Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
File: iK09YNkgV_8PoBH0UMNkbjUtpdg.mft (raw, json)
Hash identifier: xLSpJVcFiIYnr0bs3FNoQ9S1ecNE8LvMtFxIYL3IHyQ=
Subject key identifier: 4E:68:02:9A:CB:38:C3:9B:FA:75:80:B2:7E:49:6B:97:8B:A7:04:DB
Authority key identifier: 88:AD:3D:60:D9:20:57:FF:0F:A0:11:F4:50:C3:64:6E:35:2D:A5:D8
Certificate issuer: /CN=88ad3d60d92057ff0fa011f450c3646e352da5d8
Certificate serial: 019A725C3B8F6CDCEF57EC6F301852DB7495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
Manifest number: 0373
Signing time: Tue 11 Nov 2025 10:00:38 +0000
Manifest this update: Tue 11 Nov 2025 10:00:38 +0000
Manifest next update: Wed 12 Nov 2025 10:00:38 +0000
Files and hashes: 1: ZbzYnCdTKy9eNC3OK0DEdLUOyKk.roa (hash: oL/nHAdw2PWuZlbLqbaKwj0TlvoNl+Sz5bzNx/L6zWY=)
2: iK09YNkgV_8PoBH0UMNkbjUtpdg.crl (hash: MqxFOeLAYVuzlJ/c2waCqig/L6nv6wTdqMEk3rryC6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:3b:8f:6c:dc:ef:57:ec:6f:30:18:52:db:74:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ad3d60d92057ff0fa011f450c3646e352da5d8
Validity
Not Before: Nov 11 10:00:38 2025 GMT
Not After : Nov 12 10:00:38 2025 GMT
Subject: CN=4e68029acb38c39bfa7580b27e496b978ba704db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7f:be:59:75:f5:6b:a4:50:08:84:32:6a:63:
66:40:18:59:57:64:44:df:8b:1f:bc:b7:5b:14:2d:
00:84:d5:76:64:93:eb:f8:1c:e4:7c:dd:e3:29:1c:
f8:3f:71:fa:bf:9b:a7:59:26:35:bd:98:2c:dd:05:
12:dd:e0:11:ea:ea:e1:a1:f6:72:ed:34:7f:a3:13:
f3:45:a3:da:e1:20:ff:0c:f0:78:f6:86:5f:5a:d5:
fb:77:71:98:f9:db:81:21:13:c6:ac:ac:b1:1d:e2:
c0:7c:bb:5a:14:d1:c0:4b:bb:8f:48:09:9b:bf:81:
d1:42:22:47:f9:6b:0c:24:6d:1d:92:74:92:64:20:
ed:1e:04:68:34:a2:65:48:01:1a:2c:ff:17:76:d4:
13:8f:46:cb:fe:37:fa:f8:ef:97:1c:8f:4d:c9:e3:
d8:81:a0:35:d0:9a:79:78:ab:3e:d1:90:02:f2:87:
93:fa:ac:58:54:37:39:0f:08:1b:40:f3:4b:32:0a:
41:32:e5:19:6b:05:45:af:ca:28:bb:7c:02:9a:55:
c9:89:1d:9d:86:3a:27:b3:89:23:80:5e:6f:e4:c4:
d7:5b:02:ba:df:2e:2f:6c:d9:79:4a:53:13:7f:30:
45:1c:d3:1b:90:f7:25:eb:69:87:c0:e1:66:9e:ed:
f7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:68:02:9A:CB:38:C3:9B:FA:75:80:B2:7E:49:6B:97:8B:A7:04:DB
X509v3 Authority Key Identifier:
keyid:88:AD:3D:60:D9:20:57:FF:0F:A0:11:F4:50:C3:64:6E:35:2D:A5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:56:8b:a4:09:f0:d0:0b:d8:87:7a:3e:8b:66:c2:55:a3:8d:
22:18:16:ab:16:80:8b:88:45:d6:fa:99:99:4d:8a:5e:71:b9:
bc:7d:90:df:66:d5:0a:19:bd:09:91:71:c6:ff:b8:b5:05:9d:
0f:af:d9:fb:dc:7b:17:fb:70:48:c4:a6:2c:18:ba:42:e8:6b:
41:e8:35:71:cc:01:07:0e:51:da:de:76:fc:56:93:ec:1b:09:
a4:d9:80:ad:5a:d1:59:82:c4:53:11:5c:b7:bb:c0:84:28:0c:
39:80:04:da:c2:b8:9b:bc:9f:a3:bd:72:7d:4c:62:43:b3:e6:
98:aa:52:ce:39:98:b1:b2:01:00:87:66:63:a6:0b:81:09:98:
03:2f:d9:fe:95:42:a8:d6:66:b0:da:f5:53:e9:95:68:a2:06:
5b:c3:8f:dc:c3:66:47:dd:ad:33:db:de:59:15:09:93:33:13:
26:8d:56:4e:ca:9e:a5:80:6a:5a:f9:c1:8d:a6:7c:fe:d3:11:
06:2d:85:5a:34:72:55:b5:33:c1:bf:ba:34:8e:11:9e:8a:c2:
e9:c9:6e:b5:2f:84:35:89:2a:68:e5:eb:57:41:3d:1b:01:7f:
24:6d:8a:27:94:34:04:f9:85:e6:92:d6:87:09:eb:e0:a4:81:
8e:34:0f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:49 2025 by rpki-client