Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
File: iQCNpBkicovFvtu9cIhwHFKbme0.mft (raw, json)
Hash identifier: GQmVS+q4J6DoeGVXJjIgLnDv+cUD94256suHA5GzVC0=
Subject key identifier: 22:74:93:64:46:ED:3B:BF:92:C7:AA:FB:E8:CE:3B:2B:75:FA:4C:13
Authority key identifier: 89:00:8D:A4:19:22:72:8B:C5:BE:DB:BD:70:88:70:1C:52:9B:99:ED
Certificate issuer: /CN=89008da41922728bc5bedbbd7088701c529b99ed
Certificate serial: 019A01B6613CA5E0A3FE16EDDCE3C58B4AB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
Manifest number: 0288
Signing time: Mon 20 Oct 2025 13:02:00 +0000
Manifest this update: Mon 20 Oct 2025 13:02:00 +0000
Manifest next update: Tue 21 Oct 2025 13:02:00 +0000
Files and hashes: 1: 9WCM-NfBtEzVC0bLgcXxGw_dKs0.roa (hash: +AotBLTXOYZ2qqQz68W39gfX7TdnqXgGz673AR3fS9c=)
2: iQCNpBkicovFvtu9cIhwHFKbme0.crl (hash: GYpATvo/OXUsivraomcRvn9Yg6AIm0ZLQpgV3mmgVIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b6:61:3c:a5:e0:a3:fe:16:ed:dc:e3:c5:8b:4a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89008da41922728bc5bedbbd7088701c529b99ed
Validity
Not Before: Oct 20 13:02:00 2025 GMT
Not After : Oct 21 13:02:00 2025 GMT
Subject: CN=2274936446ed3bbf92c7aafbe8ce3b2b75fa4c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d0:fe:db:07:44:2b:a9:77:48:b6:15:8a:23:
fb:a3:99:c9:8a:60:21:61:75:b3:ad:35:20:22:18:
4c:3a:5d:55:9d:ad:fb:2f:64:a2:57:0d:56:0d:db:
46:40:2f:62:78:69:2a:c2:7d:b2:02:8a:eb:40:eb:
6f:31:5a:f1:09:ec:95:0c:6b:bd:c3:8a:a6:8b:6c:
f1:5f:12:32:78:b0:96:38:58:79:f3:d8:e6:ea:73:
a8:4d:70:bc:c6:3f:82:fd:32:bd:c8:85:52:67:d1:
75:dd:6e:1c:58:de:6f:4e:00:7b:ed:55:48:31:e7:
e1:f9:b5:9f:20:b7:e7:da:a3:c7:68:d0:87:fd:62:
cc:94:c9:c5:8b:3a:9b:9c:db:9c:d6:e2:ed:f5:99:
78:36:91:1f:59:40:53:e9:56:cb:52:ca:77:5a:de:
24:45:30:54:5e:5c:0d:14:26:af:ac:1f:90:7a:5a:
c8:03:27:c5:1d:a1:3e:39:fe:4d:07:2a:c9:48:a3:
8b:89:9c:66:32:79:77:27:aa:91:d8:5d:9a:56:b5:
6d:e2:f9:57:d8:5b:ce:01:32:c0:cf:68:cd:6d:7b:
e0:f7:6a:01:43:76:42:21:8c:43:b4:ae:e4:21:57:
23:24:8f:f4:42:00:0e:d4:20:d9:9a:a4:ac:59:6c:
e1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:74:93:64:46:ED:3B:BF:92:C7:AA:FB:E8:CE:3B:2B:75:FA:4C:13
X509v3 Authority Key Identifier:
keyid:89:00:8D:A4:19:22:72:8B:C5:BE:DB:BD:70:88:70:1C:52:9B:99:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:5f:71:ca:90:9d:2c:97:3c:7d:ae:40:79:cf:02:15:32:5f:
0b:94:1f:30:9e:9a:0a:d3:7a:d4:55:44:5d:00:13:aa:a3:f5:
cc:4e:e8:21:69:19:dd:65:ea:b0:6d:a3:f7:2e:24:f8:f1:d4:
54:a7:f8:e8:b2:1e:fb:2f:ef:ed:e2:35:34:2b:05:c6:23:97:
89:59:38:8a:08:cd:12:97:9a:85:f2:e6:89:c0:5b:b6:3a:da:
6d:51:70:14:1c:fd:3f:68:75:53:67:65:f8:21:64:51:51:6b:
8a:be:92:43:44:fe:a0:d1:e9:1f:ba:dc:fe:70:d1:60:22:09:
29:00:28:d5:cd:07:f8:e9:43:98:08:31:29:80:50:f4:1d:9f:
dc:61:63:10:96:40:66:a8:1a:2b:d1:1a:a5:2d:17:0e:85:1a:
5a:2d:01:be:81:b7:0f:bc:88:39:2a:fa:0e:7e:0d:d7:4a:28:
55:c0:ce:91:b9:84:ce:ca:d5:bd:41:08:8b:23:9a:d0:b5:d3:
26:c4:cd:71:1a:95:ee:a0:7d:3a:33:aa:cd:61:83:ba:03:a3:
49:9c:83:0f:81:e1:2f:11:c0:bb:c9:12:d9:01:d1:2d:4d:50:
df:32:37:20:e5:6a:a9:07:d6:99:5e:03:5e:67:2d:90:fa:a0:
c0:a8:19:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:01:41 2025 by rpki-client