Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft
File: tIvY7E4wHJ57CkO-8PPd06RTFVo.mft (raw, json)
Hash identifier: iOUpaLXT6NIbwJdrCkNf8yjoOemB+et6BJYsepLo3LE=
Subject key identifier: 83:7D:64:B4:16:B5:ED:90:5B:63:A1:1E:A9:3D:AB:63:F0:9B:49:C5
Authority key identifier: B4:8B:D8:EC:4E:30:1C:9E:7B:0A:43:BE:F0:F3:DD:D3:A4:53:15:5A
Certificate issuer: /CN=b48bd8ec4e301c9e7b0a43bef0f3ddd3a453155a
Certificate serial: 0199FCC691994E0B938505A2C77935081EC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft
Manifest number: 03A3
Signing time: Sun 19 Oct 2025 14:01:35 +0000
Manifest this update: Sun 19 Oct 2025 14:01:35 +0000
Manifest next update: Mon 20 Oct 2025 14:01:35 +0000
Files and hashes: 1: RB7HUixrp2_fRnv8EOUDAJuY_s8.roa (hash: 8tnZtAu3C6mP5DEQfehN4BPaOTowIhr+JO1L2V82k9E=)
2: tIvY7E4wHJ57CkO-8PPd06RTFVo.crl (hash: BKOBCSaadVvlDEhfutFvsJKKINqPEujZbe/PryTNGDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:91:99:4e:0b:93:85:05:a2:c7:79:35:08:1e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48bd8ec4e301c9e7b0a43bef0f3ddd3a453155a
Validity
Not Before: Oct 19 14:01:35 2025 GMT
Not After : Oct 20 14:01:35 2025 GMT
Subject: CN=837d64b416b5ed905b63a11ea93dab63f09b49c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:81:f7:00:b5:8f:c5:f3:06:29:0e:1b:e1:95:
50:5f:e9:27:cb:18:e6:12:61:b4:f1:23:ac:dc:26:
23:35:4a:af:39:ec:02:13:68:da:8f:95:98:54:86:
9a:9b:5a:19:83:1c:42:57:fe:4e:a2:7a:ba:d2:b7:
18:30:5a:29:8b:88:d7:22:40:02:8a:56:88:9d:1e:
48:e0:84:22:bf:4b:78:3f:45:97:aa:11:82:4f:8c:
49:8d:38:ae:28:0d:f4:0d:1f:9c:0c:f2:8e:9c:c0:
1d:10:fa:a1:da:3d:4c:ae:4a:c2:01:f6:08:a7:ad:
8a:2d:e1:ea:b0:e5:a7:d8:39:7b:47:74:9d:ea:33:
54:5e:58:f2:ae:10:00:74:f9:c6:ea:ee:21:1d:e1:
83:72:da:53:9c:25:13:47:96:20:d1:75:c4:71:ae:
62:23:68:d9:6e:17:3d:89:dc:f2:11:c1:68:f4:97:
9b:7d:f1:06:23:d9:05:53:f5:c0:dc:bc:54:42:1b:
b9:25:61:ba:9d:2f:53:41:ae:9c:ac:7f:3d:e6:ce:
f8:28:50:46:4a:97:4d:f4:da:8f:95:64:34:43:17:
eb:6a:3c:b5:5e:b5:9a:49:95:10:8e:db:af:e1:3a:
d3:ea:5c:95:63:e5:3e:96:45:75:50:0f:7d:a4:4a:
6a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7D:64:B4:16:B5:ED:90:5B:63:A1:1E:A9:3D:AB:63:F0:9B:49:C5
X509v3 Authority Key Identifier:
keyid:B4:8B:D8:EC:4E:30:1C:9E:7B:0A:43:BE:F0:F3:DD:D3:A4:53:15:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:bc:62:65:a5:0c:b4:a5:fe:cf:ba:eb:49:b5:e1:11:ab:72:
ea:29:0f:92:f0:04:01:1b:11:a2:64:d5:c6:31:c4:8c:0e:47:
dc:20:31:6f:93:96:4d:57:98:8b:60:4e:cb:e1:e6:16:f8:1f:
c0:d5:19:7a:14:01:5a:34:b4:8a:8c:79:7d:b3:f3:95:f8:c4:
fc:c5:df:e8:48:35:43:d9:6e:60:bc:08:21:80:ce:db:c8:61:
5a:ce:4e:32:d9:8a:d3:4b:17:c0:e1:43:47:4e:52:b3:60:8b:
4c:df:c2:0f:5d:2e:80:fa:42:52:a8:5a:65:dd:24:c6:e5:25:
f1:e8:29:29:b7:81:12:9f:77:84:3c:6d:c6:15:14:4a:ec:8f:
85:bb:4e:bc:a4:29:4e:e6:12:c8:5e:79:5f:e8:f6:b8:98:ab:
6c:f4:53:25:e2:40:5b:3e:96:74:51:6f:a1:37:f6:50:f4:ad:
3f:10:7c:da:2a:ba:dd:7f:dd:97:3c:a6:44:e1:f5:e9:c6:d6:
fb:ad:db:e8:fb:1d:df:a3:59:86:02:1f:ca:f6:ca:b5:d3:4a:
7f:47:8d:3f:27:fa:f8:ac:60:50:c1:90:f7:5a:11:cb:99:7c:
3a:93:d6:5f:9a:5c:4b:4c:48:22:05:17:19:e3:c5:e4:ac:d2:
8e:42:a7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:12:11 2025 by rpki-client