Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
File: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft (raw, json)
Hash identifier: MiDVzaAzAj8CE/aq3ziqSoGMTZE/UTcbTl3lwKlFEzg=
Subject key identifier: 49:59:31:78:BD:74:21:0F:AA:73:F3:FB:44:71:0E:F4:77:2C:A9:75
Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
Certificate issuer: /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Certificate serial: 0199FD6AF1EB3AD283ECBD76218AD707174D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
Manifest number: 0E92
Signing time: Sun 19 Oct 2025 17:01:08 +0000
Manifest this update: Sun 19 Oct 2025 17:01:08 +0000
Manifest next update: Mon 20 Oct 2025 17:01:08 +0000
Files and hashes: 1: RZ_4-lCargPhDnsOSk7--hEov_g.roa (hash: gD59YlfjEOMaA7jKCDG57LDieQBZUtUGKFnW719fGG8=)
2: abKcOp3qmm4ybUnw1tBA-G8yOrc.roa (hash: /klckxmc/giyHaniwWbEf+LlQIwRtUPvFDW14KDXips=)
3: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl (hash: +y6db/i32vPelRG5/ujIr0KoAUOLYKslo2a0/7tTsxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:f1:eb:3a:d2:83:ec:bd:76:21:8a:d7:07:17:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Validity
Not Before: Oct 19 17:01:08 2025 GMT
Not After : Oct 20 17:01:08 2025 GMT
Subject: CN=49593178bd74210faa73f3fb44710ef4772ca975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cd:34:30:77:28:e6:7d:a7:45:ed:42:cd:7e:
9c:b7:7c:04:4f:30:39:5f:02:76:59:76:73:55:06:
7b:0a:36:0c:5e:7b:ed:6d:78:c5:6a:89:76:27:ff:
d0:35:e5:38:65:7a:8e:e3:ed:57:fb:83:44:27:35:
7e:89:42:00:0a:d5:4e:ca:fd:ed:d9:5a:d9:5d:b2:
fa:8c:dd:fe:ac:04:f1:0a:e1:96:48:3f:5b:a1:db:
ac:05:d8:23:86:00:6d:5a:15:06:26:1e:63:c4:9b:
47:b8:cc:79:3a:eb:62:33:0f:66:7c:43:19:2a:a1:
1f:64:9a:78:b7:98:b5:e6:ba:6c:b1:c9:b7:a6:a9:
b1:4b:2b:df:c7:d0:f6:43:26:5e:26:af:55:41:8f:
7e:7a:4c:89:78:0e:66:c6:1c:2d:a7:47:6e:15:79:
17:8d:94:fe:4f:e8:e9:c3:db:a9:4d:5a:21:44:41:
8e:cd:a2:37:60:b0:68:0e:a2:bb:b4:53:ae:bc:60:
ea:5b:fc:e3:11:02:ab:71:33:4c:de:db:8c:be:3c:
b7:6e:05:7a:ff:c1:c3:20:bd:48:96:1e:72:92:63:
91:22:dd:96:94:95:e6:de:9a:bf:4e:6f:a0:00:3b:
28:81:ae:b5:5b:dc:6e:d7:84:61:b3:7e:68:33:b5:
3d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:59:31:78:BD:74:21:0F:AA:73:F3:FB:44:71:0E:F4:77:2C:A9:75
X509v3 Authority Key Identifier:
keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4c:9d:7a:f6:c8:24:75:f0:5a:83:86:85:12:b0:b5:29:7f:
62:ac:a0:bd:46:c7:71:67:d1:53:26:66:55:6a:e8:17:3c:46:
70:0a:ec:e1:45:a9:eb:7c:f8:18:54:73:d1:39:cb:38:e5:55:
5e:9e:42:f6:b3:84:39:cf:a4:06:20:f9:f3:4d:5f:89:9c:7e:
fe:4b:21:b4:54:7e:58:46:b8:48:28:1d:93:df:3e:ba:b3:54:
69:5f:ff:ef:12:4d:3c:3b:96:45:91:00:4b:74:61:42:79:c0:
a9:b6:eb:60:c6:8a:b2:99:27:50:b8:35:b9:0e:9c:0e:22:88:
4e:3e:23:dd:f1:8c:d7:81:f7:1d:94:75:80:0d:fc:d6:0a:86:
41:31:95:82:ad:cb:2b:8d:d0:18:71:a0:b7:9d:00:cb:78:e1:
ea:57:35:e0:a8:c0:80:5b:aa:b5:8a:9c:a0:89:91:ed:37:7c:
87:25:33:42:93:46:da:e0:5f:7e:e5:a3:3f:fd:4f:a0:b9:13:
a9:ed:94:fe:d8:0a:ed:5c:69:f0:63:9c:b6:f7:ac:2c:46:dc:
8f:50:0c:36:e0:39:10:a9:eb:14:cf:d8:9d:ef:9b:c0:b1:89:
bb:20:48:ff:7f:65:5b:31:28:6c:ea:0e:41:38:a2:51:5d:cd:
38:b9:dc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:35:15 2025 by rpki-client