Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
File: IwqhYKbohsED2tvkSyPCd3YFc5E.mft (raw, json)
Hash identifier: aToXTNj+q+BvvlPasA19kFldSZDblGPzWXWBuj5BK3A=
Subject key identifier: 6F:62:36:4D:9A:95:27:9F:BC:DB:ED:2E:63:99:44:60:C5:0D:10:A7
Authority key identifier: 23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91
Certificate issuer: /CN=230aa160a6e886c103dadbe44b23c27776057391
Certificate serial: 0199FD6B41B9C0237E5AF785E135A9FA5E24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
Manifest number: 0E82
Signing time: Sun 19 Oct 2025 17:01:28 +0000
Manifest this update: Sun 19 Oct 2025 17:01:28 +0000
Manifest next update: Mon 20 Oct 2025 17:01:28 +0000
Files and hashes: 1: 1H3wr9EMEu_9kf6Zl38WrkoAkBU.roa (hash: FprWo0wu1rkhWTeCTL4oYKvIo6iA1oIZ1p0P+xAQYGs=)
2: IwqhYKbohsED2tvkSyPCd3YFc5E.crl (hash: YTISdor+WATLUP4kW0XdeMc6tZ/zeNPRln090VAKC2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:41:b9:c0:23:7e:5a:f7:85:e1:35:a9:fa:5e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230aa160a6e886c103dadbe44b23c27776057391
Validity
Not Before: Oct 19 17:01:28 2025 GMT
Not After : Oct 20 17:01:28 2025 GMT
Subject: CN=6f62364d9a95279fbcdbed2e63994460c50d10a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:dd:91:21:aa:0d:44:aa:7b:12:c7:2b:d0:
fa:b6:fe:5e:6f:6f:36:bc:1c:c7:52:87:39:72:51:
73:b7:64:71:a5:c5:c5:8d:f6:3c:69:a7:e8:1c:b0:
12:6e:aa:8b:29:4e:f6:40:87:ca:83:0c:00:6d:65:
0d:c0:ed:3f:7b:21:3a:1c:e7:f8:86:7d:ea:99:a9:
9e:59:0e:51:3c:c4:38:38:46:86:93:ef:e7:a4:72:
05:f1:b7:4c:7b:19:57:73:c1:96:f9:0e:30:1b:e6:
3b:95:b6:c3:24:d2:5f:4a:5d:4b:ab:56:6c:6d:ca:
ca:fd:92:6e:35:13:60:d3:1e:f4:5e:1b:e1:72:fc:
33:50:d0:c5:47:ae:77:3a:16:5d:20:74:ad:cf:b2:
b5:ef:ca:92:fe:1e:15:68:93:d0:e0:c8:8d:c7:08:
75:bd:d1:d0:b3:b9:10:4f:b5:19:36:07:94:78:e3:
ce:a1:f7:35:bc:e5:07:05:d9:6c:9c:60:6f:d6:53:
04:ea:b4:e7:23:e2:14:99:31:cd:e6:50:84:f1:87:
26:1a:ea:a5:f0:b7:d3:48:ca:29:c0:dc:df:13:7a:
bc:72:81:f9:76:0a:48:0e:87:dc:0a:e2:2f:c5:ea:
c9:39:df:9e:bf:cd:22:32:c9:9b:33:2c:8e:66:47:
18:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:62:36:4D:9A:95:27:9F:BC:DB:ED:2E:63:99:44:60:C5:0D:10:A7
X509v3 Authority Key Identifier:
keyid:23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:2f:da:3f:5f:8c:ff:c1:94:8c:da:4e:2d:c1:bb:64:8d:1b:
50:6f:b9:80:be:47:d7:0c:1a:e7:01:fa:52:6c:1e:f0:06:c8:
88:4a:f1:36:e9:28:26:a0:ed:b3:8f:ef:cf:d3:14:1f:95:58:
c5:da:70:5c:8b:b3:61:bf:71:9e:3e:78:e0:be:7a:3e:ed:f5:
78:28:fa:dc:84:65:e6:b8:51:85:e2:36:4d:8c:b9:7d:e5:b8:
2d:db:22:8d:6c:3c:62:a4:8a:ca:af:4c:44:7e:be:16:a3:16:
41:a6:f2:b3:26:6b:f3:71:bc:37:ee:45:f5:21:0a:56:b2:25:
a9:2d:83:4a:13:1a:f5:79:e5:f4:12:b2:52:7e:57:cc:0d:0c:
a4:e1:89:b1:4e:26:c9:2a:7d:c3:7b:8b:41:e9:d1:ac:5b:ca:
9c:0a:24:01:b0:3f:d7:a6:06:85:e7:1c:0d:56:e0:97:6a:28:
6e:d4:8d:8e:3f:e0:d5:ea:9f:a1:5d:b3:3e:65:f7:41:03:37:
e7:96:19:65:e6:95:ac:8a:e7:27:b3:e1:b8:cd:6f:5e:b1:28:
c2:80:bd:46:55:58:0f:f7:4b:c2:e9:00:07:fb:aa:df:1f:98:
77:b4:5b:bb:3f:55:2e:e8:ac:67:47:74:3f:94:01:42:f1:c4:
2e:00:5d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:54:08 2025 by rpki-client