Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
File: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft (raw, json)
Hash identifier: VVeLv0HrIztsbT+CY39DgiV8VT5i3UPUDWo5KmFMXh8=
Subject key identifier: ED:9D:7B:95:8C:78:FE:EA:20:BA:4A:C3:C8:DE:26:25:5E:0F:37:87
Authority key identifier: 89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
Certificate issuer: /CN=8986e25683302c38270d0f90c4aad1519393d545
Certificate serial: 0199FBEB6BBD1C126B6905FE3AC9B829D0C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
Manifest number: 12F4
Signing time: Sun 19 Oct 2025 10:02:13 +0000
Manifest this update: Sun 19 Oct 2025 10:02:13 +0000
Manifest next update: Mon 20 Oct 2025 10:02:13 +0000
Files and hashes: 1: hBtuYA8NQ04R8tq6jZPsM1-BvhU.roa (hash: K70nTdo1e1FCrO48Dr3FeEO2IPCXhYeBeZlKIyFXxPc=)
2: iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl (hash: 1NXiOa9bi7Nfr0rrasLNvRbSUdUHmFzAD9p6LSKYAk0=)
3: yYfUODDume9xFNHrgw8kXHPMP18.roa (hash: X3WTz4JdrFUIjxDVjaUEhmRWKqzFmlYHhSjsH9h5dXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:6b:bd:1c:12:6b:69:05:fe:3a:c9:b8:29:d0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8986e25683302c38270d0f90c4aad1519393d545
Validity
Not Before: Oct 19 10:02:13 2025 GMT
Not After : Oct 20 10:02:13 2025 GMT
Subject: CN=ed9d7b958c78feea20ba4ac3c8de26255e0f3787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:7e:84:bf:87:39:b4:af:6f:7f:a5:a7:96:
fe:39:97:27:0c:71:77:9f:ad:13:bb:61:f2:0d:3a:
13:5d:37:79:5e:56:92:bc:df:74:ee:c1:c0:66:e8:
8a:c2:1e:8f:dd:a3:a1:e7:55:a9:d3:19:03:17:48:
2c:17:6f:95:7d:8e:e2:41:3b:bc:bd:28:d6:84:5b:
95:82:99:63:c4:a9:76:68:44:c6:9e:53:18:cd:43:
7a:71:c8:ae:1f:02:93:d3:f5:fc:b3:31:f9:19:f1:
68:d2:ca:49:e0:00:bf:56:85:6e:8a:ba:64:6f:14:
5f:42:0b:b8:48:de:0c:54:e6:b6:9c:ee:70:a0:2e:
e6:d6:a1:3a:27:37:f7:af:b3:be:61:c8:73:5d:b9:
99:e3:f6:af:20:f1:74:bb:1d:2e:a0:5e:6d:d3:1d:
cb:ba:1f:16:58:ef:98:d0:4e:3b:bc:fa:d8:6d:fc:
8e:04:08:5a:90:c5:af:8f:da:7e:18:f0:c1:c1:7d:
fe:74:37:e8:21:ce:25:19:0b:91:54:c7:fc:32:d9:
fc:61:27:1f:60:de:89:b7:ba:0a:7a:9e:42:19:df:
52:a1:89:c6:5f:31:fa:84:66:3a:ff:67:78:4d:1b:
a9:b6:d6:15:07:72:28:8a:8c:ad:ee:1b:69:54:9d:
88:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9D:7B:95:8C:78:FE:EA:20:BA:4A:C3:C8:DE:26:25:5E:0F:37:87
X509v3 Authority Key Identifier:
keyid:89:86:E2:56:83:30:2C:38:27:0D:0F:90:C4:AA:D1:51:93:93:D5:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/iYbiVoMwLDgnDQ-QxKrRUZOT1UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e1:df:12:37:dc:f7:9d:a3:18:a3:b2:3a:b2:c4:1c:1c:1d:
aa:a8:2f:fe:6f:80:38:19:cc:48:27:80:26:04:8d:05:88:bf:
6e:d8:1c:69:83:d9:2c:9d:8a:0a:33:a9:02:dc:56:4d:5b:07:
43:cc:c6:fc:43:51:d6:50:da:5b:88:6f:51:36:ea:1a:77:eb:
3d:7c:e3:33:b9:1f:c6:6c:0f:41:fd:b1:44:8e:3f:bd:7a:d4:
8f:a5:01:ee:2c:3e:29:6f:5c:48:f6:84:53:f3:b9:80:8d:79:
e4:fc:2c:0c:5c:4a:ca:5b:6f:8c:b8:37:25:bf:2b:c6:6e:87:
54:73:f0:a1:63:c0:12:21:8f:18:88:0b:70:45:ad:71:f0:0b:
fb:45:f3:c1:df:ca:1a:60:3e:10:3c:5d:66:85:ed:f8:5d:7b:
d6:b0:ad:a5:23:d7:d2:c7:ff:bd:81:8c:b0:09:dc:5d:4d:3c:
0e:10:c9:30:02:50:ad:8f:27:db:06:8b:8c:89:8c:60:9f:c4:
44:e2:6a:09:39:1a:44:41:ca:20:e6:d4:dc:2e:da:ab:49:7f:
a1:fd:47:e0:7d:91:cd:d8:ef:07:8d:26:0f:12:b9:de:3a:15:
ff:94:5e:cf:e7:59:04:e3:5b:0a:58:cb:3a:49:63:68:58:a6:
cc:85:03:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:25 2025 by rpki-client