Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
File: iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft (raw, json)
Hash identifier: FemecWhXvyoKjbH+jslmBVYHJaTq3GuuLAp2w3JTTzc=
Subject key identifier: E0:69:57:81:7A:EB:8A:C5:0D:81:DE:2C:F6:6F:D7:A7:27:DD:82:5F
Authority key identifier: 89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
Certificate issuer: /CN=8916aaa5d252fd90145fedac683762d6e2074155
Certificate serial: 0199FB7CC97BF5489B3D5156382D4B61DC9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 08:01:23 +0000
Manifest this update: Sun 19 Oct 2025 08:01:23 +0000
Manifest next update: Mon 20 Oct 2025 08:01:23 +0000
Files and hashes: 1: EJO9ljE1s0Q84FuNpxDY98O5gUs.roa (hash: MidhZCUKLP8FjCtsor/fdefcfGoS6d1va0RAyvBU+x4=)
2: iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl (hash: 1Ypqmox1b4pMZrgQdSkaNy5Ckxa19KdHp/8TUohOil4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:c9:7b:f5:48:9b:3d:51:56:38:2d:4b:61:dc:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8916aaa5d252fd90145fedac683762d6e2074155
Validity
Not Before: Oct 19 08:01:23 2025 GMT
Not After : Oct 20 08:01:23 2025 GMT
Subject: CN=e06957817aeb8ac50d81de2cf66fd7a727dd825f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b4:08:5a:af:ba:ff:81:5f:1a:1c:7a:5c:d4:
2d:48:38:51:93:30:45:e0:13:95:ff:b3:06:37:29:
7f:53:2e:33:52:f8:a8:2b:9b:61:c3:88:29:a4:a3:
54:00:fd:bd:40:7f:90:80:6d:38:78:a3:22:04:0b:
21:9e:5d:ef:11:1a:a2:28:03:97:d2:5e:5b:b3:75:
17:62:1b:9b:1a:7f:3d:de:34:0b:f1:b6:b2:da:2f:
98:39:15:ad:0a:22:c5:7f:79:34:a1:5d:9d:0f:9a:
89:f3:ba:60:a8:93:35:26:d7:67:f3:f5:a4:f3:50:
2e:eb:31:59:de:2e:68:76:30:01:30:bf:71:18:13:
53:4f:1b:a2:a3:06:51:8b:8c:15:56:09:01:13:98:
25:c5:76:21:3c:9d:2e:94:e4:63:fd:a5:22:4f:7c:
5a:57:aa:38:0a:97:44:e5:16:70:f8:b2:94:8d:f5:
eb:f6:41:17:46:f7:26:4c:97:26:53:95:d0:0c:2f:
13:e9:d1:a2:99:d1:34:78:db:6e:e4:41:56:c9:da:
81:ce:94:7c:c1:5a:e1:62:69:83:36:d6:88:04:20:
71:96:39:94:5e:d6:c7:94:7d:0b:b4:ea:27:5a:09:
d3:ec:4e:e7:73:10:f3:c6:41:1a:b0:a8:37:2a:7b:
59:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:69:57:81:7A:EB:8A:C5:0D:81:DE:2C:F6:6F:D7:A7:27:DD:82:5F
X509v3 Authority Key Identifier:
keyid:89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:5e:25:77:55:a8:9b:c8:d9:10:2f:08:02:f4:0a:fe:1a:b1:
79:c0:67:77:74:33:8b:4a:e4:bf:a3:ff:a1:df:00:12:1f:f8:
3b:13:70:1f:06:02:12:60:f9:71:60:88:f5:7b:0d:48:7d:7a:
b5:17:d1:59:c7:47:70:d1:16:ff:11:1f:57:96:ca:db:93:8d:
90:c9:56:80:b1:6c:c1:2c:48:08:50:73:9b:b7:4c:03:9d:4d:
14:1c:40:a5:c6:bb:10:ce:52:b6:39:95:42:66:43:8e:e5:ab:
fd:3c:d4:4c:2a:e7:09:04:8c:d3:53:cc:98:45:25:d6:81:e3:
0a:06:bd:2c:c9:ed:2e:0a:29:af:40:04:12:51:c3:2e:34:47:
46:4b:0c:45:48:17:67:a0:c8:9d:65:60:3f:56:69:1f:e0:bf:
98:98:ab:76:e1:d7:4c:84:1a:12:aa:14:03:63:e8:b5:fd:0d:
f6:8f:58:94:a1:06:53:b3:64:ee:4b:db:13:71:95:5d:d1:33:
b4:7f:17:17:c8:b2:eb:7e:f5:ff:2c:4f:2b:38:67:86:d1:90:
04:61:bf:7c:13:a2:c7:39:32:b4:44:98:df:08:ca:32:8b:dd:
ed:8a:72:ac:23:8e:73:f1:cf:16:7d:61:74:1b:33:2f:6d:d9:
de:76:13:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:26 2025 by rpki-client