Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft
File: iy4NGE_1UzdchHw41N_NzeEhn9M.mft (raw, json)
Hash identifier: 8A0oG/VjhWN9VGlDsPaQAZ+zxZEXtevHTEQU6DEonW8=
Subject key identifier: 6A:92:5A:A7:9D:F4:AC:3E:95:73:AB:10:37:EF:2B:4B:2B:31:91:CF
Authority key identifier: 8B:2E:0D:18:4F:F5:53:37:5C:84:7C:38:D4:DF:CD:CD:E1:21:9F:D3
Certificate issuer: /CN=8b2e0d184ff553375c847c38d4dfcdcde1219fd3
Certificate serial: 0199FBEBEDD0710012F54FCBB420710625C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft
Manifest number: 10D0
Signing time: Sun 19 Oct 2025 10:02:46 +0000
Manifest this update: Sun 19 Oct 2025 10:02:46 +0000
Manifest next update: Mon 20 Oct 2025 10:02:46 +0000
Files and hashes: 1: QhkZtHC-GArPwLlJouzdeKz4vt4.roa (hash: rYjbbMwu5klxqw8Z2ve99sKM+e3vXg5MSUYMGvpUeAw=)
2: ek-bgKo0V51DyYfh9FUoM-CKgO8.roa (hash: aPF/FaJvXVYEUFEnZVNFtJQGYrjiMzQAcdLekCScrys=)
3: iy4NGE_1UzdchHw41N_NzeEhn9M.crl (hash: PT4AlyruEEBDd14tKvpMeBwUMBfgSzyAvGouvgweMuI=)
4: jjb9-8iXZGVpIaiYLG1b0CgDmDQ.roa (hash: aXW8Frrn0CPPaBr+F5uNOjUESeabRZzpMHqeAGAbYRY=)
5: tyr7YT-XlbKvyQI5Aiw1lqcEPZ0.roa (hash: A8rtdyJ9paAEirlby1av+cQ7baYrwbelcvz/vsvt2z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ed:d0:71:00:12:f5:4f:cb:b4:20:71:06:25:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b2e0d184ff553375c847c38d4dfcdcde1219fd3
Validity
Not Before: Oct 19 10:02:46 2025 GMT
Not After : Oct 20 10:02:46 2025 GMT
Subject: CN=6a925aa79df4ac3e9573ab1037ef2b4b2b3191cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:b4:a2:fd:91:f9:cc:23:22:ef:52:4c:66:
60:70:7e:ac:1d:c2:45:74:75:a9:e0:db:f8:ad:d2:
a9:b7:fa:73:e2:10:4b:58:52:f7:5e:93:d5:ea:bf:
98:e6:a7:8a:74:5b:80:9b:66:11:21:69:b0:a7:f7:
17:13:9d:97:9a:bb:73:f0:60:45:d0:f6:df:d2:eb:
d3:23:7f:e5:39:06:86:f9:5b:19:56:ca:e7:52:4a:
20:03:3b:6b:09:60:07:3e:70:ce:26:ea:76:2a:63:
48:60:61:b3:ce:06:e3:3b:b8:5c:66:cc:66:77:a9:
6b:21:c6:21:0b:9f:83:37:dc:9e:35:e1:7a:04:e8:
5b:0f:9c:a3:ef:ed:23:b6:f4:26:9c:0b:c5:4e:52:
e7:2c:85:7d:c3:48:63:7f:3f:60:91:10:f4:69:8a:
7c:85:fd:f3:08:5b:b1:ff:54:c8:bb:f5:e1:69:8e:
5b:db:93:fc:6b:ef:cf:d0:c3:87:ee:24:04:12:bb:
78:99:ed:52:ee:4e:9b:a7:43:f8:b9:11:4b:d4:aa:
af:f8:a9:51:17:4a:52:4c:d7:7c:ef:8a:35:92:88:
ab:71:3a:5c:be:2f:86:5a:9e:3f:98:8a:b2:8d:f4:
be:72:26:9c:c2:4b:41:d1:74:03:9f:53:94:ca:da:
5c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:92:5A:A7:9D:F4:AC:3E:95:73:AB:10:37:EF:2B:4B:2B:31:91:CF
X509v3 Authority Key Identifier:
keyid:8B:2E:0D:18:4F:F5:53:37:5C:84:7C:38:D4:DF:CD:CD:E1:21:9F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iy4NGE_1UzdchHw41N_NzeEhn9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fcd8e-1034-4a75-a070-699f3cd850fa/1/iy4NGE_1UzdchHw41N_NzeEhn9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5d:b8:e2:fd:0e:c1:51:4c:cf:63:56:18:90:f3:d2:00:45:
98:14:1d:10:f0:65:f0:20:90:c1:fa:3c:a5:85:75:b5:dd:ac:
60:46:8c:5f:62:1b:4f:c5:df:cf:ec:eb:ce:c8:ee:a7:60:a8:
94:f0:44:44:c2:ec:56:de:f2:33:8d:89:b0:38:21:76:62:15:
21:a3:a3:d2:40:e5:a2:40:8b:d9:9e:da:fc:8a:46:78:3a:ef:
82:67:8d:ce:fa:02:c7:db:ab:27:3e:e4:41:ef:66:a9:ee:b0:
f5:07:dc:15:53:f2:9d:4d:6f:d2:39:f6:c1:10:9f:30:55:63:
39:48:83:3d:66:f0:e4:29:d3:d6:73:20:ad:e8:2a:02:0f:0e:
02:31:f3:92:22:04:98:8b:88:fd:e5:94:1a:00:cb:25:39:48:
f6:d6:c0:a7:58:f9:57:4c:ca:a5:65:f9:ac:49:fc:56:e8:4f:
aa:b0:32:c7:5c:06:b2:41:63:07:50:3c:89:7d:e9:ff:d9:9f:
ae:37:8b:e9:c2:e6:ce:44:f8:12:60:9c:0d:55:6e:98:b3:c6:
56:dc:9e:4d:0d:4b:30:c7:ef:e7:dc:a2:b2:f3:ec:0d:98:53:
90:13:20:b0:35:e3:d8:8f:2b:6d:34:c8:d4:d9:51:98:b9:f1:
ef:ff:1b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:39 2025 by rpki-client