
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
File: iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft (raw, json)
Hash identifier: Nw9rvAKvD0TiAeLUTnTl5fk6aWUebErWSop1L5JmkfU=
Subject key identifier: 89:EE:B6:65:D1:B9:CE:2A:8F:AF:B3:39:9B:84:73:9D:9C:D2:6F:01
Authority key identifier: 88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA
Certificate issuer: /CN=884b5e16490b9a68d09fbcb45574350000149afa
Certificate serial: 019A2289666514E5A25D2D86D6D5854F81E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
Manifest number: 16F4
Signing time: Sun 26 Oct 2025 22:00:21 +0000
Manifest this update: Sun 26 Oct 2025 22:00:21 +0000
Manifest next update: Mon 27 Oct 2025 22:00:21 +0000
Files and hashes: 1: EFku_9VXqbesZmjqxLjBcuB7CJQ.roa (hash: NldkodBx9XHI5VbEYIs7dZXK6yR3WU54I+HEv9PZwY0=)
2: iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl (hash: vqMWpgwbiA9QEI/sk4EIO/aV9hLHCkL7ndRIFmvQu0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 22:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:66:65:14:e5:a2:5d:2d:86:d6:d5:85:4f:81:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884b5e16490b9a68d09fbcb45574350000149afa
Validity
Not Before: Oct 26 22:00:21 2025 GMT
Not After : Oct 27 22:00:21 2025 GMT
Subject: CN=89eeb665d1b9ce2a8fafb3399b84739d9cd26f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:94:1a:aa:88:b4:09:4c:3c:7e:b0:c1:f1:30:
3e:55:db:ce:1d:88:ca:57:38:0d:ed:e6:07:fc:54:
6d:35:6c:66:b3:0d:ba:1f:ef:fe:30:91:f9:e5:94:
df:99:6d:42:88:5e:85:e3:44:cf:e6:84:75:22:70:
4f:25:9b:e1:e2:1f:9e:72:08:c8:6d:6b:c6:8a:e9:
dd:a9:4f:7c:74:51:d4:a1:86:9e:51:68:55:84:c1:
0e:5c:75:bf:17:8c:c0:94:a5:51:af:fd:55:0d:4c:
54:9f:55:af:70:cd:50:23:39:81:ae:f2:58:a8:57:
c7:36:dd:35:09:ff:76:ca:f0:ec:4a:6c:74:72:57:
50:a7:32:80:0f:f2:d4:c9:ac:3e:a7:f1:e7:44:33:
d3:3d:8c:a8:d4:aa:80:0b:b2:27:da:bd:aa:ae:c1:
f7:7e:4a:f0:82:85:4f:59:11:ca:77:29:48:7e:8d:
9a:3e:c2:b2:4b:8f:ed:84:fe:ab:af:fa:f7:92:60:
89:64:8e:ad:63:df:9c:6f:e1:70:e2:e6:13:18:bf:
af:5c:c0:2e:09:c7:52:38:70:0b:0f:2a:7a:80:4c:
28:c2:49:ed:81:4c:dd:1c:15:fd:a9:b3:28:fa:86:
13:fa:b1:39:af:5d:78:72:25:b3:b2:a2:e7:cb:53:
89:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EE:B6:65:D1:B9:CE:2A:8F:AF:B3:39:9B:84:73:9D:9C:D2:6F:01
X509v3 Authority Key Identifier:
keyid:88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:84:95:46:8b:c8:cd:f6:72:0e:79:97:e9:a6:3f:16:e2:d2:
41:45:77:29:13:2f:73:ec:c3:0d:58:08:7c:6f:f7:40:c5:ee:
65:17:c2:1c:98:7c:11:ba:91:23:da:a8:21:7e:ae:ce:af:10:
70:ab:2b:8a:d5:f5:78:1b:92:88:67:ac:8e:30:35:a3:f3:99:
47:ca:09:30:6c:fa:2d:13:c7:6f:e8:6e:6a:17:b5:55:ef:a0:
da:dc:51:de:87:c3:64:49:49:cd:45:65:60:32:18:f7:77:f6:
71:89:38:bf:ee:45:f0:91:65:b3:c6:c0:be:21:60:0b:b1:44:
69:c6:28:63:a4:12:38:a1:14:8e:1d:1f:d6:82:a4:8a:ad:fb:
e9:ff:44:1c:31:ad:dc:48:37:9e:12:53:48:1c:af:52:9c:36:
0c:67:f8:af:aa:61:e9:74:89:99:2f:a2:9e:c8:20:fe:13:e1:
93:e2:99:12:48:6c:64:af:17:07:63:fe:8e:e1:65:0f:2c:16:
d1:76:9b:24:a6:ce:ab:c2:3d:b6:87:02:60:d7:7a:7c:7e:b7:
eb:5b:28:e7:28:bb:86:90:0b:eb:1b:4b:5f:a2:a0:28:52:60:
fb:40:55:c7:e5:b8:b9:69:2e:a4:2c:fe:56:a6:54:d9:e0:70:
a9:95:c5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:55:16 2025 by rpki-client