Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
File: iWqh8O1Flucz-LYtOeN7jeUIXtc.mft (raw, json)
Hash identifier: 4a0BcSjKTnwvOFOCyXClc/PdFatVm+V8PYWzUeeKevc=
Subject key identifier: 5B:16:D8:BA:3A:1B:1E:41:CD:9C:B3:2F:EB:38:B5:D5:2E:C3:95:AE
Authority key identifier: 89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7
Certificate issuer: /CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7
Certificate serial: 0199FB460672D6E31A5D9448A3A0356377BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 07:01:34 +0000
Manifest this update: Sun 19 Oct 2025 07:01:34 +0000
Manifest next update: Mon 20 Oct 2025 07:01:34 +0000
Files and hashes: 1: eVsPR_b5z2ja1nvgWZaFAJsxzV8.roa (hash: NL/nj7PiRruzzNoJXPrVqMifeH+fC4R4vqg0qPtnqLg=)
2: iWqh8O1Flucz-LYtOeN7jeUIXtc.crl (hash: 3nLRhmTFwMwB6dO+BggqCvj6tC1ELE6H7h/UDnPFuFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:06:72:d6:e3:1a:5d:94:48:a3:a0:35:63:77:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7
Validity
Not Before: Oct 19 07:01:34 2025 GMT
Not After : Oct 20 07:01:34 2025 GMT
Subject: CN=5b16d8ba3a1b1e41cd9cb32feb38b5d52ec395ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ef:79:2f:8b:c2:02:52:bf:85:b2:6b:b9:a6:
ba:c9:03:db:44:d8:bd:bf:0c:70:1e:75:5f:e1:46:
57:73:c1:ef:56:6c:84:79:b5:ae:48:de:e0:37:c0:
db:64:75:1a:b5:76:00:86:32:b3:f1:fb:2a:a5:ab:
f4:7d:94:ef:87:04:74:7c:c1:48:ea:18:0c:ba:10:
eb:dc:32:8a:10:2a:f1:f5:ad:77:ff:2f:78:74:90:
88:25:f0:34:70:f9:28:92:b6:07:8d:3e:51:f5:64:
ad:8d:a5:36:9a:cd:11:63:c1:67:13:88:c4:32:9a:
2b:c6:a5:47:7d:e8:82:56:54:d5:e7:23:a4:45:1a:
0e:d6:6e:c1:df:6e:25:e1:df:ae:a6:1a:15:8d:e5:
45:06:4c:70:3f:9a:9a:71:6a:f9:d8:94:fb:e8:90:
d0:9e:8d:00:fd:01:82:9f:e6:ab:2d:9e:70:52:bb:
d3:45:24:10:dd:fd:06:0d:d6:7c:d3:4c:f8:a4:70:
09:d9:4c:a8:a1:18:79:e6:78:45:63:37:2b:43:3c:
af:18:ee:c5:d7:a0:ec:f4:69:f0:04:02:d8:67:dd:
00:97:29:01:6b:c2:0f:5d:fd:1f:bb:71:07:b4:74:
a6:a7:99:f3:9f:82:34:ea:18:c2:d5:8a:94:8e:2b:
89:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:16:D8:BA:3A:1B:1E:41:CD:9C:B3:2F:EB:38:B5:D5:2E:C3:95:AE
X509v3 Authority Key Identifier:
keyid:89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:66:27:dd:65:7b:ca:7b:80:82:23:b9:41:32:16:c8:12:3c:
6f:bc:7f:38:f0:59:aa:bb:db:56:ba:55:08:29:64:3c:8d:bf:
4d:c8:62:73:71:f4:46:b9:66:1e:c6:c5:fa:89:59:d9:9d:26:
27:b8:95:62:b8:36:a6:97:a3:5c:9d:25:e9:0f:54:d1:d2:44:
09:10:a5:e7:a8:46:ff:4f:7b:c4:4c:7d:fb:e1:cf:a5:6e:5c:
bf:d0:d5:da:cd:fc:c9:5e:c3:00:dd:d0:32:32:5a:1b:4d:b3:
78:56:c2:47:b0:d8:f5:43:93:5a:eb:82:13:27:cf:46:67:1c:
d9:44:76:3e:81:71:1b:fa:11:7c:90:bb:c3:7b:e9:e0:d6:b5:
c8:a9:c5:59:27:e6:3c:73:e6:84:33:01:0b:70:9f:bc:3b:a1:
c5:cf:ea:2a:00:13:41:64:30:93:b9:35:bf:8b:ff:e2:3a:8f:
b5:e9:41:55:fd:cd:5c:26:75:3c:71:0a:16:a1:2e:72:2f:24:
e5:0d:ca:8b:09:a9:f7:d7:90:67:04:da:13:0c:fd:92:1f:73:
ec:ff:e6:32:1d:e7:0c:aa:bc:7a:54:12:ab:d5:a7:47:f7:ad:
27:cd:f2:38:62:95:84:58:4e:c7:d6:64:32:bf:34:41:17:d8:
bc:1f:68:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:51 2025 by rpki-client