Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft
File: iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft (raw, json)
Hash identifier: bfh5XkYd3SgnHQn6mtgu7V6Fc8MoQ3d7N9ZcQTXCvJI=
Subject key identifier: C2:3D:EA:F3:C9:92:4B:E3:6E:00:37:13:D6:3C:21:C7:A5:40:31:CF
Authority key identifier: 88:E9:FA:23:DA:4F:E9:7A:A9:E0:F3:91:15:62:05:59:A2:9F:6B:70
Certificate issuer: /CN=88e9fa23da4fe97aa9e0f39115620559a29f6b70
Certificate serial: 0199FEEBF166EAE314D40DE7FEDC1F807489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOn6I9pP6Xqp4PORFWIFWaKfa3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft
Manifest number: 048A
Signing time: Mon 20 Oct 2025 00:01:39 +0000
Manifest this update: Mon 20 Oct 2025 00:01:39 +0000
Manifest next update: Tue 21 Oct 2025 00:01:39 +0000
Files and hashes: 1: 0iDUFJnxa3p3pYn9wOd7dy5ufak.roa (hash: 3azQw0QyMVpE4/ttRjyWB6+sGCTH0gc4+eCuZ8gfhjY=)
2: iOn6I9pP6Xqp4PORFWIFWaKfa3A.crl (hash: 13UgGiWkuoKtRGiV21ZpHCAcJYQhhF70I7zmyrzmm5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOn6I9pP6Xqp4PORFWIFWaKfa3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:f1:66:ea:e3:14:d4:0d:e7:fe:dc:1f:80:74:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e9fa23da4fe97aa9e0f39115620559a29f6b70
Validity
Not Before: Oct 20 00:01:39 2025 GMT
Not After : Oct 21 00:01:39 2025 GMT
Subject: CN=c23deaf3c9924be36e003713d63c21c7a54031cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:93:e2:26:69:3a:ed:bd:ce:fa:06:f0:10:a9:
d3:88:7f:9d:e4:93:76:08:92:2e:02:97:d5:16:bf:
4d:13:49:1b:7b:7c:f6:f2:5f:10:d1:0f:7e:21:cf:
54:d8:f6:a8:50:e2:66:d3:0b:36:41:55:ea:61:a8:
9a:38:cd:18:dd:18:37:fd:62:bb:32:57:fb:29:a0:
f5:88:31:50:9f:6f:c8:ac:a3:6c:80:75:28:c6:1d:
84:2a:f1:8d:9f:b4:16:05:92:1c:c6:26:b6:52:b9:
f3:29:42:43:a2:09:0e:f5:23:ca:96:ff:47:27:bf:
4b:61:09:84:fb:1c:59:73:b5:17:f1:bd:13:f7:0c:
62:3d:aa:d8:01:00:5b:74:ab:ab:ca:4a:74:a4:90:
fc:84:89:4e:c2:1d:cd:12:d3:5d:d7:13:5b:ab:0c:
c0:3e:5b:04:a7:06:23:5a:0f:21:21:24:ca:cd:54:
fa:5c:0f:43:75:0b:6d:a3:d2:18:0d:4d:c7:e8:d3:
fa:13:3e:62:9c:a0:64:7e:09:e9:51:88:36:7e:68:
76:8f:63:6c:e2:47:05:aa:ff:d3:34:ac:dd:84:4a:
fd:5b:b6:e4:84:2c:af:91:3c:fe:8c:1a:f4:43:df:
a3:ee:88:76:3d:f3:6b:6c:7d:32:fb:c9:46:0e:34:
b9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3D:EA:F3:C9:92:4B:E3:6E:00:37:13:D6:3C:21:C7:A5:40:31:CF
X509v3 Authority Key Identifier:
keyid:88:E9:FA:23:DA:4F:E9:7A:A9:E0:F3:91:15:62:05:59:A2:9F:6B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOn6I9pP6Xqp4PORFWIFWaKfa3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e7:c3:40:27:9b:32:cd:34:45:14:df:a8:7f:a3:5a:20:08:
bf:81:da:e3:77:d8:bd:d6:45:e3:47:3a:92:d1:11:e3:d0:04:
21:f4:98:74:e2:9a:f8:1e:17:84:b7:05:18:8b:9a:6f:78:fc:
a1:8b:f0:b5:63:c3:cc:61:f7:ba:51:f4:ca:15:4a:2a:4c:fd:
38:3a:92:4a:53:b3:3b:7a:8e:64:00:54:b6:f9:cd:fa:9c:b8:
98:6a:97:14:e0:ff:8f:0c:cb:91:68:81:95:0e:ae:42:9b:e2:
a0:ba:5e:72:80:28:9b:05:66:00:d5:79:c3:48:47:e1:7b:88:
59:9a:7d:20:6c:a6:e2:47:01:ae:0e:c1:60:66:a8:cf:af:28:
f7:31:bc:b2:0a:b4:44:33:32:f5:78:90:a8:cf:58:3b:5d:ae:
b7:85:39:84:17:29:e8:d2:a0:88:b3:aa:16:80:05:0f:4d:fa:
7c:c0:15:83:26:c9:89:11:81:00:06:86:a9:a8:fc:1a:6e:f8:
6b:1d:2c:da:7b:ee:7f:82:5c:0d:e6:d5:6d:57:15:cd:c3:c2:
48:34:68:8a:ae:de:85:f6:d5:b5:a5:33:61:39:71:72:ee:04:
d9:7d:ee:97:b5:00:7e:14:c8:bd:58:96:5f:7b:7f:9b:0c:07:
23:3a:c9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:11:10 2025 by rpki-client