Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
File: iIx7lGQtLku_uVg62UH1HrjEVkA.mft (raw, json)
Hash identifier: 52j7bjQzgBMfDyeTiJrF9P8AoS0IeMLmbnBmyduDuHE=
Subject key identifier: 35:95:C0:22:0A:AC:0F:5F:A5:47:5F:2A:F0:65:62:1F:50:9D:05:55
Authority key identifier: 88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40
Certificate issuer: /CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640
Certificate serial: 0199FC58E28A099AFED7867D5223C8317D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
Manifest number: 10DD
Signing time: Sun 19 Oct 2025 12:01:47 +0000
Manifest this update: Sun 19 Oct 2025 12:01:47 +0000
Manifest next update: Mon 20 Oct 2025 12:01:47 +0000
Files and hashes: 1: cuExqJqxDerCAtylcJmCrVbgef4.roa (hash: 598WR0Sv6MZYZg5mTZECmrWO2D4wIr/fUZ49xt8Yu9Q=)
2: iIx7lGQtLku_uVg62UH1HrjEVkA.crl (hash: +1H6sYN0fTQj/ak5vIiPlTO9FRVxazCOBiWr/sA8lic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:e2:8a:09:9a:fe:d7:86:7d:52:23:c8:31:7d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640
Validity
Not Before: Oct 19 12:01:47 2025 GMT
Not After : Oct 20 12:01:47 2025 GMT
Subject: CN=3595c0220aac0f5fa5475f2af065621f509d0555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:e7:57:5f:4f:2d:25:68:1d:6d:09:07:70:
45:25:61:9c:13:5e:8b:62:b3:83:d7:c4:9f:35:bb:
9a:2c:db:ad:bc:f0:59:8a:81:03:55:a8:5e:5b:cf:
80:f5:b4:61:33:ea:26:49:d0:8f:33:24:94:46:b9:
27:a2:7c:8d:5b:8e:0b:71:3f:4f:44:a2:c2:bc:61:
ae:0b:6a:24:95:7a:f5:d5:cc:48:b8:da:ab:22:cf:
c4:92:34:8e:45:67:b9:38:78:00:35:93:d4:33:46:
49:b8:ea:18:97:6b:9b:0d:73:16:33:19:25:cf:3c:
6b:00:39:34:68:bb:b1:ed:4c:f4:09:20:a3:09:61:
39:92:6b:dd:d5:4a:6c:55:da:c2:2b:82:b9:9b:4f:
ec:1e:fd:c2:82:65:07:40:eb:d5:00:94:47:b1:5d:
db:9f:e4:d6:9a:ba:dc:fa:51:83:52:11:09:9a:1e:
8d:b7:2a:ed:70:33:bd:dd:46:0b:50:29:5c:2d:8e:
c4:17:f5:2a:2c:9f:55:00:be:8c:43:5a:e3:33:2c:
c8:89:02:f2:cb:e5:36:1d:12:8e:dc:58:9c:65:5d:
c6:7f:f5:a8:be:40:4d:e5:47:2c:f7:a7:db:12:d5:
3e:cf:0c:78:52:bf:cd:df:2b:b0:ed:f5:dd:27:5a:
06:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:95:C0:22:0A:AC:0F:5F:A5:47:5F:2A:F0:65:62:1F:50:9D:05:55
X509v3 Authority Key Identifier:
keyid:88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:89:59:6b:cd:79:eb:d4:ed:b8:78:85:9b:8b:3e:94:16:1a:
4e:f1:83:8b:db:a4:55:eb:d1:64:1f:39:97:52:cc:6b:9d:cc:
2d:95:54:26:ba:f5:e1:19:cf:d9:23:26:6e:71:83:21:36:97:
2c:41:08:59:f8:fc:9e:33:10:1f:24:52:08:1a:f8:3b:78:62:
93:b3:53:45:e7:2e:b0:d9:a1:41:12:a2:1f:3a:17:29:b7:9b:
5f:8c:68:e3:de:f1:f4:a5:14:70:86:5d:18:e7:51:8e:6e:a5:
9c:89:39:17:30:9d:19:a5:b3:53:b4:13:3b:5d:fc:43:ea:fd:
32:80:3a:68:df:d6:61:cc:c7:57:15:08:8f:15:7f:bf:59:3c:
c6:d8:07:b4:60:a4:3c:a3:92:65:7a:15:00:f9:ae:47:c4:94:
4f:aa:f0:45:8c:1c:d5:b3:9f:73:d2:fd:40:e2:3e:2b:02:04:
c3:35:47:ef:57:36:e7:02:cf:f2:f9:3a:1e:16:ac:b1:de:13:
9b:0b:4f:0f:ee:76:47:1c:7a:5b:ba:d5:5f:6f:55:ed:b5:b5:
f0:70:72:c5:1e:39:90:9c:eb:6c:d0:f7:4d:6f:09:f1:0c:26:
a3:33:3f:85:2b:94:21:d1:58:bf:3d:05:7c:4b:fd:01:ff:ae:
0e:b7:22:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:04 2025 by rpki-client