Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
File: iuE5rwiZ9da1syWBNz7aMDfqMMA.mft (raw, json)
Hash identifier: lIUmrS/xr9b5cHKSeWE508IJR772rCnuP/Z/14Pba4Q=
Subject key identifier: A8:E0:76:13:56:70:70:C8:54:06:D9:AE:EA:75:E3:CD:75:07:74:F9
Authority key identifier: 8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
Certificate issuer: /CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Certificate serial: 0199FBEAB3E8170852202C8D0D6FE2D5D084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
Manifest number: 0D99
Signing time: Sun 19 Oct 2025 10:01:26 +0000
Manifest this update: Sun 19 Oct 2025 10:01:26 +0000
Manifest next update: Mon 20 Oct 2025 10:01:26 +0000
Files and hashes: 1: NGjcJESkWKoe17DLj5CiFkjFkhs.roa (hash: GPilr/syUwSnDgvatxbmfR2uNG9m+2J2hRVuK9V/K4A=)
2: iuE5rwiZ9da1syWBNz7aMDfqMMA.crl (hash: oNcyqN9JunKF5kqngZ7SfreMOTGXXIpS3WSqi1Dqa50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b3:e8:17:08:52:20:2c:8d:0d:6f:e2:d5:d0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Validity
Not Before: Oct 19 10:01:26 2025 GMT
Not After : Oct 20 10:01:26 2025 GMT
Subject: CN=a8e07613567070c85406d9aeea75e3cd750774f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:69:da:e0:cb:d6:e5:df:a3:ae:d3:61:d9:f8:
a2:e7:e2:b7:fe:15:a3:ec:89:8f:4c:c5:80:36:40:
e5:2f:b8:bc:6e:5d:ef:2d:72:54:90:8c:d7:76:b3:
66:b8:0e:f7:e3:39:f9:03:7a:fd:32:8c:a2:05:a2:
64:b6:e2:d2:b4:d4:b7:12:84:8c:16:21:51:d2:65:
8c:9e:2e:78:8c:d8:0d:4b:f7:35:fa:92:88:02:f2:
81:01:18:ab:a8:f2:8d:1b:43:92:fa:af:fc:dd:9e:
95:d5:b5:2f:7f:e6:74:b5:7b:ee:31:ff:6b:43:c8:
27:74:62:8d:ba:05:c4:df:01:39:4f:d9:78:a5:55:
b4:f0:20:5e:26:73:14:1e:eb:49:ac:f2:7d:f3:02:
0a:88:c5:12:ef:64:0e:1c:46:1c:41:64:3f:63:da:
22:1e:37:3a:a7:68:33:29:d8:8c:5a:9d:4f:7a:45:
96:9b:78:23:4f:e2:8c:4d:ad:96:66:64:3c:4a:ed:
20:2a:65:d1:c2:9b:c0:4f:cd:2f:fa:fb:f0:d3:db:
da:56:d1:33:23:90:c3:42:fa:e2:57:ff:9d:bd:c5:
6d:7b:79:0d:4c:09:47:22:52:15:11:7c:fe:f7:dc:
8d:21:1e:3b:87:92:be:6b:97:3c:10:35:24:79:09:
08:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E0:76:13:56:70:70:C8:54:06:D9:AE:EA:75:E3:CD:75:07:74:F9
X509v3 Authority Key Identifier:
keyid:8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:3e:ba:45:82:70:74:02:4a:91:79:82:6d:72:97:a1:95:6b:
e7:25:f7:dd:d7:de:ea:61:b0:28:d5:9d:52:4b:b7:03:34:23:
89:b4:93:e8:90:f4:89:fa:7e:b3:96:6f:28:55:c6:6d:b2:25:
f5:6f:ed:3d:36:2d:40:07:6f:31:ec:77:5f:a6:d1:6d:c6:57:
74:3b:26:02:34:55:d3:ed:6a:c5:b4:8e:34:6e:b3:66:1a:45:
28:3f:96:59:9d:e9:f2:b6:18:91:a3:41:8f:f7:95:03:3d:9f:
98:ce:7c:b5:b9:04:79:5f:53:12:83:bd:8a:5a:e7:ce:ba:a9:
60:d6:6b:54:6a:e7:78:b7:00:fd:00:2e:bd:47:bc:b9:dd:98:
76:3d:02:1f:8a:33:2d:0f:ae:bf:37:ea:cb:0e:cf:86:b6:6e:
30:d1:eb:f0:e7:97:f7:4a:01:8e:79:6b:2f:4a:f9:ed:ef:27:
0f:50:f3:46:17:17:7a:30:dc:4f:6e:6f:37:2f:2d:0b:55:af:
a6:bd:60:4d:7c:0b:30:1e:30:d8:56:b5:5f:4a:f1:6f:cf:49:
2c:94:04:94:96:fa:d0:32:43:15:25:e3:42:3d:cf:c2:ef:4e:
27:21:d4:7d:60:ce:05:d3:fe:4d:a2:71:00:64:1a:75:cc:92:
bb:05:96:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:49 2025 by rpki-client