Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
File: Iqz2bwAZxVYzG--ezY32UngqY_g.mft (raw, json)
Hash identifier: mWn66ctpDWwOMK7NV/KGc9t0tn7/LFPiPlS0INz4X68=
Subject key identifier: CD:8F:2D:DD:E2:28:CB:4F:94:B1:48:1A:33:B4:19:28:5F:04:00:87
Authority key identifier: 22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
Certificate issuer: /CN=22acf66f0019c556331bef9ecd8df652782a63f8
Certificate serial: 019A71EE932EF3C2FD57C9E4D61EA5B73896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
Manifest number: 167B
Signing time: Tue 11 Nov 2025 08:00:51 +0000
Manifest this update: Tue 11 Nov 2025 08:00:51 +0000
Manifest next update: Wed 12 Nov 2025 08:00:51 +0000
Files and hashes: 1: Iqz2bwAZxVYzG--ezY32UngqY_g.crl (hash: /sOzGRbIjlWljraQNx+ZV9c1IjNDaxYX8+UmzpGHQvA=)
2: UVEBG1ExZGcscljMEXZmdhHPbmo.roa (hash: OGY1ZCPh4kqtkS+2sWG7TSBefV4b/lqw2cPXHz2iP6A=)
3: l7ZphxTNLdfz3s0c0sr67IQOn_Q.roa (hash: 7qT5TEH8UgfN71QCeNJwaAV6tPLOUHK85hJIN/udCok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:93:2e:f3:c2:fd:57:c9:e4:d6:1e:a5:b7:38:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22acf66f0019c556331bef9ecd8df652782a63f8
Validity
Not Before: Nov 11 08:00:51 2025 GMT
Not After : Nov 12 08:00:51 2025 GMT
Subject: CN=cd8f2ddde228cb4f94b1481a33b419285f040087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:81:76:3a:c0:79:d4:41:45:ee:02:90:99:36:
6b:da:aa:d1:11:fc:0b:e2:b9:9d:0e:61:42:22:ca:
37:eb:57:2f:f8:3d:9f:3e:a0:1c:de:54:9f:73:02:
ae:45:52:ec:00:66:9e:ba:03:ed:c6:06:fe:fa:b5:
31:34:bc:13:87:03:0f:22:a7:97:19:b7:d2:dc:21:
4f:e9:6d:e0:32:0c:e1:df:c7:68:95:7e:c9:41:45:
82:7e:53:03:ce:41:ca:0f:b2:cd:01:7f:5c:8c:84:
98:56:7c:74:83:0a:20:6b:8e:e5:0b:76:89:06:a3:
cb:f7:bd:cd:99:9c:f3:26:ae:50:75:23:c9:6a:90:
01:e2:5e:38:d2:2c:dc:cb:13:3b:03:a4:68:d4:fc:
b7:b5:5b:8b:8c:e5:2b:84:76:d4:f6:f4:56:eb:3e:
37:a1:f6:18:74:a2:56:3a:bd:8a:fe:72:85:cd:a6:
e1:35:84:bf:ae:c6:1f:8d:a9:1a:36:cd:f5:8f:fd:
7a:9f:8f:dc:95:af:3d:52:0c:ea:de:1f:eb:03:46:
60:72:72:fa:0e:84:8b:e8:3c:15:7f:2b:00:67:6c:
00:b8:a3:1c:00:4f:8c:d5:e3:ef:8f:94:c0:a8:51:
bb:9a:cf:ce:c3:38:fa:28:f5:6b:0f:91:51:8d:6e:
5f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8F:2D:DD:E2:28:CB:4F:94:B1:48:1A:33:B4:19:28:5F:04:00:87
X509v3 Authority Key Identifier:
keyid:22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:59:c4:a7:bc:3d:c8:f4:77:73:54:8c:1a:c5:9a:1b:26:3c:
a7:10:66:9a:cb:f9:42:0b:21:34:92:9f:02:fb:97:eb:66:11:
d9:80:81:b4:3d:d6:56:21:22:17:b0:92:1c:69:66:7c:8d:e0:
9d:67:fc:e9:15:23:94:0b:49:7f:8f:91:65:8e:0f:34:72:b1:
1b:68:32:85:3d:b9:96:a3:3e:40:12:fd:da:91:58:a0:2a:e3:
12:99:5e:f5:f5:27:f9:98:cf:fa:c3:0d:9f:9f:9e:3d:7b:92:
a7:41:b7:ff:6e:8a:da:49:08:65:f5:f6:42:7b:a6:8c:5a:df:
8b:b8:de:b1:17:f4:0c:30:8b:f8:50:f0:93:bd:da:e3:4c:86:
87:2c:81:de:b1:9e:c8:c7:ad:c2:3e:d3:d5:9b:6c:30:28:d8:
c7:18:70:6b:b3:27:0c:a9:60:32:f1:4d:21:ad:74:52:3e:4e:
b6:bb:2f:bb:e4:e0:bf:f5:3b:13:78:24:41:d8:3a:40:2a:a3:
6f:e3:b2:fb:2d:c0:64:42:40:ea:2e:24:f7:c2:26:75:c6:1d:
3f:da:05:5f:85:7a:38:35:09:6b:d3:ab:8c:0e:d5:12:69:e6:
9f:04:2d:7c:95:de:d8:50:62:d7:98:2e:55:2c:1f:ad:98:f4:
84:fa:89:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:47:55 2025 by rpki-client