Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.mft
File: iydIPcFsMY5a__gyKTDIF_0ZLJE.mft (raw, json)
Hash identifier: Tn9LYrZgiQ0WdBDk/J8xyvsH+nODKq04rlhn1oxGP/0=
Subject key identifier: 2C:1B:43:B2:CD:7C:13:7F:70:67:FF:ED:77:BE:2C:FD:BF:D6:8C:14
Authority key identifier: 8B:27:48:3D:C1:6C:31:8E:5A:FF:F8:32:29:30:C8:17:FD:19:2C:91
Certificate issuer: /CN=8b27483dc16c318e5afff8322930c817fd192c91
Certificate serial: 0199FCC6BB95DA1A4691375D969E12F6E0D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iydIPcFsMY5a__gyKTDIF_0ZLJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.mft
Manifest number: 0A42
Signing time: Sun 19 Oct 2025 14:01:46 +0000
Manifest this update: Sun 19 Oct 2025 14:01:46 +0000
Manifest next update: Mon 20 Oct 2025 14:01:46 +0000
Files and hashes: 1: WG1KTWwRB1pYbj2P1y-YbJWElMQ.roa (hash: /RcbZ2ujStzbSPjPDGEz6Qg57WsDieIVmjOcowRraSQ=)
2: iydIPcFsMY5a__gyKTDIF_0ZLJE.crl (hash: p3OQ4YCHmmogOl1fDXci4p5DKtHYJeWkDaqugKukU9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iydIPcFsMY5a__gyKTDIF_0ZLJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:bb:95:da:1a:46:91:37:5d:96:9e:12:f6:e0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b27483dc16c318e5afff8322930c817fd192c91
Validity
Not Before: Oct 19 14:01:46 2025 GMT
Not After : Oct 20 14:01:46 2025 GMT
Subject: CN=2c1b43b2cd7c137f7067ffed77be2cfdbfd68c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ad:56:bc:72:bc:f1:46:65:0f:bd:8e:fb:d2:
73:fc:16:60:8a:d1:61:a6:2c:ed:c4:23:02:50:da:
25:c6:ca:88:b4:12:64:02:01:12:65:30:99:8c:e6:
04:c8:d4:1e:c0:46:a6:60:88:5a:6a:47:71:c6:f9:
2c:6a:a9:fa:95:d8:e0:5b:32:97:c3:50:e9:0d:07:
b3:be:02:79:96:8e:1b:89:e2:5f:48:a3:7c:cc:01:
4c:2c:4e:88:f8:c4:21:41:15:e8:24:bb:ac:31:fd:
00:8c:08:06:a2:2f:71:dc:00:b0:39:71:52:b2:12:
e4:a1:fe:9d:68:84:55:fa:a3:c4:34:8f:0d:63:da:
8f:75:6f:aa:bd:ea:2a:a6:fc:ef:c8:0e:c3:5f:4b:
38:64:ba:62:7a:82:16:b5:6c:bc:97:c3:a8:a3:1e:
45:ff:32:71:c3:07:d1:2b:1d:b5:4f:26:35:d8:03:
68:ab:e2:27:5a:05:29:4e:97:7a:25:53:15:f7:bc:
95:ab:76:b1:27:be:1f:f0:18:d8:fd:3e:d8:33:b8:
87:fd:6b:d6:0d:85:ef:b7:39:9f:c8:45:35:66:2c:
5d:00:70:fd:d3:1f:6f:e8:65:58:fa:31:9a:12:34:
94:5a:72:8c:8f:fe:f9:5d:d8:7e:f2:fd:a7:cc:d8:
a6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1B:43:B2:CD:7C:13:7F:70:67:FF:ED:77:BE:2C:FD:BF:D6:8C:14
X509v3 Authority Key Identifier:
keyid:8B:27:48:3D:C1:6C:31:8E:5A:FF:F8:32:29:30:C8:17:FD:19:2C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iydIPcFsMY5a__gyKTDIF_0ZLJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:ce:60:6f:ea:23:11:18:1c:88:a1:15:1d:09:cc:f4:36:a5:
bb:37:b5:ce:84:6e:0f:a5:08:5c:b6:23:87:13:b3:db:fe:68:
06:05:02:4b:a7:ee:7a:c6:9a:11:3b:fb:50:19:f8:94:33:57:
37:11:76:d3:a4:e4:70:fc:fe:0f:46:b5:77:a8:a2:7f:4b:a2:
3e:a2:df:50:8f:56:a6:57:93:39:fb:d0:22:28:11:a1:8d:1f:
24:74:c3:3b:9d:cf:3c:63:e0:6d:99:f8:92:cc:bf:2c:8d:1e:
d6:61:d6:4f:31:fc:ac:ed:50:56:1e:20:07:5a:61:4c:53:72:
d7:ea:3a:fa:e9:b4:44:3c:ea:ad:fd:65:bc:d1:54:5d:db:c7:
5b:90:03:dd:54:8b:8c:d0:05:6c:9b:38:c9:51:94:ca:68:56:
3d:b8:25:50:3b:fd:ee:5b:f6:5a:b4:c6:41:0e:87:41:a1:f5:
7b:d3:6f:09:a9:29:15:a6:a6:ff:af:66:81:2c:6f:c5:0c:dc:
28:5e:f7:1f:d3:e0:d1:c1:c6:0d:d7:90:5d:e3:88:03:4b:43:
3e:54:a6:f7:f0:ad:ab:11:8d:9c:42:8c:6f:df:cd:27:d0:71:
78:14:23:93:f5:7f:22:eb:41:f5:f2:ef:2f:a9:52:29:91:b8:
a2:24:5f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:49 2025 by rpki-client