Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
File: iiJ8Nfko2ci4_3wlch79R6kNy2c.mft (raw, json)
Hash identifier: sRF1lLQblNPZ67uC0zVRdg9loQe2UkZyLzpF03stO0o=
Subject key identifier: 45:F0:E1:8E:0F:5A:17:05:BB:C6:36:A3:D8:A5:FA:B9:13:85:ED:E7
Authority key identifier: 8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67
Certificate issuer: /CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67
Certificate serial: 0199FD34034CD24D41E82E43F7C5720FC2BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
Manifest number: 13EA
Signing time: Sun 19 Oct 2025 16:01:08 +0000
Manifest this update: Sun 19 Oct 2025 16:01:08 +0000
Manifest next update: Mon 20 Oct 2025 16:01:08 +0000
Files and hashes: 1: K7N-hRXidANMpYlZJ_rYSwLoLCk.roa (hash: tqDwe1a97FYihn4sdeIxy/I7wKkMHB8gK4badlQZXTs=)
2: iiJ8Nfko2ci4_3wlch79R6kNy2c.crl (hash: mNmirOm93517Z7JPEsc3jV9v6XphpeO2bCWeqbYyaLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:03:4c:d2:4d:41:e8:2e:43:f7:c5:72:0f:c2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67
Validity
Not Before: Oct 19 16:01:08 2025 GMT
Not After : Oct 20 16:01:08 2025 GMT
Subject: CN=45f0e18e0f5a1705bbc636a3d8a5fab91385ede7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:09:83:e3:f0:72:99:49:b9:36:a5:e0:76:27:
91:49:6c:17:7e:bc:d5:79:86:d9:a3:e6:15:d3:2b:
ef:55:37:43:05:a9:a1:11:77:aa:ce:ae:b9:c0:6e:
14:92:fb:10:ca:2e:55:93:f4:a1:96:9c:84:ee:a7:
ab:9d:05:9b:aa:cf:70:77:af:d7:11:40:d9:bd:54:
10:06:e3:c2:e6:3b:de:98:11:94:b2:22:86:ae:03:
50:17:93:77:7d:a1:a1:ba:28:86:f4:db:85:92:b6:
c2:ec:1f:e6:6d:d1:66:4e:ff:b8:d5:07:f3:a4:7f:
04:01:fe:cd:70:c6:95:3a:48:40:03:c9:63:35:f1:
22:ec:fd:03:73:a4:bc:43:d1:00:c2:96:02:6d:78:
7d:4c:6b:15:15:d9:b9:a8:ba:19:3f:e2:bc:1c:fe:
ea:46:17:55:f2:5c:fc:60:b3:b5:9d:de:18:d9:92:
12:18:3e:8f:eb:59:83:de:6c:05:f3:d1:6a:e4:32:
c8:bf:b1:2c:fa:b8:67:cd:d9:0b:0c:d1:4f:33:14:
92:eb:cb:d1:f9:8d:55:f3:80:36:c7:44:7a:74:92:
f9:dc:3d:e0:7c:ea:db:3a:92:fd:ca:2b:ec:09:fd:
76:67:c3:c4:77:df:3c:a5:81:77:43:7d:b9:3a:7e:
5e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F0:E1:8E:0F:5A:17:05:BB:C6:36:A3:D8:A5:FA:B9:13:85:ED:E7
X509v3 Authority Key Identifier:
keyid:8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a5:f2:3f:46:f4:45:8c:a2:83:22:84:5d:56:d5:ae:b6:62:
3c:22:a9:36:9d:21:6a:e5:73:51:b7:31:ef:d4:0f:5d:17:04:
7c:c9:2a:b7:bd:df:22:c6:86:55:02:92:c2:7a:3c:95:57:90:
7d:dd:d0:a3:e2:6b:70:29:13:87:3d:21:55:e2:74:33:e4:e2:
88:85:f0:c1:fb:26:87:7a:06:31:11:f3:b7:c0:0a:b3:47:87:
7e:c0:d8:f3:b8:8a:14:0f:a8:9b:d1:12:b2:ef:8d:76:c7:b7:
67:28:0f:b7:b5:46:d5:65:94:41:0d:bc:a9:20:e7:3c:75:bc:
6f:27:3f:97:0a:d7:de:8a:ae:97:59:bb:e7:18:b4:f6:18:57:
3d:9a:4a:ca:cc:62:14:9d:fc:3b:9e:7a:fa:31:87:79:46:eb:
46:4e:31:57:e9:f9:3e:df:14:8c:8a:0d:31:7e:c3:9b:7e:e8:
2f:cd:47:e2:e4:59:b9:7e:2e:a9:20:55:ce:3a:d1:57:f4:b0:
4e:56:6d:1f:14:32:eb:6f:ba:43:70:a8:55:c2:13:ea:e4:b3:
27:ef:93:e3:48:a5:63:64:62:4d:47:b3:d0:c3:62:da:68:20:
53:c4:92:21:bd:0f:d6:88:62:e3:a9:a5:96:a0:e5:03:2a:7b:
2b:a7:73:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:35:56 2025 by rpki-client