Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/iW81xeAyGs0CFn3viAfwu29xwo0.mft
File: iW81xeAyGs0CFn3viAfwu29xwo0.mft (raw, json)
Hash identifier: pu0iui/7GTJ69CPLPcZjS9fUB2IHiQzV3BVS5tN6zik=
Subject key identifier: BF:6D:B6:A4:FF:63:B4:5E:16:36:C4:74:A9:53:A7:87:C1:B2:A0:8B
Authority key identifier: 89:6F:35:C5:E0:32:1A:CD:02:16:7D:EF:88:07:F0:BB:6F:71:C2:8D
Certificate issuer: /CN=896f35c5e0321acd02167def8807f0bb6f71c28d
Certificate serial: 0199FDD985CA00DCCC8D4E81EB148D3BD035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW81xeAyGs0CFn3viAfwu29xwo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/iW81xeAyGs0CFn3viAfwu29xwo0.mft
Manifest number: 12A5
Signing time: Sun 19 Oct 2025 19:01:55 +0000
Manifest this update: Sun 19 Oct 2025 19:01:55 +0000
Manifest next update: Mon 20 Oct 2025 19:01:55 +0000
Files and hashes: 1: KzxZqybvsz4qWRvLNMoGl_b-dg0.roa (hash: waO3ZFTQ9Kiow9t+yCx6WlAToF1IQKM9UgVqX7Ju9ms=)
2: iW81xeAyGs0CFn3viAfwu29xwo0.crl (hash: bMleyT2P0/W68OYYrkvYc3NGD0cQIQEru8gqTQmLPJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/iW81xeAyGs0CFn3viAfwu29xwo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/iW81xeAyGs0CFn3viAfwu29xwo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW81xeAyGs0CFn3viAfwu29xwo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:85:ca:00:dc:cc:8d:4e:81:eb:14:8d:3b:d0:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896f35c5e0321acd02167def8807f0bb6f71c28d
Validity
Not Before: Oct 19 19:01:55 2025 GMT
Not After : Oct 20 19:01:55 2025 GMT
Subject: CN=bf6db6a4ff63b45e1636c474a953a787c1b2a08b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ad:d5:fa:f9:08:4e:db:01:74:e7:fa:92:77:
ab:b7:94:d7:16:98:72:52:86:cf:f9:70:da:dc:2e:
db:ca:63:5d:b9:1a:fd:86:1b:83:0d:a9:77:36:da:
36:f5:04:a2:c1:8a:17:30:94:ef:12:b1:8f:a2:60:
98:17:f6:14:04:19:4e:86:91:2a:20:b8:b3:8c:88:
69:46:a8:d7:60:6b:2a:39:c1:aa:d2:9c:0c:50:00:
60:27:89:15:d6:49:7a:d3:d8:fe:f5:62:87:37:e7:
c2:aa:90:0e:45:73:93:2d:7a:87:de:bd:12:f7:b8:
18:f0:29:55:66:43:dd:9d:cd:de:ae:41:49:0d:c7:
ef:21:97:15:df:c4:e8:29:e1:a2:7b:f8:73:41:05:
46:07:47:ac:5b:8d:f3:dd:4a:d2:44:f9:a6:16:8e:
b0:da:9d:c7:12:7d:6f:5f:32:e1:9e:bb:a8:f8:17:
70:40:5b:55:60:be:99:bb:5e:d8:76:59:21:d8:4c:
67:8f:4b:43:28:6a:92:67:e4:fd:ef:07:66:e5:e7:
1b:b7:94:ac:94:2a:19:2f:76:88:93:dc:57:83:dd:
0a:8d:bb:aa:d1:96:ca:f0:f8:de:24:b3:75:99:a6:
76:30:08:77:42:e0:31:92:ff:9e:a0:0a:b6:e5:3c:
d9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6D:B6:A4:FF:63:B4:5E:16:36:C4:74:A9:53:A7:87:C1:B2:A0:8B
X509v3 Authority Key Identifier:
keyid:89:6F:35:C5:E0:32:1A:CD:02:16:7D:EF:88:07:F0:BB:6F:71:C2:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW81xeAyGs0CFn3viAfwu29xwo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/iW81xeAyGs0CFn3viAfwu29xwo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/iW81xeAyGs0CFn3viAfwu29xwo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7f:97:5c:be:cb:ba:3d:78:2a:c0:65:d4:44:13:f8:5a:1a:
67:50:3b:af:a7:a1:f4:3f:5c:ff:59:ed:30:69:bb:91:69:f3:
30:99:5d:2c:37:97:f0:57:26:25:a5:0e:9f:d6:20:d6:a6:74:
84:fc:25:be:52:34:6e:8c:7f:49:05:23:fa:a3:82:fa:2e:95:
cc:06:c6:07:1d:4c:c8:80:d8:61:36:04:13:f3:59:22:cb:ee:
4e:d2:28:5d:41:5d:12:50:48:93:31:2d:6a:a9:ab:b0:96:4d:
66:f2:18:f8:a9:c0:c1:59:07:68:34:b2:f0:d4:dc:54:3f:10:
90:5c:cc:cc:66:8f:5f:0c:29:9a:f6:87:23:05:36:a2:e0:72:
85:5d:56:b8:02:b5:76:7a:5a:49:49:32:24:67:a4:a3:ee:cd:
d6:33:8c:5d:eb:b0:11:20:da:3c:34:b6:b3:29:d0:43:56:df:
ca:a6:6b:42:a6:b5:37:a0:a0:55:0d:8a:5a:7a:5c:fe:65:0d:
e4:97:98:a8:7c:92:54:ea:94:15:de:a6:b1:39:bb:dd:7a:fd:
e6:63:f2:e4:f8:99:df:a2:bb:52:22:eb:ff:df:a6:17:4d:a3:
ac:c6:e1:ed:20:1b:9c:01:6b:79:86:f1:d9:05:65:f2:60:c6:
01:0e:dd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:37 2025 by rpki-client