Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
File: ip_Szd9LRN55pb_Iyhmlb1UutOg.mft (raw, json)
Hash identifier: uj1EyycX8vjzzOnlmphf5bk2JklcfH7xtvTRt/oeWzI=
Subject key identifier: AA:17:22:00:F6:D8:AE:92:B7:88:3C:D1:A3:7A:A4:18:93:06:77:D8
Authority key identifier: 8A:9F:D2:CD:DF:4B:44:DE:79:A5:BF:C8:CA:19:A5:6F:55:2E:B4:E8
Certificate issuer: /CN=8a9fd2cddf4b44de79a5bfc8ca19a56f552eb4e8
Certificate serial: 0199FC21B2B87CBE9E4610088FD826344866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
Manifest number: 037D
Signing time: Sun 19 Oct 2025 11:01:30 +0000
Manifest this update: Sun 19 Oct 2025 11:01:30 +0000
Manifest next update: Mon 20 Oct 2025 11:01:30 +0000
Files and hashes: 1: EjHQSd2Nf6QUdVOjBa5Ak5N3IUs.roa (hash: 9F79YDrAyrZr3jGxVCvlmn8UnHKM3CvRjuESh5xZJzI=)
2: ip_Szd9LRN55pb_Iyhmlb1UutOg.crl (hash: P1Ia9FCLOxILaGBmWEPvaNJIf/HuBNb+mGev22eiyKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b2:b8:7c:be:9e:46:10:08:8f:d8:26:34:48:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9fd2cddf4b44de79a5bfc8ca19a56f552eb4e8
Validity
Not Before: Oct 19 11:01:30 2025 GMT
Not After : Oct 20 11:01:30 2025 GMT
Subject: CN=aa172200f6d8ae92b7883cd1a37aa418930677d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:97:20:23:45:f3:8f:99:df:d1:a6:ba:df:b0:
d3:e0:a6:fc:35:1d:42:8b:8b:43:70:5f:6c:57:7c:
3d:22:4e:e2:62:31:7b:87:30:35:87:cf:1f:0c:05:
cb:4a:c8:08:e3:98:ec:4f:10:38:ad:cc:dd:61:46:
39:cd:87:f9:66:83:2a:70:7d:3c:0f:0b:60:4c:ec:
5a:01:fc:57:18:fe:41:90:29:6a:07:a2:6a:c3:87:
39:f9:22:5c:22:60:ab:f6:52:13:c6:c0:54:53:f9:
91:2d:45:91:d8:a0:e1:36:03:c5:6b:47:b3:63:08:
85:35:f0:9c:3a:06:49:b4:61:59:bf:d7:68:f8:ed:
39:f2:fc:70:b9:d7:3f:04:b8:f1:f7:09:d4:d8:83:
0e:e3:ff:ff:aa:0a:de:c1:79:3f:ba:0b:e4:5a:12:
2a:08:ed:54:72:75:47:c4:9c:b7:51:35:69:48:d5:
8e:24:f8:51:79:a2:bb:98:36:d9:ab:56:8c:2e:50:
ee:9b:54:e2:bd:d7:99:1c:34:d5:8b:7b:82:1c:cf:
06:fc:46:a2:ab:b5:fd:e6:f1:20:d5:fc:ae:52:b8:
3b:35:9a:15:4b:e9:79:35:a5:92:1e:3e:b0:39:3a:
7c:cd:53:8f:82:ae:0d:b7:6f:3c:96:e7:ad:87:d0:
45:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:17:22:00:F6:D8:AE:92:B7:88:3C:D1:A3:7A:A4:18:93:06:77:D8
X509v3 Authority Key Identifier:
keyid:8A:9F:D2:CD:DF:4B:44:DE:79:A5:BF:C8:CA:19:A5:6F:55:2E:B4:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f1:38:5a:bd:a8:f5:16:e3:a1:93:f5:74:7b:fd:69:41:72:
61:ef:3d:0d:d7:a0:64:d1:32:10:df:5f:36:76:90:e4:e7:75:
2e:93:0d:39:8c:03:72:9c:4c:ee:10:38:0a:67:31:95:90:c7:
38:9e:d2:40:87:6a:0c:e6:e3:08:1c:d2:7a:dc:a9:63:1e:52:
5f:c8:e8:d4:dc:56:bf:42:ee:3d:e8:8e:8b:be:3a:30:93:74:
d2:66:09:45:54:6b:9e:56:f5:91:1b:6d:dc:39:0f:6a:c0:1d:
f9:70:87:26:85:54:70:3a:64:68:71:0e:3b:a5:ed:72:82:54:
ef:97:ff:82:32:93:08:9e:82:38:bd:9e:05:8e:d3:00:62:5f:
74:5b:27:1c:c8:7d:03:82:9c:f9:bf:b9:52:f3:2a:d6:5d:c1:
15:6d:fe:3d:c5:96:6c:aa:47:39:a3:ab:e9:6b:f3:28:89:5f:
2b:9e:41:ae:de:ea:cc:9d:1a:49:e3:24:7c:c4:e5:a5:60:ae:
dd:eb:65:09:9f:8b:db:e3:66:cd:40:5e:21:36:72:c2:60:a7:
cd:fd:d6:d7:46:19:86:3f:0d:81:5b:9e:94:7b:86:85:75:c7:
3b:9f:ab:fe:ff:59:ed:71:03:27:66:8c:83:d1:eb:71:c5:ab:
71:b9:d2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:31 2025 by rpki-client