Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
File: ie36QUlE0BCsae5b-yJ3OySyfvs.mft (raw, json)
Hash identifier: qblmLBshtYGFQG8dFH8yv/eEHU5ySzqxBfUo8NcLCac=
Subject key identifier: AA:E8:9C:51:CC:B0:E1:57:4D:8B:5E:9E:EF:98:14:89:2F:B3:20:20
Authority key identifier: 89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
Certificate issuer: /CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Certificate serial: 0199FC8FC1E09863887DB71B1BD402E95C3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
Manifest number: 0B56
Signing time: Sun 19 Oct 2025 13:01:43 +0000
Manifest this update: Sun 19 Oct 2025 13:01:43 +0000
Manifest next update: Mon 20 Oct 2025 13:01:43 +0000
Files and hashes: 1: 2j_QBpsrLBBxs622BISyOZtEgFA.roa (hash: 32mbR7LJ1AvTIHIxhitKhF6+X6cgHFfdsLG9qjMakhU=)
2: ie36QUlE0BCsae5b-yJ3OySyfvs.crl (hash: 3x7MOHn9IGQSYFGt1UZyUCzgzL5c1KObrgb9jG+T+NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:c1:e0:98:63:88:7d:b7:1b:1b:d4:02:e9:5c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Validity
Not Before: Oct 19 13:01:43 2025 GMT
Not After : Oct 20 13:01:43 2025 GMT
Subject: CN=aae89c51ccb0e1574d8b5e9eef9814892fb32020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:66:2a:4e:c5:ff:dc:23:2d:db:65:43:5b:2f:
a9:8c:03:75:f8:f5:b0:0c:a5:5e:ac:00:dd:65:d3:
eb:0b:c2:2b:77:29:0b:ff:6d:89:c6:a8:be:1e:37:
2c:7c:31:f8:03:c2:0d:54:21:23:ff:26:b1:c4:78:
b4:e5:24:53:9e:21:99:d9:56:00:42:bf:b8:6f:ed:
1b:04:1d:ce:0b:7a:eb:7e:a4:00:e0:da:89:d6:00:
f9:f3:91:59:89:d9:d6:8f:f7:1b:28:42:8e:be:8b:
47:dd:ab:34:a4:15:80:42:cb:9e:2a:9d:fc:b5:58:
de:39:e1:3d:7b:ed:08:4f:a5:c8:03:a5:9d:1d:66:
eb:f6:f2:5a:f9:33:f1:ac:17:a3:18:0b:f8:41:a4:
28:b1:de:0f:d2:cd:a5:1b:86:ad:c1:50:20:01:c7:
7d:0a:3e:be:90:e8:2a:0c:79:cf:3b:3b:a3:31:14:
ce:c5:b9:aa:1f:6b:34:b3:d8:92:a5:b4:bf:41:fa:
c4:72:87:1c:d2:e0:1b:d1:d9:10:57:b2:ad:63:35:
b7:f1:6c:e3:35:05:c0:e3:85:00:99:e0:4e:1d:52:
98:9e:91:f5:3c:c8:de:16:e3:64:55:5f:40:7a:31:
ea:49:1a:f9:be:14:c6:57:c1:32:10:38:e8:ca:91:
3b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E8:9C:51:CC:B0:E1:57:4D:8B:5E:9E:EF:98:14:89:2F:B3:20:20
X509v3 Authority Key Identifier:
keyid:89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:14:db:79:43:80:a0:86:aa:35:9a:e5:b2:9b:d4:87:d5:b6:
eb:5f:6a:9e:20:02:99:92:28:35:9b:94:49:fd:9f:f1:4c:ee:
bc:05:59:15:f0:50:a1:52:4b:f9:54:2b:e1:a7:84:07:9b:27:
45:fe:96:81:13:44:0f:d1:e7:bd:e6:c3:d4:71:70:df:4b:12:
a8:e8:2f:f0:af:0c:80:b3:85:f6:26:c2:07:89:38:29:89:c3:
a7:fa:b5:fa:4c:45:d8:65:3f:98:5c:7d:bd:78:3f:f3:0b:59:
10:e5:b2:f3:bf:81:df:7e:99:67:52:a4:81:2e:1d:da:87:5a:
dc:73:01:8b:29:3b:38:d7:59:fd:38:f8:05:c9:9e:ec:03:44:
34:bd:a0:3e:c3:51:bc:b8:9c:8a:3c:9c:06:51:02:93:99:ad:
fb:23:93:68:36:16:63:35:98:a8:e4:86:30:71:53:22:ca:5c:
37:c4:aa:1e:f4:03:ea:24:32:ba:eb:a7:b7:2f:62:b9:a7:81:
35:af:fe:48:7b:fc:e1:f1:f7:60:a8:3f:80:49:fb:ee:fc:d6:
57:bc:1d:b7:e6:0b:60:e8:bf:8b:41:61:76:e9:94:a1:3e:a3:
9d:09:42:36:33:13:9d:c9:6c:05:dd:9b:d4:b3:10:f0:a4:92:
02:25:c9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:23 2025 by rpki-client