Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
File: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft (raw, json)
Hash identifier: UZ+3mxO8mXG8WmR1FEuQnBYzzStZvV+1PTZH1cb/1Qk=
Subject key identifier: 98:22:89:B2:F6:AB:50:0B:A5:56:DD:AC:50:F5:00:48:78:71:2A:E7
Authority key identifier: 23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
Certificate issuer: /CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Certificate serial: 019A1428CAE12D0E7F9D4A71C5DE5DC8EFFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
Manifest number: 0C6A
Signing time: Fri 24 Oct 2025 03:00:08 +0000
Manifest this update: Fri 24 Oct 2025 03:00:08 +0000
Manifest next update: Sat 25 Oct 2025 03:00:08 +0000
Files and hashes: 1: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl (hash: 4SF4Jd0KFqIKVj+w2fUzMCw30XpwpwNdC3LvbDORcMU=)
2: LCSxsz-FQ4GzwZw8Odnzg4_wz4s.roa (hash: cOtRnPje7E9WAoJFvY2RM5FM1p4R+PS2ZqyaTPw4hic=)
3: WWsWrGhHJPhxsXXJtUhA3vzECwE.roa (hash: LLPjYgAmQluoQLBe3s0wxjIyXNJ82uAq8ra1WEAoLDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 03:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:14:28:ca:e1:2d:0e:7f:9d:4a:71:c5:de:5d:c8:ef:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Validity
Not Before: Oct 24 03:00:08 2025 GMT
Not After : Oct 25 03:00:08 2025 GMT
Subject: CN=982289b2f6ab500ba556ddac50f5004878712ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5b:1c:af:d2:a2:41:11:6c:7a:94:6c:74:ac:
54:91:1e:c3:3b:11:aa:05:5d:4a:cb:83:7c:ef:bf:
62:1f:31:98:33:38:ae:4b:19:3f:9b:40:76:eb:14:
e5:3f:45:7c:52:83:e4:65:9b:a7:5b:3f:b9:09:1a:
4e:a7:e8:98:54:43:d9:c6:d1:26:ce:5e:66:22:b3:
00:33:41:59:58:7d:82:d1:32:59:20:f2:3d:08:32:
fd:02:ac:f8:20:2e:62:c2:e2:49:27:db:2e:4a:a5:
4c:2f:3a:a0:29:41:13:9a:58:ce:2d:17:1d:95:f0:
45:4a:1d:1c:26:a6:8a:7a:68:58:b7:9d:57:bc:e3:
27:bd:0b:43:d1:32:1e:53:99:cf:c7:71:fb:83:18:
f4:e2:d3:35:1e:c9:b4:36:c9:2d:10:bb:de:72:57:
b4:b4:5d:97:ef:c4:cf:01:0e:d8:57:5d:4d:3a:df:
b8:15:ff:73:03:d3:29:98:7f:d0:62:d6:09:33:6a:
24:bf:c1:4d:a2:6d:78:cf:ce:b1:a3:06:aa:ff:65:
13:1c:81:cb:c1:fe:f5:86:06:d6:18:e7:b9:ff:03:
09:87:cf:a6:22:00:8a:ed:04:30:d0:49:38:4b:f3:
e6:17:4f:7c:26:1d:74:ec:a4:2a:94:71:75:c9:ce:
26:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:22:89:B2:F6:AB:50:0B:A5:56:DD:AC:50:F5:00:48:78:71:2A:E7
X509v3 Authority Key Identifier:
keyid:23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:41:9a:eb:17:a2:b9:3e:24:a4:3b:c1:a3:92:71:9b:0b:f4:
f8:87:8d:2c:40:ad:93:19:ff:c7:10:70:36:eb:eb:32:e1:7c:
5e:b0:ae:78:eb:78:e1:00:b6:90:c3:c1:60:4b:c3:bf:07:b3:
64:fd:54:66:9a:d1:bb:ce:9d:bc:d2:4c:59:ab:b9:df:48:3d:
f7:ea:9c:7d:db:68:eb:14:38:d1:e8:99:fd:46:aa:e1:b1:5e:
4c:81:d5:c7:42:f0:0b:d8:7f:dd:9d:5c:06:ea:5a:9a:45:88:
9a:92:b9:e4:67:a2:b5:06:84:d5:c1:16:03:fb:47:a9:ef:16:
52:cd:7b:33:18:ff:2b:82:99:bf:8e:df:9d:ba:79:fa:96:1c:
ea:ee:d7:1b:38:3e:75:3b:8f:20:58:3e:b7:e8:7b:44:5f:ca:
ce:81:1f:63:5b:1f:14:e9:2a:e0:d2:69:07:a3:0f:20:62:d6:
ae:f9:49:69:e2:ae:72:25:63:2c:d1:64:7b:cb:a3:aa:97:97:
07:4e:94:7e:10:23:7e:6d:2f:2d:45:23:2b:c5:57:45:4d:1b:
b0:cc:82:68:9b:e7:ec:f5:ab:fa:08:45:d5:74:92:64:48:bc:
a6:ca:a6:60:dc:7e:6a:d7:c8:94:75:cd:8a:b4:5f:ca:e9:aa:
3f:5d:e1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 11:38:52 2025 by rpki-client