Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft
File: iOuqLxdpo932X4c9wx81HvB4rSU.mft (raw, json)
Hash identifier: b93n0AtyjSDFbPhF4lby0oI8ntBT5PNaOI6RKsuH+eE=
Subject key identifier: CF:14:FD:DB:2A:54:63:9C:D0:C5:38:61:49:16:ED:D7:A4:89:25:B7
Authority key identifier: 88:EB:AA:2F:17:69:A3:DD:F6:5F:87:3D:C3:1F:35:1E:F0:78:AD:25
Certificate issuer: /CN=88ebaa2f1769a3ddf65f873dc31f351ef078ad25
Certificate serial: 0199FC8F6A979E05158BEB1442E7D2AC4841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOuqLxdpo932X4c9wx81HvB4rSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft
Manifest number: 0E80
Signing time: Sun 19 Oct 2025 13:01:21 +0000
Manifest this update: Sun 19 Oct 2025 13:01:21 +0000
Manifest next update: Mon 20 Oct 2025 13:01:21 +0000
Files and hashes: 1: P5TwA4gqR6DNAZ9Tx38K6wVBeSw.roa (hash: JFHWlXs6ts8+WEohOsphMs0bmJPDZeURLkqEXMqad1U=)
2: iOuqLxdpo932X4c9wx81HvB4rSU.crl (hash: uZsuMvPhemWttSJh+v3M83micNQ4MlYpDEAiW+p2je0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOuqLxdpo932X4c9wx81HvB4rSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:6a:97:9e:05:15:8b:eb:14:42:e7:d2:ac:48:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ebaa2f1769a3ddf65f873dc31f351ef078ad25
Validity
Not Before: Oct 19 13:01:21 2025 GMT
Not After : Oct 20 13:01:21 2025 GMT
Subject: CN=cf14fddb2a54639cd0c538614916edd7a48925b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fb:fa:c0:6c:3c:0f:79:e4:0d:ba:0d:ae:e1:
e7:fd:e5:0a:bf:0a:fc:f8:b2:ff:cf:7b:dd:5b:ad:
b4:0b:7e:ce:38:1b:bd:9a:19:28:c3:a3:16:01:56:
ef:68:4f:21:f2:4d:69:89:2c:ea:36:5e:71:47:f1:
fd:21:b2:94:a8:0a:c3:1f:3f:40:3c:3e:24:ae:d6:
68:83:55:03:f0:51:fc:73:8d:78:dd:a7:06:2d:42:
e0:bd:8c:6c:3e:96:9b:e7:23:74:f8:32:2c:00:b7:
b3:b9:5d:ca:99:21:e2:63:41:6a:3f:75:79:67:18:
6c:4b:0d:df:fb:16:5d:82:61:c1:f5:89:a3:9f:c4:
b8:53:4a:e0:3b:43:5f:a0:18:27:db:4b:af:22:cf:
68:1d:7e:14:f0:a9:f5:7c:f4:8d:56:02:15:61:4a:
3b:2d:2a:c2:91:17:9b:1d:5b:6b:ee:eb:80:3c:4d:
5f:ee:40:4e:f5:72:52:57:5d:ee:ac:e4:3d:cf:59:
02:3d:11:a3:83:29:9b:49:23:15:7e:46:a9:a7:12:
ac:c6:20:54:81:c9:39:8a:58:7b:7c:a0:95:cb:aa:
a0:ab:71:27:de:3d:05:61:b0:90:6d:d1:bb:92:15:
92:27:3a:05:77:cf:d0:4a:cd:f1:79:b5:66:ce:34:
ac:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:14:FD:DB:2A:54:63:9C:D0:C5:38:61:49:16:ED:D7:A4:89:25:B7
X509v3 Authority Key Identifier:
keyid:88:EB:AA:2F:17:69:A3:DD:F6:5F:87:3D:C3:1F:35:1E:F0:78:AD:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOuqLxdpo932X4c9wx81HvB4rSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:9c:60:99:7e:00:6d:e0:37:c8:0e:5e:c9:bd:51:3c:07:46:
b4:bb:61:5f:32:86:e8:9f:0c:18:b3:99:db:7a:67:5e:4b:f7:
19:2c:05:71:2d:75:73:6d:68:ce:89:9a:2a:91:6f:7a:19:25:
ed:1e:92:77:8c:42:69:51:76:bf:69:7d:0f:0f:d4:92:48:ae:
36:69:03:43:20:4c:40:7c:95:a9:cc:f9:c3:a0:47:51:85:cb:
97:72:fc:81:5e:e7:0b:2e:6b:b2:01:c5:a8:4d:0f:e6:43:85:
b4:7c:d2:2f:ee:c6:ea:e7:d1:1b:07:a2:8c:7e:88:08:c4:e4:
ab:b8:4b:77:cb:f8:64:f1:ec:28:20:e2:78:a9:d8:8d:b4:de:
c2:0b:32:bd:b7:c1:da:bf:af:ad:0b:36:9b:da:10:44:fd:4b:
9b:52:ca:9a:7b:60:e1:dd:93:7c:72:45:dd:e6:ec:63:32:53:
cf:0e:77:01:23:be:0b:35:a0:bc:90:37:79:ed:8d:a1:da:d6:
d5:db:c2:ff:75:52:91:96:b5:d9:e6:bb:e5:cf:49:c0:ca:c9:
d7:70:74:08:09:58:7b:99:28:7f:b1:5f:37:5d:c9:62:2e:b2:
79:89:45:35:ca:a2:6f:05:36:22:fb:a3:c7:55:e3:1b:f2:e1:
71:92:52:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:38 2025 by rpki-client