Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
File: iPQfqz5j6vW98HFm31qmgWLq16Y.mft (raw, json)
Hash identifier: xHR/XnbSD0FhvSRNoDDhZ+tRmU9wsR/wGVIyhuYx4N8=
Subject key identifier: 9D:20:75:C8:18:73:BA:8F:49:B2:EE:F2:0A:79:40:59:DF:E3:A3:E1
Authority key identifier: 88:F4:1F:AB:3E:63:EA:F5:BD:F0:71:66:DF:5A:A6:81:62:EA:D7:A6
Certificate issuer: /CN=88f41fab3e63eaf5bdf07166df5aa68162ead7a6
Certificate serial: 0199FE7DA676A8602E7A4D7D53586A6630FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 22:01:11 +0000
Manifest this update: Sun 19 Oct 2025 22:01:11 +0000
Manifest next update: Mon 20 Oct 2025 22:01:11 +0000
Files and hashes: 1: iPQfqz5j6vW98HFm31qmgWLq16Y.crl (hash: Re2CLygjJAYa7PoJHNqpEc/GGgXw+89KMFq+nkTCt7M=)
2: uNj0vhcUK_UhfSxrxVZLYp2n6nk.roa (hash: xTRc4Rd4GJsupl0R/CzG6nNJAwdCcx0IPu8T4AbYP1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:a6:76:a8:60:2e:7a:4d:7d:53:58:6a:66:30:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f41fab3e63eaf5bdf07166df5aa68162ead7a6
Validity
Not Before: Oct 19 22:01:11 2025 GMT
Not After : Oct 20 22:01:11 2025 GMT
Subject: CN=9d2075c81873ba8f49b2eef20a794059dfe3a3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:28:e2:94:b0:45:5d:73:c3:09:c6:81:5a:bb:
12:38:3f:89:26:86:02:08:11:3f:f4:f7:a3:ba:28:
18:81:44:80:d6:43:39:36:c9:75:56:54:28:de:ca:
98:0b:18:8d:66:f5:ba:b4:68:6e:8f:9c:7d:5f:46:
9c:fe:48:c8:2e:02:c3:86:d5:c8:c1:be:94:65:d3:
35:83:6c:32:4a:75:f2:cd:a7:aa:1c:6a:44:8b:9b:
d6:6a:cf:42:a7:98:6f:cd:6b:bd:b3:d6:b4:31:ef:
2b:fc:c3:1b:7d:57:3b:8e:02:49:c8:cf:91:f1:c1:
9f:e4:e5:35:b2:54:fb:6f:6b:ad:c2:ab:aa:c2:e1:
eb:4f:3c:2f:fd:ec:f2:f1:a0:4e:77:21:24:c1:8b:
87:6e:5c:e8:54:a8:3a:fe:c2:65:3b:44:d7:0d:1c:
92:aa:ae:e0:a9:06:2e:96:3d:da:e4:b5:8c:77:0c:
07:4a:b9:78:15:7e:a6:ab:6f:0c:d0:c4:7d:1d:2e:
c4:14:24:1b:10:0c:51:3a:0a:62:bf:36:76:ab:56:
01:a1:4e:cf:79:00:45:6f:17:42:7a:ac:04:30:80:
92:a9:df:a4:d9:e6:ba:aa:57:08:39:70:68:5c:f8:
a7:b1:26:57:e8:50:16:dc:21:c3:7c:3f:73:95:46:
45:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:20:75:C8:18:73:BA:8F:49:B2:EE:F2:0A:79:40:59:DF:E3:A3:E1
X509v3 Authority Key Identifier:
keyid:88:F4:1F:AB:3E:63:EA:F5:BD:F0:71:66:DF:5A:A6:81:62:EA:D7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c4:39:53:f6:eb:25:b5:51:9c:c6:5e:25:47:df:a8:0b:eb:
7b:29:46:37:69:7f:2a:c2:bd:80:5f:7d:49:8a:9d:cd:e3:6b:
04:89:b0:f9:fd:a4:4a:f5:bf:45:6d:d9:4b:84:f6:27:f0:91:
ba:30:66:ff:8d:14:77:53:3f:85:02:64:dc:12:6c:e3:51:c8:
f2:29:4d:9a:40:be:00:35:65:83:9f:92:ae:eb:f9:9e:6b:4d:
7e:79:33:94:6c:e0:fe:1a:08:c0:73:f0:23:78:b3:b1:6e:7d:
8c:ab:1c:85:96:f9:e6:5d:a6:3f:8e:0f:61:4f:c1:76:21:8b:
ef:ca:c5:2d:c4:1b:87:26:7c:27:3d:c7:5f:91:2e:17:6c:a3:
5d:dd:32:86:b5:50:e9:3d:16:37:0f:78:be:06:44:79:dc:b4:
d1:07:fb:9d:ae:e7:95:0a:2c:c3:52:e3:d9:fe:69:8a:fc:a6:
ba:93:ab:cc:49:2f:88:87:b1:87:31:22:74:03:b9:8a:de:dc:
86:16:0d:9b:5e:2c:3a:c0:66:1b:03:30:3d:61:79:cf:9c:31:
4b:9e:54:dc:dd:8a:f7:11:fb:c9:03:de:86:e4:5a:c2:41:96:
69:f6:2b:c2:a8:57:42:ae:a6:a7:ef:a1:a1:16:58:7c:8b:1c:
38:05:70:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:39:55 2025 by rpki-client