Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
File: i0I-HXKxAwcL7VecQFl-0guEwW4.mft (raw, json)
Hash identifier: MxU6tM6hga7B/LU+HDO2pLVcMFpsNJPHMzF7juXK1ls=
Subject key identifier: 1A:EE:F0:19:12:34:6F:A2:C3:7E:DC:F6:BE:9B:F6:06:EC:CD:CE:3E
Authority key identifier: 8B:42:3E:1D:72:B1:03:07:0B:ED:57:9C:40:59:7E:D2:0B:84:C1:6E
Certificate issuer: /CN=8b423e1d72b103070bed579c40597ed20b84c16e
Certificate serial: 0199FDD9F4BD9B760DE71F4DB54EDB2A053D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
Manifest number: 0565
Signing time: Sun 19 Oct 2025 19:02:23 +0000
Manifest this update: Sun 19 Oct 2025 19:02:23 +0000
Manifest next update: Mon 20 Oct 2025 19:02:23 +0000
Files and hashes: 1: i0I-HXKxAwcL7VecQFl-0guEwW4.crl (hash: 1zPeIxKUcaGBIL9+9AmZMH63OWsahPWRM+wEJt76Tn8=)
2: r5RExikwh9VTxHZbndQhO_XU-vQ.roa (hash: 9NeQ0bAnfg+NNUQ9+vUOpq7EYWJaPxwQiPdu/Cupofw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:f4:bd:9b:76:0d:e7:1f:4d:b5:4e:db:2a:05:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b423e1d72b103070bed579c40597ed20b84c16e
Validity
Not Before: Oct 19 19:02:23 2025 GMT
Not After : Oct 20 19:02:23 2025 GMT
Subject: CN=1aeef01912346fa2c37edcf6be9bf606eccdce3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:34:b6:a2:1f:0e:e3:1c:00:00:0e:b1:3f:64:
01:50:99:45:be:8b:5e:6f:98:18:49:1d:d0:2c:fd:
7e:a2:bc:ab:d5:98:9e:e7:ea:95:76:4d:52:bf:c1:
30:89:d3:ac:b1:d2:c9:fe:60:19:32:8c:59:a4:55:
21:76:4a:5b:b5:b7:4b:17:b6:5a:9a:4e:59:d4:a0:
ad:ed:ba:74:1e:1e:d0:70:9d:c9:f8:ac:e6:ff:dc:
dd:39:42:bb:5a:da:06:41:48:ad:03:75:14:62:4b:
f0:88:9c:aa:78:ee:e1:17:e1:70:e5:bd:74:83:75:
45:d9:17:98:7b:71:5b:ae:7d:fa:f6:3e:d2:b4:f1:
55:51:b4:f0:21:48:e9:52:bf:1a:d3:60:81:53:9c:
e4:30:eb:b2:13:fb:4b:5d:52:e3:43:ee:aa:0d:1f:
f8:13:8a:ab:7f:5e:01:96:20:54:1c:53:df:92:f4:
54:0f:68:ca:cf:81:f5:fd:eb:fb:19:bc:e1:d2:fd:
77:9e:96:7c:00:df:ea:4b:0b:16:fb:42:7f:e0:98:
6e:46:90:0c:4e:50:46:39:e4:ae:86:6a:fd:51:26:
a7:05:7a:ef:70:cf:53:ab:e5:36:6b:a3:6e:f0:95:
a1:6f:8a:29:d7:0c:55:53:1e:7b:a7:0d:97:34:35:
b5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EE:F0:19:12:34:6F:A2:C3:7E:DC:F6:BE:9B:F6:06:EC:CD:CE:3E
X509v3 Authority Key Identifier:
keyid:8B:42:3E:1D:72:B1:03:07:0B:ED:57:9C:40:59:7E:D2:0B:84:C1:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3e:83:68:17:c7:e7:da:1a:c3:c9:94:92:d9:88:97:8b:53:
9f:d6:7a:16:17:3e:2e:c4:b7:59:78:90:2d:22:df:5f:4b:5b:
50:6e:63:e8:8c:13:96:6a:c0:fd:c4:38:7c:25:ca:b8:36:b5:
cd:2f:fa:a3:40:05:2a:c7:b2:b8:42:61:fe:98:91:8b:66:5c:
93:8f:57:68:f4:3f:5d:e4:f1:89:3b:70:9f:d7:97:1c:2f:e1:
a1:52:db:d5:91:f9:22:a7:18:01:8f:34:f7:48:34:22:fe:0e:
df:d9:1a:9f:6b:37:5c:01:5c:49:31:c3:12:5d:12:be:68:ae:
0d:e8:1f:dc:5f:f7:66:6c:81:28:34:30:6d:8a:7a:d8:6f:8b:
24:a0:06:10:1a:2c:6f:74:b6:37:4d:18:c7:20:b9:d7:53:f2:
8c:3f:6b:16:36:5d:f7:58:6a:2b:cf:e9:2b:da:63:0d:20:74:
44:c9:96:24:8d:5d:5d:d7:52:d1:4e:2c:fc:2c:f1:1a:8e:c5:
12:b8:e1:12:27:cb:be:30:34:65:8d:f0:fd:04:f9:04:5e:6f:
96:18:4f:68:b5:7a:4b:10:24:c5:3d:66:2d:ab:df:16:17:ab:
7b:ef:1a:72:e4:35:bd:6a:bf:ce:6b:48:fc:d2:b7:5f:61:8e:
3b:d4:99:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:39 2025 by rpki-client