Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
File: ieXrHhIJiXh0XVQNypbP8N5HBNo.mft (raw, json)
Hash identifier: 4y+xoKxwn7az6NsszrlcYFfUjSP9+l87ynZSnzqrwXU=
Subject key identifier: 16:AE:88:9F:89:26:18:7E:E9:9C:B2:3B:C0:44:80:5F:A3:D4:64:9B
Authority key identifier: 89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
Certificate issuer: /CN=89e5eb1e12098978745d540dca96cff0de4704da
Certificate serial: 0199FC21C359D148A80CB9CA9F966C32B22E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
Manifest number: 0B57
Signing time: Sun 19 Oct 2025 11:01:34 +0000
Manifest this update: Sun 19 Oct 2025 11:01:34 +0000
Manifest next update: Mon 20 Oct 2025 11:01:34 +0000
Files and hashes: 1: ieXrHhIJiXh0XVQNypbP8N5HBNo.crl (hash: qRlDHTKceHg6C3R1Fw67tE1wdOrC9hoYzHE/VuOCGxs=)
2: l-HFEGYP57VmF8aDDh7--ZbJBDw.roa (hash: z6foBKVqU7T5Yu/Dwks8ZalWU/MYlRsXoQCU7GPCUOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c3:59:d1:48:a8:0c:b9:ca:9f:96:6c:32:b2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e5eb1e12098978745d540dca96cff0de4704da
Validity
Not Before: Oct 19 11:01:34 2025 GMT
Not After : Oct 20 11:01:34 2025 GMT
Subject: CN=16ae889f8926187ee99cb23bc044805fa3d4649b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:80:5d:02:05:76:67:a4:15:1f:3a:ec:df:11:
55:c9:a1:95:8c:2a:96:9c:84:db:08:9d:35:3b:c9:
fa:7f:41:18:40:b2:58:7f:32:53:e3:74:d0:db:12:
d0:26:11:3d:cf:a8:aa:93:ac:2f:23:f2:f7:49:6f:
26:22:de:e1:18:f2:71:07:37:68:2a:68:4e:43:49:
2c:89:64:ef:d1:ab:04:29:fc:09:cf:5f:9e:ec:9d:
01:a7:a6:49:49:f4:91:31:35:f7:83:14:2a:e2:1b:
d3:05:e7:ff:16:c2:22:57:87:91:ee:c6:d1:4a:37:
eb:4e:80:11:86:70:04:8c:d3:2b:15:44:0e:02:c2:
4e:23:8a:20:66:63:31:da:db:59:b5:b6:9c:c0:6f:
62:59:0b:8a:3e:d1:35:f1:15:59:ff:09:b4:11:f4:
d2:dc:90:dd:ff:fe:c4:7a:6c:35:04:aa:ab:18:da:
15:f4:16:c3:ce:03:09:41:bc:31:82:14:92:7f:c7:
ef:dc:89:a6:0d:98:55:19:a1:76:62:bf:2a:50:33:
c6:b6:12:31:92:58:38:d4:91:55:5b:71:d5:15:c7:
16:7f:99:c9:9e:74:58:5d:f4:c4:a5:7a:4d:af:8a:
88:2d:85:7f:70:f8:7f:a7:6b:8e:23:17:e7:01:a5:
c2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AE:88:9F:89:26:18:7E:E9:9C:B2:3B:C0:44:80:5F:A3:D4:64:9B
X509v3 Authority Key Identifier:
keyid:89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8c:57:85:b9:16:db:3c:6b:af:be:de:83:a3:4a:ac:d1:49:
e1:e1:d0:97:3e:a6:14:36:29:d1:6d:97:ef:bd:d3:70:b6:d0:
3b:26:b6:dc:98:60:5e:67:4b:7d:e5:a0:ac:1c:8a:ac:fb:7e:
96:e3:b1:3c:39:d3:3e:f1:7f:08:50:fe:53:6d:f0:28:dd:c5:
38:86:52:78:11:d3:dc:44:7f:21:62:40:89:e1:ce:05:09:89:
43:61:cd:45:fb:59:41:0d:bb:84:0b:72:f1:29:5e:08:26:2e:
c0:e1:64:42:0f:24:09:1b:85:9a:3b:e0:05:82:ab:01:a5:de:
3b:49:32:6e:d8:db:ad:7f:72:4a:35:48:68:bc:28:15:51:dd:
fd:ed:57:38:b1:1e:74:b9:ff:0e:58:80:c0:99:ef:0c:07:de:
5c:a9:93:3e:1a:7a:29:29:5a:22:bb:c7:53:00:0e:ac:7a:25:
17:c0:9c:22:08:f7:61:07:38:d5:66:54:ec:11:76:ce:78:8e:
c3:5e:82:8f:68:81:15:bc:08:6c:a9:af:1d:7b:02:ae:c6:be:
46:9a:fd:4c:51:37:7e:8f:95:46:81:f7:4b:db:4d:02:cb:6a:
be:89:65:3c:ce:84:00:87:d2:99:2b:bf:43:d9:c2:2b:00:f2:
18:32:d1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:59 2025 by rpki-client