Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
File: io-pkrwKYdssvnhuHFnTYMzlRIY.mft (raw, json)
Hash identifier: AyaXAWg3+h5/grHamAWmxzuRaEkBhlENv1mPPLyAk2c=
Subject key identifier: 72:BD:D1:A6:EB:FA:E5:2D:1C:45:53:4C:01:12:3B:D0:D2:65:C0:5C
Authority key identifier: 8A:8F:A9:92:BC:0A:61:DB:2C:BE:78:6E:1C:59:D3:60:CC:E5:44:86
Certificate issuer: /CN=8a8fa992bc0a61db2cbe786e1c59d360cce54486
Certificate serial: 0199FB459355EEC34719A4C4B3A648A91A48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
Manifest number: 0837
Signing time: Sun 19 Oct 2025 07:01:04 +0000
Manifest this update: Sun 19 Oct 2025 07:01:04 +0000
Manifest next update: Mon 20 Oct 2025 07:01:04 +0000
Files and hashes: 1: UCOQjmQUUOgrTdTJgotuOqOo8tE.roa (hash: LKSVHd9tPQynvxDd2UN8Jk/eJK88GQBFqDbfRDHvZ3g=)
2: io-pkrwKYdssvnhuHFnTYMzlRIY.crl (hash: ls1kvCn+CTjT2sUTvSozpxulxN1AWvjts3tnYs5U3bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:93:55:ee:c3:47:19:a4:c4:b3:a6:48:a9:1a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8fa992bc0a61db2cbe786e1c59d360cce54486
Validity
Not Before: Oct 19 07:01:04 2025 GMT
Not After : Oct 20 07:01:04 2025 GMT
Subject: CN=72bdd1a6ebfae52d1c45534c01123bd0d265c05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b5:71:c5:6c:5c:ec:73:e5:7f:5c:13:01:25:
79:4e:36:ac:67:4b:0a:61:29:6d:fa:d4:bd:98:a1:
f4:a5:b4:cd:66:aa:3a:a9:5e:36:f5:cd:90:b0:4c:
18:0a:fe:ee:dc:1f:4d:f6:a5:50:2a:06:79:6f:ee:
66:76:50:0a:8d:0f:7d:7f:a3:d4:ba:6e:a8:b4:a9:
13:73:79:e4:0c:94:fc:ab:ab:83:3a:34:c1:f1:d0:
8c:02:84:1f:d0:c7:d4:d1:f8:6f:19:dc:10:b8:13:
8b:16:ba:30:6e:83:de:89:9f:8f:05:ff:38:50:66:
bd:1f:de:f1:1f:23:17:01:cb:80:06:64:1e:55:5e:
b0:07:1e:c3:23:2c:f6:bb:3e:d8:08:37:02:f0:9b:
ba:2b:84:23:86:e9:9a:58:7c:4e:51:a0:2c:d7:38:
f3:c9:1e:03:26:78:39:44:39:73:c1:d4:40:55:08:
8f:fb:b5:d5:ee:97:f4:b3:36:58:b9:36:e1:96:48:
ff:4f:9e:9b:09:0f:6f:80:06:6e:32:0b:de:3e:75:
2d:eb:e7:53:46:66:6f:6d:0c:6a:ba:8f:ee:09:de:
a9:c6:97:00:6a:07:64:43:2c:98:e3:a8:24:31:52:
a4:86:80:28:0b:d2:d9:e6:cb:fa:fc:9a:bb:46:bc:
e3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BD:D1:A6:EB:FA:E5:2D:1C:45:53:4C:01:12:3B:D0:D2:65:C0:5C
X509v3 Authority Key Identifier:
keyid:8A:8F:A9:92:BC:0A:61:DB:2C:BE:78:6E:1C:59:D3:60:CC:E5:44:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:8f:10:6c:c0:50:23:a0:e2:e4:c6:4c:9b:60:9d:6e:6a:3d:
1f:02:26:f1:5b:62:18:17:9e:c8:4d:0a:f6:19:14:bf:9e:88:
49:ae:f5:1a:3c:9a:92:e9:c0:56:61:41:7b:6a:e3:5e:54:09:
68:f2:77:1c:4c:60:1b:5c:bc:53:16:ee:62:e6:11:02:53:64:
a3:a7:4c:ff:6e:57:2c:ba:26:96:42:5d:c5:3c:16:d8:26:18:
b2:48:ae:31:fc:fb:1f:ad:30:eb:11:ec:34:c6:a2:da:10:e8:
a8:62:b8:87:ef:9a:5d:3d:61:49:d8:61:8b:65:bf:88:cc:c5:
1d:1e:f3:c7:b9:8b:34:08:3a:c9:29:e2:59:79:ba:48:7f:97:
9c:4a:68:63:d7:8e:04:04:12:fd:71:8c:14:79:f2:f9:b7:e9:
fd:76:c8:66:65:d3:af:09:33:09:bd:6c:2c:b5:f2:b0:f1:e5:
0e:e4:4d:7a:00:3c:88:d4:69:3f:d7:69:d0:a1:9f:fb:b7:24:
b4:48:a1:86:c0:1c:e0:73:22:ac:05:a3:a5:10:3e:da:7b:da:
c4:2f:a7:4a:03:4f:19:d0:a0:74:eb:ff:61:df:3a:d3:51:05:
aa:2b:aa:03:3e:f8:51:5a:7b:03:de:58:d5:50:5d:37:86:10:
f3:c4:99:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:03 2025 by rpki-client