Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
File: ioludoVA84eh3U_52qS4W6SKkG8.mft (raw, json)
Hash identifier: 8WVJg4K29o1M8KTQTZzZEvuVhiiVauhCJln0ZeyODUU=
Subject key identifier: B5:EF:85:19:EB:01:62:22:5D:12:54:E7:4B:23:DF:27:FC:E5:41:5B
Authority key identifier: 8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F
Certificate issuer: /CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f
Certificate serial: 0199FDD9B524F499B4761B714DC19B6642EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
Manifest number: 1026
Signing time: Sun 19 Oct 2025 19:02:07 +0000
Manifest this update: Sun 19 Oct 2025 19:02:07 +0000
Manifest next update: Mon 20 Oct 2025 19:02:07 +0000
Files and hashes: 1: hkbUVfjNOPVhJfq1uQFH-hPB5mE.roa (hash: tqCspEzEqiN+432BqUgHfq1nCv1kB3CNAbRtD1yo228=)
2: ioludoVA84eh3U_52qS4W6SKkG8.crl (hash: jbWswp9aZU03bIUx4oA3fdXbfKFB4On35lxc0ZEebAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:b5:24:f4:99:b4:76:1b:71:4d:c1:9b:66:42:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f
Validity
Not Before: Oct 19 19:02:07 2025 GMT
Not After : Oct 20 19:02:07 2025 GMT
Subject: CN=b5ef8519eb0162225d1254e74b23df27fce5415b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f6:5d:c6:9b:1a:49:b9:fd:57:86:7c:66:27:
6f:f4:6d:ff:94:b6:42:aa:47:7f:47:0a:6f:1a:3f:
5e:57:b6:8c:8c:ce:f3:94:83:77:27:af:06:17:c4:
12:51:8e:47:78:9e:b6:33:67:8a:e6:32:47:c6:3c:
a2:2d:90:89:de:39:4e:53:d9:7d:9f:6c:77:54:1e:
99:1d:20:29:ef:9e:70:29:67:c1:3d:ab:c4:69:70:
23:ec:ca:bb:8b:48:eb:93:e5:c3:81:3c:b6:b7:8a:
a9:09:d0:b7:ff:f4:9d:dc:0f:c1:78:3c:8c:93:a8:
d6:23:ad:76:f4:f2:21:35:a4:2d:0b:7a:9c:00:29:
fc:f7:82:95:06:5d:e0:1b:b0:ba:d6:9c:ab:95:d3:
68:a1:bc:64:6f:40:78:d6:75:59:0e:c9:dc:a0:16:
45:51:2e:12:b7:fb:87:5b:01:2e:d8:90:4f:e0:73:
07:1b:99:7b:57:b0:f1:e0:f1:ba:22:00:ce:7e:51:
0c:42:24:f0:9a:5d:8e:c1:8d:ac:94:2c:f1:82:0a:
e6:52:41:10:b9:38:50:1b:d7:ad:78:20:b1:3d:9e:
3c:92:c3:82:0b:d7:22:8a:3b:a8:56:df:5d:3b:e7:
83:af:d6:dc:79:ad:58:1c:b6:eb:1d:0f:9f:90:99:
1f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EF:85:19:EB:01:62:22:5D:12:54:E7:4B:23:DF:27:FC:E5:41:5B
X509v3 Authority Key Identifier:
keyid:8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:7e:57:78:d9:47:dc:c7:8d:26:1e:0b:0c:b5:96:5e:5e:c0:
b5:69:e6:a8:d6:90:41:06:5b:6c:5d:e6:a9:e3:19:a5:d5:21:
b2:59:47:51:58:fc:b3:ae:d6:30:03:80:ab:82:e4:87:6b:f8:
5c:cc:19:fe:93:4f:2f:f9:de:87:bd:ef:ee:96:82:a4:0a:1c:
a0:b8:21:fe:9f:bf:8e:f1:e7:b9:f6:b0:4a:cf:f2:27:4e:3b:
41:b0:e7:55:f0:c2:72:5b:5e:a8:a6:b0:59:64:5b:67:ca:0c:
94:1e:e8:c8:90:80:70:e8:49:47:7c:89:44:72:42:e5:a6:aa:
29:38:d7:51:d1:eb:0d:a9:d7:a9:8d:ea:9c:be:cb:e8:81:5d:
b4:de:71:dd:ea:e8:17:8a:c0:cd:cc:fa:6d:02:d2:16:11:f1:
de:e8:2b:16:81:46:c8:7b:4a:40:dd:40:e0:70:8f:d9:33:e7:
2f:21:4b:ab:ed:63:5f:12:15:e3:0d:b6:31:5f:30:b6:19:71:
c7:a4:87:84:77:0c:a1:2e:61:ad:9e:5c:57:35:a6:dc:cc:38:
76:2f:d9:11:b6:05:7b:94:85:ec:a1:5e:db:14:99:6e:ba:63:
94:aa:62:e2:a7:ba:0c:89:7d:cf:87:d5:8f:40:ba:bf:c2:ec:
83:ce:fb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:51 2025 by rpki-client