Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
File: iQH2c8aw_4g16gL67bpbSc8UIk4.mft (raw, json)
Hash identifier: T17nNVnCfFvV/M5hkLp3bleenwoijSpt25YbWpvF9Kg=
Subject key identifier: 49:FE:53:06:C4:C9:02:27:2C:FC:6C:7D:40:FB:D0:51:9C:F8:85:48
Authority key identifier: 89:01:F6:73:C6:B0:FF:88:35:EA:02:FA:ED:BA:5B:49:CF:14:22:4E
Certificate issuer: /CN=8901f673c6b0ff8835ea02faedba5b49cf14224e
Certificate serial: 019A70DC3F5EFD6A7684C2BDC446250DA572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
Manifest number: 0DBD
Signing time: Tue 11 Nov 2025 03:01:13 +0000
Manifest this update: Tue 11 Nov 2025 03:01:13 +0000
Manifest next update: Wed 12 Nov 2025 03:01:13 +0000
Files and hashes: 1: LwODeFlTbNm331VlQw3cZjyD1Sg.roa (hash: 6xKklCkI+s1DbuNSCG9T6RXJeAeTq1fLNQfBDhNCOAU=)
2: iQH2c8aw_4g16gL67bpbSc8UIk4.crl (hash: AD+a5PGMQuiGHpB/kg7VW+IP3x1lOVHGAnEpssun3Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:3f:5e:fd:6a:76:84:c2:bd:c4:46:25:0d:a5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8901f673c6b0ff8835ea02faedba5b49cf14224e
Validity
Not Before: Nov 11 03:01:13 2025 GMT
Not After : Nov 12 03:01:13 2025 GMT
Subject: CN=49fe5306c4c902272cfc6c7d40fbd0519cf88548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:64:c3:05:9f:0b:bd:f9:fb:62:f3:7b:69:9d:
2f:d6:4d:3d:28:a1:7f:60:d3:e1:da:f1:81:6d:6d:
07:38:16:1c:99:46:db:27:f5:97:17:49:17:39:d4:
dd:d4:ee:b2:05:38:b7:10:81:62:1b:b3:aa:c6:09:
1c:59:f1:e7:15:79:c7:ff:8b:80:18:8a:13:aa:86:
5f:c7:fc:6c:34:f5:45:97:24:ea:a1:26:2e:5d:d9:
3b:2d:a9:41:02:7c:38:c0:c6:15:72:6d:ee:a7:2f:
93:e9:f4:92:ae:17:08:69:17:0c:7c:92:4d:b6:5d:
08:60:c9:6b:1d:52:14:03:90:5a:90:71:cb:c2:bf:
a5:c7:47:3d:c5:eb:55:de:00:9b:37:fe:9a:26:84:
10:db:78:f5:a3:2a:5f:35:9c:4c:2c:e6:8b:1f:ae:
0a:d3:8f:c5:03:e9:f0:7a:02:c4:65:7f:53:53:62:
3c:01:6f:1a:a1:db:5f:18:e7:f7:c5:98:f4:78:3c:
37:01:50:8b:8a:f0:d8:69:93:d6:80:e9:e8:4a:eb:
1e:42:8b:77:5d:9b:ac:b7:7b:39:5a:00:26:ed:19:
2a:5e:d7:7d:d5:c3:b1:f5:6f:a2:a7:d0:26:9b:47:
16:a1:43:31:c2:cb:56:42:93:74:1d:2b:2e:2e:25:
5f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FE:53:06:C4:C9:02:27:2C:FC:6C:7D:40:FB:D0:51:9C:F8:85:48
X509v3 Authority Key Identifier:
keyid:89:01:F6:73:C6:B0:FF:88:35:EA:02:FA:ED:BA:5B:49:CF:14:22:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ab:fc:74:32:5c:3e:c5:5d:a8:8b:c7:e1:b1:d5:17:d7:5c:
af:96:a5:2f:cd:d9:85:d7:ee:de:39:a4:83:7e:8d:5b:3d:94:
8b:53:5f:a4:bd:bb:c1:f1:1e:95:9f:ed:4a:57:ea:53:e9:dc:
fc:c3:1c:38:df:49:a3:64:44:20:95:9a:9a:4a:75:4d:79:cc:
01:e7:48:5e:b9:a3:ff:43:ac:4b:e5:a7:35:68:1f:e5:3c:da:
02:08:b5:d0:d4:d6:af:d0:f4:f0:2f:ef:df:34:08:9a:2d:27:
a9:5f:de:f9:c6:11:75:cb:46:0a:ea:9f:b6:13:d8:9d:26:a3:
40:60:14:79:dd:b8:1d:77:f1:7c:55:77:b8:c0:93:64:20:53:
4d:47:07:88:1c:96:a8:f7:7e:44:b3:85:3d:7d:36:dd:95:07:
02:84:de:f5:4f:66:d8:5f:d8:b2:6b:77:d1:6e:32:63:11:a1:
d1:94:c9:46:e2:c4:0b:66:84:57:be:56:35:47:57:6c:2c:8d:
d8:47:dd:ce:eb:7e:55:02:5a:1a:b3:2f:28:8c:fa:4c:86:96:
6a:a0:e6:31:4d:60:11:85:a0:e6:79:de:fb:c7:dc:e9:dd:37:
65:8e:08:ae:17:34:61:dc:b9:f9:b4:1b:61:3c:ba:83:8e:f4:
cf:40:17:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:59 2025 by rpki-client