Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
File: iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft (raw, json)
Hash identifier: OVcq80eLEGw5ricHNrpIsXBwhgYW5weIFGdkT30Hcwg=
Subject key identifier: 5F:D5:2F:21:1A:D3:69:48:FE:27:84:55:40:D4:91:E9:C8:1B:9F:D6
Authority key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
Certificate issuer: /CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Certificate serial: 0199FB0F2CEE67ABBF9EB5E9F6491894CB2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
Manifest number: 1B
Signing time: Sun 19 Oct 2025 06:01:39 +0000
Manifest this update: Sun 19 Oct 2025 06:01:39 +0000
Manifest next update: Mon 20 Oct 2025 06:01:39 +0000
Files and hashes: 1: iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl (hash: 2k9sDz5W5JDwE2XJtwUl+iG49bqqQuxKgV3NRfL0L1g=)
2: shnK0LrZ7iC7NYgJCx5-5XvMrYM.roa (hash: GoQEuKDAB7+ftpHtMw2bSFNDrSCbeA361NyC2I596E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:2c:ee:67:ab:bf:9e:b5:e9:f6:49:18:94:cb:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Validity
Not Before: Oct 19 06:01:39 2025 GMT
Not After : Oct 20 06:01:39 2025 GMT
Subject: CN=5fd52f211ad36948fe27845540d491e9c81b9fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f7:94:7f:14:10:b6:e4:bb:ba:78:9f:74:f6:
48:22:37:69:42:30:21:24:93:32:db:6d:a3:91:68:
28:71:1f:b1:88:d2:13:73:25:74:ae:8b:05:34:de:
30:27:7e:d6:42:85:79:ad:93:15:28:8d:74:0f:9d:
bb:6f:88:b7:8f:a6:67:84:7a:d2:85:2f:98:6d:1c:
88:3e:4a:22:68:b8:32:ae:2c:13:91:ad:99:2c:9b:
0d:19:00:6d:3e:29:92:25:91:fc:d7:52:0d:60:82:
69:f6:0c:c8:00:25:c5:01:f1:9a:c8:69:74:12:97:
0f:ca:37:8a:06:32:07:8f:e0:78:3a:62:ac:f1:eb:
42:cc:e6:c9:29:9e:a0:e4:43:ff:8f:11:cf:38:f0:
f7:0d:27:9e:25:a9:d9:9c:74:eb:08:cb:37:bc:49:
f9:38:22:28:f2:5e:40:61:ee:99:18:36:b4:75:9c:
38:f3:15:13:7c:0d:e0:65:ad:a4:52:77:7f:1a:40:
7a:fb:65:6e:cf:06:06:9c:ba:c3:0c:67:ef:0e:96:
bd:20:09:12:0d:fb:ee:29:d4:b2:94:f5:5e:7c:1d:
59:dc:13:9c:73:d3:fa:54:8a:d3:79:7e:ee:e5:82:
4f:14:3a:67:9f:aa:8d:25:a5:e2:ea:f5:e1:b9:62:
e3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D5:2F:21:1A:D3:69:48:FE:27:84:55:40:D4:91:E9:C8:1B:9F:D6
X509v3 Authority Key Identifier:
keyid:88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:68:e4:3e:f3:5c:3b:52:d5:b2:3a:71:09:c3:78:7c:50:f6:
dd:39:52:0f:75:6a:98:85:0a:f2:f9:a4:da:85:7d:8c:61:45:
3a:60:ce:20:9c:cf:c4:f9:36:bc:58:f7:1f:ec:f0:a6:90:ed:
3e:f0:55:76:c7:bf:f3:93:38:24:11:22:fd:4b:e4:e7:bd:91:
34:7e:7e:32:97:b1:7f:b4:19:28:72:85:bb:ea:f0:7d:b7:15:
64:3e:1d:21:2a:b5:c9:4b:e5:70:b8:79:97:91:78:54:7e:9b:
66:d8:38:12:f4:47:13:e1:1d:30:4e:ee:c4:f9:1a:4f:a3:ec:
30:f7:e3:78:3b:f5:43:3f:33:26:3e:3e:e9:13:f9:49:09:09:
eb:9e:78:fc:ff:19:f0:39:f1:d8:e0:20:ff:41:c4:41:37:f9:
9b:35:47:74:ad:dc:a3:72:13:90:a8:cf:ae:5d:2f:6c:98:0a:
81:ff:ed:ec:d3:20:ff:05:87:65:6b:b3:4a:b2:07:f7:84:f6:
b3:32:81:44:03:3b:0d:d0:8a:1c:37:09:a6:e8:c3:f4:31:ad:
fa:84:ec:5b:0c:89:11:e7:ee:56:2a:37:e5:e4:52:0e:21:b1:
a9:5c:82:30:7d:dd:3c:4e:5c:aa:40:c9:c7:bd:2a:c9:a1:7e:
ff:c3:a8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:09 2025 by rpki-client