Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
File: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft (raw, json)
Hash identifier: jdnzOT449YFns6SAlBMOCU271ljuIBene8tcVWGX4oE=
Subject key identifier: BE:C8:3D:8B:2B:DE:E3:00:7B:0D:EA:3A:D1:F0:9C:00:00:F1:F5:8F
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 0199FD344025EF0FF645849553DCF5EA42F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
Manifest number: 158E
Signing time: Sun 19 Oct 2025 16:01:23 +0000
Manifest this update: Sun 19 Oct 2025 16:01:23 +0000
Manifest next update: Mon 20 Oct 2025 16:01:23 +0000
Files and hashes: 1: 25GdIX8pGRrdAAaubJO0FxbYG-s.roa (hash: J7SjJPVMXuJzyuyQBNTx3E62SBRqK9gpWeifxFumUs0=)
2: 6WSzq5tklzrrb4CQ30LLV8NUx2g.roa (hash: UmnImARopszt+4WaNMMPCsufWGExd3hc37DvZdbg1tI=)
3: 8ROo1-f7zOJ7IGVOmN_RufzzbRg.roa (hash: 0g/v1GDnSb/mpf5pKYYz9HEAiGcoNER98ihb6wrQqWo=)
4: Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl (hash: hteFDH4YjezcPYUnmIfUXBuH/Kyf0zaRL1Ul6R6qrLc=)
5: OREDNoQ0vwPI3XM_zRsW3yzoE_A.roa (hash: 1cT3zKRDrAQDDxV5Rq7SD/mINGk0AiyR89E6Ur7LkVA=)
6: mQQXMqosDbrfiBBQFe3pss-9NtQ.roa (hash: qAb1oy5TaR+lNTajDgndtpEVHAu7ZMdgoTop9g6Wh6Y=)
7: uSaVwi6W5g3viY9NscHN3tqDzCk.roa (hash: t4D+qU5YVF27z4TGr3wG3ucQjp23my4+sKI2eFqOYYg=)
8: uumQQQ1viq_-gfcaqAufH6g_C7w.roa (hash: AM9mJlfYhSa7Wcw8Wx9nTWnnL8T0GQwXceLp5ft6/NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:40:25:ef:0f:f6:45:84:95:53:dc:f5:ea:42:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Oct 19 16:01:23 2025 GMT
Not After : Oct 20 16:01:23 2025 GMT
Subject: CN=bec83d8b2bdee3007b0dea3ad1f09c0000f1f58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:44:f3:0e:cf:9c:aa:40:06:6c:ee:8d:52:bf:
4d:3a:0d:04:42:69:56:15:0d:58:70:65:9b:56:3b:
95:3f:c4:6f:f6:c7:17:4a:95:3e:24:7a:d3:80:4b:
6f:a5:4f:82:ac:b0:0e:29:55:08:52:c9:68:16:9c:
48:e4:f8:22:22:ca:67:3b:42:0f:14:e6:68:6e:94:
a8:04:fa:fb:93:a4:90:d9:0c:99:04:80:d3:9e:48:
91:41:91:02:78:2a:38:45:ae:c5:bf:a6:65:ff:24:
a9:f5:15:11:96:83:fb:2c:f0:17:be:b0:ae:f8:f9:
2e:4d:fd:36:05:61:73:5f:85:fa:5d:5f:7d:a4:c1:
1a:e5:0e:73:da:71:d4:84:c1:11:87:fa:bf:70:fa:
b8:aa:32:6a:c1:f2:5a:47:1b:1a:c5:ea:7d:b2:8d:
a7:ef:08:a7:37:11:b1:9d:e7:3c:57:d4:9d:05:5d:
44:52:d2:1f:d5:5e:ee:01:c4:51:67:59:c5:51:50:
c5:68:b6:6c:c2:5c:11:89:2e:b9:bf:b6:d2:fd:ce:
2f:40:5a:1a:06:bd:cc:a6:19:9b:ae:82:1e:4d:7c:
7c:4e:ab:9f:80:c9:7d:59:50:49:4e:92:2a:4b:4f:
a4:da:e1:77:0b:6a:ac:13:45:5f:02:68:0c:1c:e5:
f9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C8:3D:8B:2B:DE:E3:00:7B:0D:EA:3A:D1:F0:9C:00:00:F1:F5:8F
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:52:71:8b:d7:8f:e9:68:7f:3b:b5:26:dc:22:0d:43:70:0b:
09:dc:29:09:56:c6:46:72:62:b9:43:97:ec:ad:8f:9f:f7:68:
f9:68:f1:e9:aa:5f:f2:d4:04:a9:df:66:03:a9:73:86:c2:48:
51:30:87:ca:03:93:a2:72:12:0c:f4:63:6c:dc:c1:9f:50:cc:
30:8b:f4:67:27:c0:4b:be:1e:e9:22:db:a8:3f:60:e8:75:81:
14:36:fd:77:3f:22:28:a4:24:ac:5a:f8:99:18:cf:06:4b:12:
69:ef:33:e7:c4:46:53:eb:5a:b3:33:0b:ed:c1:20:be:18:1d:
52:9f:39:fc:86:e4:ae:70:0d:e9:1d:63:a4:68:be:31:16:33:
b6:50:7a:4b:c0:2c:f8:73:21:0d:4a:aa:19:a8:87:eb:9e:6b:
d7:9e:06:11:a7:3e:a0:ee:e4:27:81:ef:3c:a5:38:d2:eb:0c:
8b:b6:ea:37:73:43:f8:52:b5:10:f9:96:31:41:93:60:6a:05:
15:0b:6d:8d:20:2c:24:82:87:13:24:89:27:b5:1c:55:aa:a9:
bf:d6:9d:7b:e5:86:86:f2:54:47:eb:ab:44:85:b9:f3:4f:22:
e8:8b:ae:c1:e8:a7:23:94:47:70:3c:b3:0a:ac:38:47:5b:b8:
d9:71:74:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:47 2025 by rpki-client