Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
File: Iu6yQvsK-qA32cr1YExlh-QN47U.mft (raw, json)
Hash identifier: yQt8TXbvA6YVGoVI0+ny8+NBO8v/0oyxdRMFsRz0Rzo=
Subject key identifier: 78:4A:E8:6C:DF:B5:AC:0D:24:42:D5:C1:B9:FC:99:12:F6:1A:DC:D7
Authority key identifier: 22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
Certificate issuer: /CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Certificate serial: 019A4E4F98299A5428E099B31BA5D58CECE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
Manifest number: 1197
Signing time: Tue 04 Nov 2025 10:00:30 +0000
Manifest this update: Tue 04 Nov 2025 10:00:30 +0000
Manifest next update: Wed 05 Nov 2025 10:00:30 +0000
Files and hashes: 1: Iu6yQvsK-qA32cr1YExlh-QN47U.crl (hash: kg/fgPwOB7OKm81cGA+0K7gRGzl7oZ2lZcwVrMi+eWI=)
2: ff-qexzHEUD1WgOGjo1dcXlM5zw.roa (hash: okd5E/DUi3wr0dkKGYnxuoMgYENizBl6tX2uR1KatU4=)
3: o-JKFkGOw7b9iS81cGqL_sPqhTE.roa (hash: LeiOclwc6FMh1dAwDJxgRxawRJ1HHtp5FtwQRdIanPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:98:29:9a:54:28:e0:99:b3:1b:a5:d5:8c:ec:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Validity
Not Before: Nov 4 10:00:30 2025 GMT
Not After : Nov 5 10:00:30 2025 GMT
Subject: CN=784ae86cdfb5ac0d2442d5c1b9fc9912f61adcd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0c:95:e6:f1:4e:7c:00:0f:0e:fb:2c:f8:a3:
67:f6:be:36:17:f2:68:da:a3:2d:dd:a2:4b:04:d6:
b9:62:d2:49:6e:44:4f:c3:49:58:c0:13:17:3f:b9:
d1:a1:ac:bc:24:68:09:d9:6e:11:c0:8e:8e:65:ce:
41:03:cf:54:f6:c0:c4:a4:f2:2d:11:02:59:f1:0f:
05:e2:a4:8a:90:a5:15:55:ee:13:19:f3:03:db:96:
62:0f:a5:0a:5c:46:67:d1:11:c4:a0:d7:56:ce:f8:
96:0c:3d:9e:4c:40:72:58:11:ab:f7:8f:2c:1e:6d:
04:ee:5a:38:0e:ef:dd:2d:0c:c1:cb:c2:4a:e5:be:
96:9f:c9:dc:67:74:c0:2c:a0:af:93:25:85:2e:d3:
7c:88:cc:c0:ba:a8:d2:28:6d:75:98:4f:71:06:d6:
eb:ce:9f:b1:7b:e5:af:7c:cf:37:e1:df:bd:47:3c:
27:70:7e:32:37:f6:02:4d:96:2e:66:3e:6b:05:ee:
eb:a3:e6:be:35:20:ce:12:22:c9:2b:3c:e8:f4:15:
a2:c9:c9:3c:4c:84:75:d7:cd:bb:2e:92:f9:bb:e0:
c3:a8:14:c4:de:8b:46:72:55:13:fb:db:fa:7f:0b:
8f:67:4d:31:ae:82:21:7e:bb:30:8d:aa:49:8c:00:
3e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4A:E8:6C:DF:B5:AC:0D:24:42:D5:C1:B9:FC:99:12:F6:1A:DC:D7
X509v3 Authority Key Identifier:
keyid:22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:5f:35:0c:11:bc:d0:3c:f2:26:2c:3e:87:7c:7b:4d:ad:12:
28:1a:e1:c2:80:fa:a4:11:74:08:0c:d7:5c:5c:dc:92:2d:3a:
6e:25:fc:38:87:91:0d:d2:77:87:90:2a:e5:8f:56:5b:5a:cc:
39:d9:49:bc:4e:93:53:e1:0f:b2:e1:e7:5d:43:20:3c:9a:ea:
a8:fd:61:46:77:7d:76:fd:c7:63:f5:1b:bd:a8:75:05:af:bc:
95:92:3b:04:a7:a0:87:fa:ea:04:a0:91:db:27:04:a6:4b:aa:
01:87:ce:bb:2a:91:8b:b2:de:85:98:ba:d1:4e:18:18:1b:39:
37:08:63:e7:7b:ec:c7:27:97:c0:ae:e1:bd:3c:fe:bd:7f:bd:
bc:7f:75:f8:e5:26:8c:4b:2d:89:f2:e9:3c:0d:f9:38:ea:f7:
64:bc:a4:28:d3:05:6c:8e:e5:86:c1:30:e6:02:6e:56:40:9b:
16:a8:c8:b9:e8:33:84:9c:04:8e:23:67:81:45:6b:19:f6:30:
31:72:93:06:94:a3:67:22:16:28:b4:3a:4e:d0:ee:a3:f4:56:
14:3e:cf:6b:50:e2:a0:95:b8:2d:e2:0c:67:3e:0c:da:18:95:
8f:40:e5:d8:ca:29:3d:04:2a:ca:63:31:70:e3:d8:56:64:17:
88:7f:6c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:14:54 2025 by rpki-client