Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
File: IOuvVUyRRowQUkuvdC6ksaXQtJw.mft (raw, json)
Hash identifier: OT6iP3yCoDQc8gV9Ql61gpIDFsKqp5ViPbnGcEk9cM4=
Subject key identifier: C9:D2:9C:D6:79:B3:44:8E:10:AB:99:91:A9:E0:4C:1C:9C:F9:95:8B
Authority key identifier: 20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C
Certificate issuer: /CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c
Certificate serial: 019A711306E5DF59193D6DAD679541786547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
Manifest number: 153D
Signing time: Tue 11 Nov 2025 04:01:03 +0000
Manifest this update: Tue 11 Nov 2025 04:01:03 +0000
Manifest next update: Wed 12 Nov 2025 04:01:03 +0000
Files and hashes: 1: 6sYUJgHMNdzO6paPv5kT75LFzMc.roa (hash: euN2jhENl/mjvfTsWMycKvV7868btLSqNHa81KtP/1U=)
2: IOuvVUyRRowQUkuvdC6ksaXQtJw.crl (hash: OdQPtOP1WIDf0wTCGGgJ8uQ4pA/oc2wwgR7qPdH5O+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:06:e5:df:59:19:3d:6d:ad:67:95:41:78:65:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c
Validity
Not Before: Nov 11 04:01:03 2025 GMT
Not After : Nov 12 04:01:03 2025 GMT
Subject: CN=c9d29cd679b3448e10ab9991a9e04c1c9cf9958b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e6:8a:5f:26:48:99:fd:5d:e1:02:54:ed:19:
da:21:86:76:7e:44:b7:26:12:d5:69:9b:1e:66:e9:
73:cc:4d:f3:3d:79:a3:c2:b2:cb:c5:c2:5e:95:7d:
00:d6:6a:69:8f:bd:87:d3:70:ab:f7:af:d9:5d:08:
4d:c2:d5:9e:78:f1:55:00:30:48:1b:9a:37:67:ab:
c7:a6:75:6f:6c:8e:f2:7a:f7:19:3b:50:e0:b9:f0:
86:b7:d4:bb:89:bb:fa:f3:cf:09:a8:a7:bb:02:83:
8b:eb:28:72:e5:9a:80:2f:e0:70:65:5e:56:82:0d:
2a:b1:24:34:d6:fd:ad:3d:d6:65:9d:9f:a9:68:6b:
1a:35:c2:ef:19:67:de:3c:67:91:a4:e7:74:7e:9e:
b4:b4:f4:5c:d3:1c:c6:2b:fe:b7:05:c0:48:d7:2e:
26:41:47:a0:4e:f4:63:9e:3e:5b:e7:1c:3f:3e:42:
d0:30:ef:e4:4c:e5:c9:ed:b0:dd:3c:96:6a:6d:25:
50:73:81:22:d1:59:ef:d3:ef:ee:f6:75:9a:13:d9:
d2:7a:8d:d5:20:b3:b7:1d:bc:d5:31:40:15:9d:93:
4b:5a:dc:10:18:e5:ed:2e:02:d3:ba:be:34:94:62:
a9:0f:35:d1:43:23:e0:8a:e6:51:76:4c:cc:1f:3e:
cf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D2:9C:D6:79:B3:44:8E:10:AB:99:91:A9:E0:4C:1C:9C:F9:95:8B
X509v3 Authority Key Identifier:
keyid:20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:97:61:b5:24:d3:c1:f5:c3:9b:96:cc:cc:18:73:9d:73:f3:
b0:d4:75:a5:66:d0:f1:2e:32:65:39:0e:d9:33:cb:e6:34:f5:
a5:61:45:d6:ae:82:9f:8f:bf:fe:7d:01:11:e2:4c:73:83:e0:
cc:d0:77:07:82:04:e4:09:07:63:19:11:cb:a0:b1:dc:59:e9:
85:49:28:c8:14:54:be:17:be:cd:7f:44:05:46:73:c1:d4:0b:
1e:08:ac:dd:a5:10:41:5b:8a:8c:33:f9:d9:c1:3f:73:45:75:
00:02:7f:4e:f8:71:97:58:68:ea:ab:c9:84:f6:f2:b0:0e:c9:
91:78:03:95:cc:9c:7f:57:97:2f:e5:12:0b:12:2a:b8:ef:9a:
90:21:94:7c:74:59:d3:5b:9b:8b:31:eb:b5:da:00:c8:22:15:
60:2a:c3:17:5a:b8:80:47:f5:e4:43:b5:da:01:92:e0:e0:59:
96:7f:3f:ab:62:d5:e0:e2:97:d9:7b:8b:cf:2f:0a:9a:e9:6e:
cd:cc:9f:76:ee:5f:f5:f8:c5:e7:2d:0b:33:ea:a0:30:be:e9:
12:50:9c:6d:d2:f4:bc:8e:1e:e8:f2:4f:5d:53:dd:c3:4f:bf:
a9:33:21:4b:75:f9:c6:5f:53:03:f3:5b:42:04:35:82:35:4a:
4e:cb:bc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:20 2025 by rpki-client