Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
File: iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft (raw, json)
Hash identifier: Ioq/73rU/QA8K8jBZ3rZ4xFjJTcBy9NHyZ+QMUaSmi0=
Subject key identifier: 45:E7:03:A0:BC:63:EF:29:BD:AE:7A:26:0E:C4:B5:81:78:0C:83:E8
Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
Certificate issuer: /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Certificate serial: 0199FDD8D58A8106DA95379100EBF3CF27A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
Manifest number: 0D50
Signing time: Sun 19 Oct 2025 19:01:10 +0000
Manifest this update: Sun 19 Oct 2025 19:01:10 +0000
Manifest next update: Mon 20 Oct 2025 19:01:10 +0000
Files and hashes: 1: 8l1JGPKaxK0LdzidLYE5O7KO7uc.roa (hash: iLVJNEHjRSQZgufW9Xco39laNybFCSoPb4TytjD2nas=)
2: ZaUvqR58Anq8vLQipN0wr5eky28.roa (hash: SPNO6fIwJVYF/onFgsSackS0wfwUe38bLzIxAklnkrs=)
3: dXGr5BqS128mRLd0J3At49a2qzg.roa (hash: wuoQDj1SJzE/S7y91rkdzuUmyIzNX+hGJtJoYwKPBvU=)
4: iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl (hash: k6WC44uezT+LXFpLCSocL4aHanB1KWWBCm0ysN40l+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:d5:8a:81:06:da:95:37:91:00:eb:f3:cf:27:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Validity
Not Before: Oct 19 19:01:10 2025 GMT
Not After : Oct 20 19:01:10 2025 GMT
Subject: CN=45e703a0bc63ef29bdae7a260ec4b581780c83e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e4:03:c5:06:7e:af:64:b3:0c:40:e5:98:04:
00:53:e6:11:1e:0b:ad:7f:86:c2:e9:00:fd:e4:47:
31:17:c6:9b:9d:56:2d:b8:d4:22:75:2c:a8:8b:ef:
33:3c:15:c7:b0:ec:d9:dc:9b:e9:fe:56:0f:a3:fa:
aa:c7:9d:35:89:b9:d3:7b:f8:b5:bc:8e:92:41:a1:
6b:2d:f5:ee:26:66:e3:e1:43:3b:74:09:02:35:b3:
ed:d7:33:5c:25:cf:31:ad:4a:9d:61:01:2f:fc:63:
2a:d5:d3:41:2c:1e:1b:f3:fc:3a:68:d4:97:77:95:
07:a5:5a:64:13:b2:53:e9:63:93:c9:83:52:96:8b:
83:10:1d:d8:5a:bd:53:b1:4d:8f:98:1b:87:6c:e8:
22:e6:5d:ed:3e:ed:f1:15:c3:27:eb:20:6d:2b:c2:
90:ab:ca:8f:f6:9c:e4:33:cf:a4:f4:f1:0e:92:f0:
63:c7:f0:8b:61:a0:59:44:d9:14:49:b1:14:9c:2c:
9a:a8:6e:23:04:ae:27:cd:9a:64:0b:2d:65:1e:87:
d2:b4:03:1d:ff:89:cb:93:67:90:80:9e:72:7d:d6:
11:d6:7a:37:4e:5f:f7:23:94:0c:8c:bc:9a:7d:32:
63:53:f7:1c:e6:11:60:f4:5f:84:84:2b:48:29:c8:
ac:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E7:03:A0:BC:63:EF:29:BD:AE:7A:26:0E:C4:B5:81:78:0C:83:E8
X509v3 Authority Key Identifier:
keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:11:71:03:a7:8e:23:1d:5d:b7:ca:44:bb:f3:4d:47:2e:f9:
a0:8f:25:32:4f:c4:50:05:c1:32:25:36:08:57:f8:90:88:ca:
b1:cf:69:f2:d3:cc:ae:df:58:81:9f:fa:9e:37:99:ad:eb:29:
8d:fc:aa:33:37:0f:dc:c5:db:a4:d4:1a:e3:be:28:a8:63:07:
7f:44:68:f5:9d:a0:22:88:60:c7:9c:6e:c3:93:14:7c:1d:e3:
ca:ae:e5:23:f0:d2:62:bb:5b:9a:31:4e:74:48:fc:f1:36:4c:
60:21:96:9d:85:51:78:dd:e5:3c:93:83:57:7c:e6:67:55:67:
8a:84:89:7a:e5:60:83:d0:a7:21:f2:1a:10:b8:ee:08:33:c8:
2f:2f:e3:5e:fc:fa:ab:03:02:00:bd:cf:4a:09:09:96:b9:c8:
c8:09:79:da:5e:fe:88:fe:c3:fb:f1:b2:d6:1c:d0:63:b7:db:
fb:eb:df:1f:bc:1e:89:fb:e5:56:f6:54:a1:e2:4c:70:29:85:
55:d3:91:15:94:5d:e2:cd:01:a7:93:a0:45:cd:4e:90:8c:35:
e8:89:5f:7d:f3:4d:54:3e:1c:49:1c:34:53:11:6c:ff:b4:00:
b7:25:51:8a:f7:a2:0e:09:02:36:3e:bc:c3:2c:11:e4:1b:42:
be:fc:24:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:35:52 2025 by rpki-client