Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
File: Ip-w-z0njhsoCnd94gDvvQi6rDA.mft (raw, json)
Hash identifier: POwq8icY8JbiA7XeBMeVB6y87MrXxnFXHHFRaM8X4TY=
Subject key identifier: F6:D0:80:F4:51:F2:7C:ED:2A:4B:EB:60:8D:46:C9:AF:A4:C9:5E:7C
Authority key identifier: 22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
Certificate issuer: /CN=229fb0fb3d278e1b280a777de200efbd08baac30
Certificate serial: 0199FDD93B6520FAF1D953E713C72D60BBCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
Manifest number: 095A
Signing time: Sun 19 Oct 2025 19:01:36 +0000
Manifest this update: Sun 19 Oct 2025 19:01:36 +0000
Manifest next update: Mon 20 Oct 2025 19:01:36 +0000
Files and hashes: 1: EdKpa32IZ9Dnd3k-vmeHaMU23Tw.roa (hash: WGOFdfPIgmzQx9aGUgM6u6XYxnkTJOLa0M2Z4HLrsFA=)
2: Ip-w-z0njhsoCnd94gDvvQi6rDA.crl (hash: stG/rEYK6V3WNRtexJI6xluLlyUnbuoZWc/DxMA6Z4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:3b:65:20:fa:f1:d9:53:e7:13:c7:2d:60:bb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229fb0fb3d278e1b280a777de200efbd08baac30
Validity
Not Before: Oct 19 19:01:36 2025 GMT
Not After : Oct 20 19:01:36 2025 GMT
Subject: CN=f6d080f451f27ced2a4beb608d46c9afa4c95e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8f:c2:61:d5:70:13:8e:b7:76:b1:d4:7d:25:
c2:11:79:8e:2c:57:32:fb:d1:25:e4:e0:2f:83:03:
cd:06:00:17:95:7c:f2:63:32:77:fe:2f:74:62:44:
c5:cd:d8:58:2c:18:97:6f:d1:91:f2:b7:36:6a:a4:
65:fb:5d:d4:2e:16:ae:52:c6:35:55:19:ed:a9:c1:
08:ed:37:5a:cb:d5:0b:5e:8d:df:eb:7b:10:13:14:
a2:14:3f:49:d7:4f:dd:06:40:18:5b:c1:1f:e5:dc:
7e:f5:06:be:60:8b:3f:3c:ac:8b:0a:db:a8:31:1f:
f1:47:cc:3c:15:dc:f6:be:46:ca:66:a7:68:ca:2a:
5a:95:32:49:a3:73:17:22:6a:85:cb:2f:f7:25:f9:
6f:a6:8b:48:80:19:6e:26:8b:d2:4e:32:0e:c4:5f:
5e:58:99:3d:11:0a:c5:32:34:48:05:68:4a:ee:f4:
78:de:69:d4:00:f5:e3:37:42:f0:2f:86:9c:72:73:
89:85:6c:d9:43:21:e7:37:f2:74:18:0b:4f:41:8c:
a6:e7:31:c3:8b:f1:32:ce:5c:39:89:03:6f:21:30:
7a:ea:ee:59:af:b0:d6:4d:f2:5d:f3:15:b6:fa:b1:
20:71:b4:18:da:c0:22:23:a9:9f:55:56:64:b1:66:
d9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D0:80:F4:51:F2:7C:ED:2A:4B:EB:60:8D:46:C9:AF:A4:C9:5E:7C
X509v3 Authority Key Identifier:
keyid:22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:00:fd:f6:d6:83:32:32:95:60:3e:75:4d:11:51:c8:5c:3b:
38:ac:e6:ec:52:06:37:fe:be:2b:df:5b:e2:65:f7:8d:ba:f9:
b2:ab:a0:0f:97:b9:d3:6e:f9:eb:5d:b3:79:1e:8c:40:4a:88:
71:a8:d9:bf:87:53:a6:00:87:b3:1c:5e:c0:45:c7:5a:7b:3c:
2e:d5:00:b0:7c:7f:ba:9f:36:d9:ec:98:ac:50:0e:c0:48:c9:
9a:d6:9c:ba:7e:dc:cb:b4:39:f6:81:0b:eb:15:7d:40:d2:61:
b5:60:38:f9:52:65:a3:4f:f2:36:6a:f9:d3:09:a7:47:46:62:
f8:08:ef:94:0b:12:9e:e2:4d:7d:d3:c5:80:23:71:11:ca:a1:
d5:2d:d5:37:61:c0:74:ef:60:55:51:bb:bb:e4:45:25:42:29:
39:91:dd:7d:2b:f3:56:b5:31:d0:61:9e:37:c6:b2:7a:63:07:
3e:19:91:3e:ac:ac:85:ce:a4:17:7b:fb:c1:00:6a:4c:97:90:
58:f4:c2:7d:ae:e8:3f:c4:12:df:a2:4c:a8:83:07:9a:77:00:
5a:7f:c2:95:bd:7a:d1:8e:17:9f:f6:a2:ef:d0:05:fa:5d:72:
4b:91:d8:0d:f0:1a:88:99:12:20:84:3e:21:0c:33:c8:2b:b2:
4a:35:66:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:28 2025 by rpki-client