Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
File: iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft (raw, json)
Hash identifier: qwJ1/HJtbhGJU1Y37GvmC0saqVSAy2l2MogeY8hpdIE=
Subject key identifier: 78:10:28:54:05:A5:05:4C:66:C9:25:8C:25:5E:43:0D:C9:96:98:2D
Authority key identifier: 88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11
Certificate issuer: /CN=88fc58875608970d9a728347d05ef00d0f1d5611
Certificate serial: 0199FB45F4D25E48A3E59506D13545C17617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
Manifest number: 104D
Signing time: Sun 19 Oct 2025 07:01:29 +0000
Manifest this update: Sun 19 Oct 2025 07:01:29 +0000
Manifest next update: Mon 20 Oct 2025 07:01:29 +0000
Files and hashes: 1: glHtLecTNUxeR4oxupaJRTlQLos.roa (hash: tjH899kftJHgu4JmkbHHTA84WKPpmWW00cLzLNo7wBg=)
2: iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl (hash: bpxsBH45SEeDvlpUM1kl1vf654HbqZCa4oh9kiNO+uU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:f4:d2:5e:48:a3:e5:95:06:d1:35:45:c1:76:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fc58875608970d9a728347d05ef00d0f1d5611
Validity
Not Before: Oct 19 07:01:29 2025 GMT
Not After : Oct 20 07:01:29 2025 GMT
Subject: CN=7810285405a5054c66c9258c255e430dc996982d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d5:b0:3d:e4:76:27:ef:b0:bb:29:7b:49:63:
78:bd:fa:74:ff:73:37:b6:04:b8:ac:7e:7b:37:06:
b6:bf:db:d8:50:b0:d3:46:cd:7f:3f:a5:71:68:ec:
f7:0f:c4:42:34:6b:26:c8:7a:d9:7b:72:03:38:fa:
bd:9b:48:22:9a:21:5a:4c:26:e5:6f:15:f8:45:24:
4d:e7:85:ec:66:07:87:96:a4:da:ca:9a:57:1f:48:
38:be:bf:a9:c6:c3:93:a0:b0:69:56:33:77:3d:e7:
55:ef:53:de:61:6f:33:ed:b2:d3:6a:05:25:0b:c2:
29:5c:2c:b7:a0:06:60:71:07:91:c4:dd:0f:7e:3c:
df:32:d1:92:b6:ff:2c:69:ff:09:87:a1:fb:8a:47:
47:66:65:1b:ea:1c:b6:18:84:06:98:b7:6c:8a:92:
4f:69:4a:c5:aa:c0:32:1f:d7:24:57:83:db:5f:61:
d1:64:f1:ee:a8:35:83:ac:72:3b:e9:3b:2e:5e:c9:
4c:6f:45:c9:0d:a7:a6:ff:04:d0:1f:cb:9d:6a:9d:
16:74:05:09:b4:da:46:66:96:2a:77:d1:2a:90:ea:
ff:8c:68:6d:54:e8:1e:9c:5f:30:85:24:f8:a1:15:
6c:dc:04:c1:4c:bd:53:d7:79:b1:af:f7:ab:3d:92:
a6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:10:28:54:05:A5:05:4C:66:C9:25:8C:25:5E:43:0D:C9:96:98:2D
X509v3 Authority Key Identifier:
keyid:88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:7c:ed:0b:36:14:63:f5:88:0c:43:dc:cd:b1:a4:63:02:fa:
c9:f6:f4:8b:3c:dd:75:0a:27:e5:57:a5:21:26:14:57:2a:be:
2c:57:2e:1a:46:24:96:aa:11:65:71:fa:0f:4f:f9:ca:15:10:
cd:05:90:15:e1:2b:c9:31:f2:66:70:ac:8b:76:8a:02:e7:63:
5d:8d:4b:62:b7:1f:80:92:00:fc:8e:c2:5c:ff:a3:f4:be:7c:
7a:56:ac:43:b8:cc:4c:d1:10:48:56:e0:f5:5c:ab:4f:d8:3d:
98:00:e2:f4:db:79:2f:d5:77:22:08:ac:86:d6:11:fa:ba:d4:
7e:22:bc:4d:b4:62:27:c4:dd:e9:61:3d:7b:ec:fc:20:de:38:
7a:89:f1:9a:96:81:9e:d5:22:06:27:66:90:48:15:d3:69:e2:
73:67:d4:d8:4a:60:f9:8f:d0:7d:72:e8:4a:b0:1d:53:36:c7:
dc:2c:33:2e:40:8b:33:bf:e2:35:e4:e2:2a:52:c0:b0:75:7c:
cd:41:27:06:2c:0a:87:bb:ef:ae:94:12:14:99:a3:d8:90:41:
16:0c:66:0e:11:b9:7f:80:8f:fb:e7:fc:10:41:fb:5c:a0:89:
a6:0a:ca:a8:67:36:17:11:75:be:4f:fc:b8:43:07:44:d0:c9:
ec:16:3d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:58 2025 by rpki-client