Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
File: IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft (raw, json)
Hash identifier: AxxVlNGzx3Wo15LikmQVL7AWOvUbzmlMNVhhvIeAXCM=
Subject key identifier: BE:48:6D:CD:5E:35:9C:76:AC:01:92:3C:77:3D:B4:03:56:CE:E2:C3
Authority key identifier: 20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
Certificate issuer: /CN=200585361d51a72e7ba6308c0ceb160244831178
Certificate serial: 0199FC8F6CF2158C7960CFCFBD25587134D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
Manifest number: 0815
Signing time: Sun 19 Oct 2025 13:01:21 +0000
Manifest this update: Sun 19 Oct 2025 13:01:21 +0000
Manifest next update: Mon 20 Oct 2025 13:01:21 +0000
Files and hashes: 1: HbRQpBgObvXEU2PlNrEx4IzYigA.roa (hash: Zv7kNMXOsdDw3zZwNDMjdGrZy1Nvjep0YaEbodwv3Qw=)
2: IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl (hash: 0vjU7atdr0mAB8xC1d7E5u9AyH2YgAhpMoWSxFwHCh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:6c:f2:15:8c:79:60:cf:cf:bd:25:58:71:34:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200585361d51a72e7ba6308c0ceb160244831178
Validity
Not Before: Oct 19 13:01:21 2025 GMT
Not After : Oct 20 13:01:21 2025 GMT
Subject: CN=be486dcd5e359c76ac01923c773db40356cee2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1e:2f:93:90:55:11:80:1b:c0:e4:38:8d:77:
2e:2d:3f:91:18:c5:2b:69:9f:3d:6e:01:c0:fc:d7:
2d:7a:91:3c:90:6c:cb:28:02:5b:6b:c2:48:02:b9:
d2:f3:60:b3:81:16:01:41:98:0e:63:f7:6c:cc:b9:
e2:8b:7b:9d:df:67:71:88:f5:31:a3:4c:10:df:86:
95:ac:f9:2c:67:69:ad:b0:26:47:3b:6f:ec:bb:44:
3f:26:54:0b:ec:13:b1:78:90:f4:d8:2c:9d:a0:c6:
9f:66:3d:42:5a:e8:24:71:07:7d:83:db:a7:4a:98:
b0:ee:94:3a:84:68:f2:d8:5e:27:c0:75:b3:89:73:
86:a9:3d:d5:13:36:8f:67:e5:05:37:df:7f:ab:3c:
c7:e0:25:14:f7:2f:78:14:9d:2b:47:50:43:39:3f:
72:b9:ba:5b:3a:90:36:76:1b:1b:ea:86:b8:47:cd:
48:90:3a:ef:0c:09:9a:62:45:db:0d:2b:26:5b:f5:
cb:7a:ed:e9:f9:35:67:51:f6:02:85:8a:9e:68:f8:
6e:6c:45:2f:d0:cf:3d:f0:b1:44:d5:6f:c2:5f:48:
de:2e:bf:ea:3d:94:d6:03:81:9e:6e:ac:a5:6d:22:
67:1e:8b:20:ad:b6:59:96:4e:5a:7d:c0:7e:4e:94:
67:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:48:6D:CD:5E:35:9C:76:AC:01:92:3C:77:3D:B4:03:56:CE:E2:C3
X509v3 Authority Key Identifier:
keyid:20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:fe:7c:26:5d:b9:91:2c:6f:97:7c:a8:f9:05:1e:f5:04:99:
ce:e1:3e:8f:61:90:4f:70:06:65:79:a7:78:bd:df:f5:83:a1:
65:07:5a:92:1e:87:3f:79:ac:cc:b8:b6:40:91:59:22:f4:87:
ab:f8:0f:e7:c4:f0:d1:e9:04:70:75:f9:42:6b:25:7d:99:33:
98:62:11:07:55:19:21:63:04:80:46:7e:8b:a7:71:ea:b2:ca:
50:cd:fc:49:ca:a9:36:ee:2d:f9:e3:65:29:d3:88:6b:bc:5f:
1e:66:24:f8:77:b6:cc:c7:66:4c:7a:0f:f1:4f:a5:c5:22:4b:
ab:94:a9:cb:d9:42:49:8b:9c:25:c3:d2:20:b9:8a:ca:bb:87:
81:73:91:8a:56:cd:d9:44:36:47:80:b1:e1:8b:ea:28:6e:41:
c4:77:b5:77:9d:97:96:d9:63:87:09:71:3b:90:12:15:b4:fd:
ca:47:e0:a0:37:f2:35:41:cf:0e:47:92:ed:1c:94:56:1c:c0:
9e:78:cd:2a:7f:55:09:03:0d:3c:e0:3e:a7:9b:0b:e9:a3:61:
0c:93:e5:57:60:0e:f4:55:a2:e5:00:f9:8a:6d:46:c7:f1:9a:
36:33:d7:b4:91:66:b8:39:81:45:f0:40:1e:b4:08:d2:f5:85:
b6:2e:b7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:11 2025 by rpki-client