Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
File: idaknSMAf7sSRxkvu3vZgus3M18.mft (raw, json)
Hash identifier: Nmsz3Vx4hPEXfUlOLek5XMwM1ZNp59cdsNv3adi8pLo=
Subject key identifier: C4:36:64:58:C9:19:FE:24:92:B6:CC:E7:6E:35:EF:DB:DA:22:BD:FD
Authority key identifier: 89:D6:A4:9D:23:00:7F:BB:12:47:19:2F:BB:7B:D9:82:EB:37:33:5F
Certificate issuer: /CN=89d6a49d23007fbb1247192fbb7bd982eb37335f
Certificate serial: 0199FF5936709FB2880B4BC90756AC9FB5EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
Manifest number: 01E9
Signing time: Mon 20 Oct 2025 02:01:00 +0000
Manifest this update: Mon 20 Oct 2025 02:01:00 +0000
Manifest next update: Tue 21 Oct 2025 02:01:00 +0000
Files and hashes: 1: h5XDYzeHNRC78pQldSdBc3wtmlU.roa (hash: y/jCUDtK6aEdyycsVox6EyAhTQt3+YacMPTfw4ggZeM=)
2: idaknSMAf7sSRxkvu3vZgus3M18.crl (hash: LApaKzjt3M4JFY6wv6kPt8JWmMwN4cHSf2yjXSW9JoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:36:70:9f:b2:88:0b:4b:c9:07:56:ac:9f:b5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d6a49d23007fbb1247192fbb7bd982eb37335f
Validity
Not Before: Oct 20 02:01:00 2025 GMT
Not After : Oct 21 02:01:00 2025 GMT
Subject: CN=c4366458c919fe2492b6cce76e35efdbda22bdfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:48:7b:ce:63:3e:b2:a2:36:64:e4:0a:ea:78:
e8:a9:4e:42:a4:be:71:5e:15:91:3b:5d:a5:42:6c:
08:e1:74:22:db:21:d0:47:cb:52:7c:80:0f:6e:77:
b6:9b:f8:c9:fa:5a:fd:49:21:2b:3f:85:c9:b1:9a:
64:e2:9b:1d:49:d9:3b:70:eb:3b:cb:a2:1e:bb:a2:
73:7e:ed:d0:3f:9b:ee:11:b0:f4:74:fd:a7:97:bb:
70:c1:0e:2e:7b:43:9f:22:b4:08:a9:b4:35:9a:cb:
6e:e8:df:54:4c:89:8d:ad:b3:1d:27:64:4d:99:48:
12:78:ec:1f:42:99:c2:bb:33:50:b2:79:42:8e:c7:
e9:e8:4e:ab:72:c4:f2:37:0e:f0:28:dd:fe:19:6b:
da:21:bc:42:c2:e6:2b:56:e8:88:4f:b1:27:f5:0d:
26:5d:d3:4e:02:18:a4:de:cf:b9:99:41:c5:3e:da:
4c:ea:89:87:53:d8:2c:f6:a2:b6:4b:f5:9a:9c:bd:
c9:f5:0e:8a:68:9d:26:6b:95:29:fb:60:5c:8c:39:
38:c9:97:7f:1b:cf:4c:89:48:90:21:7e:b6:a7:7e:
5d:2e:a8:b9:bc:0b:6c:91:ba:13:25:61:44:9d:c1:
31:df:5d:a3:bb:c4:6f:b3:c3:18:4a:16:a3:ae:57:
18:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:36:64:58:C9:19:FE:24:92:B6:CC:E7:6E:35:EF:DB:DA:22:BD:FD
X509v3 Authority Key Identifier:
keyid:89:D6:A4:9D:23:00:7F:BB:12:47:19:2F:BB:7B:D9:82:EB:37:33:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idaknSMAf7sSRxkvu3vZgus3M18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/14099a-e2da-4f6a-b5c4-6fd751de717a/1/idaknSMAf7sSRxkvu3vZgus3M18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:0a:88:34:cf:27:d8:0e:9f:c4:34:ac:b4:ce:bf:92:07:1b:
4d:c0:9e:29:80:c2:c6:8f:a1:34:d0:16:fb:41:fa:d0:14:4d:
01:c1:0f:bb:4d:2e:85:f2:62:f1:cd:6d:6a:3a:1e:41:9f:1c:
bb:99:e1:b6:63:a3:2c:a3:d3:d4:2b:6c:bd:64:3b:6c:c0:b7:
0a:cb:a3:e1:e8:b0:5d:9f:c1:59:c3:82:1a:71:5c:38:37:f8:
4e:52:8d:af:40:c0:99:d3:ad:b8:20:4c:14:f4:15:9e:fc:f2:
26:6d:b4:63:4f:63:6e:05:37:cd:61:eb:ae:7c:18:c8:41:92:
f3:f0:3b:43:28:d2:91:c1:35:3d:6f:92:c5:57:78:19:b5:64:
46:cc:a1:c0:08:8b:92:6e:2b:60:0c:43:3f:79:ce:e9:e6:79:
06:67:2f:7a:e5:85:77:c1:e4:b6:7d:82:1b:d0:d0:a5:e5:61:
8b:f8:aa:8c:37:79:9a:09:19:94:02:50:90:22:f3:bf:54:de:
6f:15:5c:93:9c:12:99:5c:cb:cb:d1:18:66:7f:bf:fa:b9:14:
55:61:a4:6d:71:dc:d0:f9:84:73:0d:b1:db:af:a2:90:3d:50:
e5:a2:e6:61:c5:d7:d3:c0:f2:fb:3e:2b:8e:45:79:53:cb:14:
0c:7f:29:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:46 2025 by rpki-client