:19:4f:37:91:05:8a:29:8c:e2:10:b5:b1:d0:90:01:cc:5a:
9c:19:f0:b6:72:22:8a:84:af:b1:bd:ee:28:27:07:04:83:de:
58:a5:8f:ee:c4:78:78:e1:12:58:40:e8:97:4d:e3:c4:fb:da:
eb:f7:10:12:14:26:e0:4d:0d:ab:c3:a2:23:35:66:42:9b:fb:
40:9c:1a:aa:e0:02:08:3c:b9:b0:a9:a3:ef:0a:21:37:c1:b8:
d8:bd:a3:09:98:e0:49:ff:7f:45:c2:2c:49:83:ae:cf:bd:d6:
4e:66:2b:d0:27:48:ae:51:ec:cd:94:4b:b8:16:4f:9c:28:37:
62:1b:b0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:14:37 2025 by rpki-client