Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
File: IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft (raw, json)
Hash identifier: PjIWa53+E2c1u+3Ko+Njk/ggq6/fJrTOpw0rjlz8c7Q=
Subject key identifier: 8C:4F:95:C9:42:65:D1:A2:52:72:F9:BF:20:03:5A:CE:70:46:07:36
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial: 019A45BABCBFE44FA3CF51DEEDC3E539F19A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
Manifest number: 175C
Signing time: Sun 02 Nov 2025 18:00:57 +0000
Manifest this update: Sun 02 Nov 2025 18:00:57 +0000
Manifest next update: Mon 03 Nov 2025 18:00:57 +0000
Files and hashes: 1: B6aGxUDSSan1LbYvufjyd3IQLUs.roa (hash: dwUg5aBoWkQufw+jFxFp1hxo39/3rnNdCzkl0XPMgUM=)
2: IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl (hash: KD9w3J0oII91Zjm/g7YctY40Mf5XSo2hiFlsgD6lVEI=)
3: P2j-hUrnI_G8_z_xhTDbKbOjagw.roa (hash: KXKpMQn72rg2fYHpKvlZTFcp58U/Tju8WHXUSLpo2kU=)
4: RC7wgRAs2o4H2l1TLqn8NZUndUY.roa (hash: SCrWR5DUqk0ILJy6T4Si10/+i7OXDOm/wTyU6YmTVRU=)
5: bt-PMEtT1IwN0eDJCO5vE7NIDdQ.roa (hash: sPgTyfptj00zzq62H1SqHfdWzrVXbflq204bOJGhoUw=)
6: knF5z7M4UIvC6eeoTXUGhnRxT0k.roa (hash: XFbD7w0kWLSfVZ1roO0o5/UKd6EksNenbK+US1bpOhU=)
7: l4DOOxa4eRxF2dAtmUe0kSPP8oA.roa (hash: qHA/WOgfb5PSClEW7ipNBpljR8hRqs+26OIpJqnzQCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Nov 2025 15:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:45:ba:bc:bf:e4:4f:a3:cf:51:de:ed:c3:e5:39:f1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Validity
Not Before: Nov 2 18:00:57 2025 GMT
Not After : Nov 3 18:00:57 2025 GMT
Subject: CN=8c4f95c94265d1a25272f9bf20035ace70460736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:db:bf:8f:fc:23:6b:5e:bc:4f:65:0f:ac:48:
e5:bb:e9:48:00:2f:59:f6:58:9f:ce:a8:0f:d0:db:
ec:11:bd:e4:35:29:d4:1d:dd:e8:db:2d:91:f6:aa:
f9:2b:96:60:df:0a:7f:bb:61:f7:76:ff:94:3f:02:
3b:78:f1:e6:53:b2:0d:f7:6f:64:4d:74:40:53:22:
5e:31:f1:5d:bc:c3:43:e0:23:6f:84:81:8d:e7:a2:
7e:88:59:97:f9:47:71:36:d9:72:3b:ee:97:9c:cb:
fb:a5:43:27:e3:24:20:f4:76:ef:44:85:97:d6:ae:
59:d8:1a:81:22:fb:0a:42:09:04:a3:ef:dd:c3:89:
3c:a0:da:5b:a0:a2:b9:20:89:78:24:b5:5a:b0:e9:
b7:b3:f4:49:22:22:eb:3d:d3:e4:21:1e:4c:2f:ac:
93:d4:74:68:9f:7b:99:1e:e9:87:7c:4c:44:10:61:
3a:c8:11:df:91:b1:d5:f6:01:28:21:25:ae:19:08:
04:50:6c:d7:23:09:3d:38:cb:b2:09:99:44:d0:74:
da:26:c9:fc:cd:be:78:93:7b:2b:bb:50:14:29:b8:
f1:98:25:95:16:fc:09:02:c1:a0:1a:dd:2d:88:ca:
2e:4e:3c:5f:e1:46:12:1f:f2:c4:a0:88:9d:72:17:
e9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4F:95:C9:42:65:D1:A2:52:72:F9:BF:20:03:5A:CE:70:46:07:36
X509v3 Authority Key Identifier:
keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ce:56:8c:57:e9:53:17:16:df:26:bb:49:4e:a1:23:78:17:
b2:15:77:68:72:44:fc:8a:90:1d:25:11:94:f1:3d:90:c1:98:
45:04:e8:29:e8:44:b3:e1:ed:8a:8d:82:dd:9d:a1:11:32:9e:
78:ec:d8:0d:24:7a:ee:e8:b5:79:33:78:46:1c:5c:7b:54:fa:
5f:d8:99:56:4a:23:e4:2a:8d:20:6d:bf:eb:2b:9d:47:cb:f5:
bd:e2:6d:cd:3d:2e:38:a8:89:79:f8:bb:4d:37:ad:64:d9:48:
e7:22:de:e7:df:c8:49:fe:45:99:03:dd:ff:ec:ad:0b:ec:21:
79:b0:90:56:55:ec:3f:9a:02:9c:c2:e9:02:07:30:f4:d4:ef:
6b:ad:d7:0c:3a:5f:63:05:1a:9b:78:2a:b6:cc:34:b4:ef:51:
4b:8e:36:fa:dd:54:8c:64:ab:1a:5b:2f:ad:a9:e7:be:29:e8:
ff:3d:37:96:da:65:ba:8e:9e:6a:52:91:16:06:4d:6c:47:90:
c8:60:6a:96:a3:de:42:85:c5:df:f3:1a:e3:fe:76:7b:e5:e2:
85:16:44:b2:76:f9:e6:cb:5a:c4:48:24:8e:ca:f4:40:17:0a:
db:eb:f7:4a:46:0d:e4:99:a5:00:a8:a8:8e:c4:26:cc:d1:5c:
59:6d:92:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 22:45:10 2025 by rpki-client