Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
File: iBvRQCkk7CpkTo9U5plMtKyOJKY.mft (raw, json)
Hash identifier: COd4VQx8gtsBNS/IAYEToWvYFnuWppnXE1yP87zYfFk=
Subject key identifier: 38:BB:A5:BD:BD:03:70:94:EA:18:8E:86:B8:53:AC:E7:37:AF:6A:74
Authority key identifier: 88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6
Certificate issuer: /CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
Certificate serial: 019A1505D1EFF10CD588552DEDC4B71D5B9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
Manifest number: 0FB5
Signing time: Fri 24 Oct 2025 07:01:34 +0000
Manifest this update: Fri 24 Oct 2025 07:01:34 +0000
Manifest next update: Sat 25 Oct 2025 07:01:34 +0000
Files and hashes: 1: 7ibZVwlfZ8ueZalO2s5Z7rPx0H0.roa (hash: Umej8EQSMHbvS0Ig+vK3MM7fmk+X8RtofGrUKqtGKkc=)
2: iBvRQCkk7CpkTo9U5plMtKyOJKY.crl (hash: JCdtZOOf6H+DM1IXdX+m6zbmHOPKuF6krQPC2GZ+UX4=)
3: kb-KEA3ZQd2MnkxgOKCpwGpH7ac.roa (hash: PVNmYw7m9lOZowA6tdOLawiD6fJdAXnNIKgq+V8sW40=)
4: vqIlQ51IAOGJFiTSPtHU72fvx08.roa (hash: zUhV3nwfP0jHHq/oTFIpW9P4yGQL+wJghHGlBxSt0/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:05:d1:ef:f1:0c:d5:88:55:2d:ed:c4:b7:1d:5b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
Validity
Not Before: Oct 24 07:01:34 2025 GMT
Not After : Oct 25 07:01:34 2025 GMT
Subject: CN=38bba5bdbd037094ea188e86b853ace737af6a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:67:6d:8d:a6:5b:bb:20:60:1c:3e:20:87:f7:
a5:33:68:1e:ba:31:a2:9e:c5:64:5d:5e:71:ec:3e:
2f:38:05:29:d2:a4:c5:29:6a:c8:14:04:34:fa:67:
06:10:6c:92:7e:30:48:39:37:54:18:96:3e:80:b8:
67:90:e7:bd:dc:44:84:6f:3c:6f:cd:66:21:8a:c3:
7f:ce:84:13:55:6d:c0:7d:10:14:df:13:df:86:30:
0f:5e:d7:13:c3:c0:88:44:ad:d7:e7:2e:a2:cb:58:
c2:77:97:ac:e4:65:e3:31:b4:f1:67:a1:c1:2c:ee:
a4:e0:1a:be:4a:7c:c5:17:0c:cd:e7:67:dd:43:24:
a8:29:58:a6:37:7d:c8:2d:40:d4:84:d0:bd:d6:40:
f6:a7:ae:67:d8:c8:15:ba:a3:eb:77:ff:47:4b:18:
2b:ef:eb:e3:26:0b:d9:d4:91:d6:a7:9a:2d:dc:50:
da:dc:78:55:85:7b:3d:f9:40:12:60:5e:c6:7c:c9:
42:4e:41:78:42:f9:d5:90:90:d9:ba:75:49:c4:e5:
95:a4:7d:a2:26:0f:77:3a:fb:0b:81:7a:3f:46:3b:
f2:b0:2e:63:8e:e1:b8:34:71:20:a0:5a:6b:1c:06:
5f:dc:6c:6f:1c:b5:2c:a5:f9:8f:3a:71:cc:de:1a:
2e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BB:A5:BD:BD:03:70:94:EA:18:8E:86:B8:53:AC:E7:37:AF:6A:74
X509v3 Authority Key Identifier:
keyid:88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:bd:ee:20:78:0f:c2:36:d5:f8:fb:97:82:73:79:6c:43:8a:
a4:95:dd:dc:e6:e8:4e:9b:57:7b:c4:1f:53:eb:92:ef:c1:ea:
7f:96:00:d4:06:1e:b6:ea:7e:c4:14:cf:69:1e:bf:5e:c9:41:
aa:d4:6d:09:83:f1:44:46:ee:95:8c:18:b1:f1:8f:62:33:6c:
7c:ca:f5:1c:de:ac:76:19:3b:38:29:14:39:e9:ba:05:9c:45:
73:ad:df:5e:fc:9f:4b:80:31:bf:dc:37:ef:4f:3e:0b:27:9a:
37:44:81:d3:c5:ee:f1:f8:d9:97:9f:3a:b3:1b:05:b8:dc:97:
60:97:03:73:bf:3b:21:e3:60:7c:45:6b:2b:ea:fd:3b:cf:6e:
40:f9:b8:63:8d:d1:8b:62:55:54:1f:ad:fd:9d:5b:7e:b6:8f:
b3:c0:6c:c6:7c:19:50:d6:0a:4b:25:7e:f1:50:6d:b6:93:53:
01:be:ce:1c:d9:54:0c:c6:20:30:18:c8:72:62:d5:c1:ee:eb:
3e:cc:3e:22:a6:85:7e:d9:d8:8c:7b:3b:31:5c:c8:f7:b7:cb:
a3:b9:35:95:5c:95:c8:c2:c1:7f:6e:b4:07:25:56:09:48:40:
88:7c:d9:7d:cc:58:eb:84:19:94:e6:d1:72:8f:23:f8:be:8a:
77:32:dc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 09:15:15 2025 by rpki-client