Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
File: iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft (raw, json)
Hash identifier: MCa2bc2EfBRPEOc8Bn3Fo87vn8Re2YK0Le0DJL0BXZc=
Subject key identifier: EA:0E:91:47:6B:11:69:10:2C:58:EC:3E:1B:ED:61:33:DA:1A:65:65
Authority key identifier: 89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1
Certificate issuer: /CN=8968883765549991d7ff376126d58a909a14b8f1
Certificate serial: 0199FEEB8603822886C1FBD7D2E0B74318DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
Manifest number: 030A
Signing time: Mon 20 Oct 2025 00:01:12 +0000
Manifest this update: Mon 20 Oct 2025 00:01:12 +0000
Manifest next update: Tue 21 Oct 2025 00:01:12 +0000
Files and hashes: 1: OFotEhQS5D75BLXwwqIZG_YPaGM.roa (hash: DFc7srYmWSrbDIWTrg0cPVEONFNYLjz8/fNoPyoYWxo=)
2: iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl (hash: Qt2Wf/gt194J6KaaIlaTk36SMiTYdy8aeJhqU5uj7V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:86:03:82:28:86:c1:fb:d7:d2:e0:b7:43:18:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8968883765549991d7ff376126d58a909a14b8f1
Validity
Not Before: Oct 20 00:01:12 2025 GMT
Not After : Oct 21 00:01:12 2025 GMT
Subject: CN=ea0e91476b1169102c58ec3e1bed6133da1a6565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:25:1f:98:d7:06:75:65:96:75:24:34:4c:fb:
66:71:8c:45:18:50:d9:17:8d:b8:47:23:30:35:29:
8a:a9:d2:10:c7:62:17:c6:d4:31:03:87:31:a4:ca:
94:60:96:b7:e6:76:19:84:a4:e6:76:3d:ed:bd:2d:
d4:c7:44:60:f0:4c:15:6a:4d:75:93:9b:0d:bd:80:
71:c0:c0:58:e4:eb:af:42:34:c2:a3:62:b2:56:c0:
11:e7:24:a8:ad:22:bb:e8:08:e2:1a:d8:ce:d2:4d:
f9:55:d8:1a:f3:17:8c:0d:70:19:00:81:7a:66:d8:
56:4a:a7:92:ed:be:7f:d2:be:ad:1d:0d:78:3d:1c:
0c:0e:03:3a:31:c2:4f:3d:eb:49:5f:22:2e:2a:ab:
3e:9f:f0:61:57:f9:7d:13:5e:b1:82:5e:fe:79:45:
43:e2:8a:01:22:4a:6c:5a:80:26:aa:ba:c3:91:b4:
77:81:ab:77:2a:d1:a3:07:bf:53:59:f7:33:3e:49:
72:e8:5c:8e:3e:91:f2:92:f2:b3:b4:b2:4f:d9:cf:
33:ff:83:e1:0d:d2:77:83:c1:36:e8:db:c7:ee:fa:
20:a9:cf:ce:e1:bc:3b:da:18:58:00:f9:83:07:7b:
33:b7:1c:87:43:b2:01:94:a1:53:a5:35:72:fe:c1:
39:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0E:91:47:6B:11:69:10:2C:58:EC:3E:1B:ED:61:33:DA:1A:65:65
X509v3 Authority Key Identifier:
keyid:89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:20:36:db:b2:bd:5d:11:e1:ed:40:10:e0:38:f5:f5:c5:db:
b6:38:64:91:e9:58:fc:10:d7:56:dd:b7:98:14:6f:69:b3:f2:
a6:ff:da:6b:40:0e:1f:de:52:2f:32:d1:5e:fc:34:9f:72:6d:
a5:cc:d2:a7:b7:47:4d:ab:4d:73:6c:88:84:1e:30:74:38:6a:
47:91:97:b3:da:1c:74:2e:e6:5f:c9:21:06:c0:10:09:6f:4f:
0d:67:87:63:e5:84:ac:a0:d1:6f:31:99:ff:44:23:67:45:41:
50:3f:62:89:ea:44:15:b2:4c:0e:c4:58:29:6f:a3:f8:5a:8d:
06:47:59:25:d3:72:8a:34:dd:34:8e:43:70:07:b6:2a:d9:6f:
e5:bd:33:2f:b6:55:8c:2e:45:99:0a:1a:f1:e2:89:06:1c:c8:
56:9c:5c:37:c7:51:cf:b9:6c:44:c5:63:54:cd:28:ad:e0:e3:
85:65:5b:16:bc:a4:94:ad:80:2a:f2:6d:8e:75:02:ae:d1:ac:
39:29:40:bc:d0:00:ff:08:39:b3:48:85:94:95:b2:9c:af:96:
14:30:34:5c:b3:8c:b8:8b:6e:14:c4:69:52:71:a7:98:ea:82:
a3:4d:52:f5:39:74:a0:f3:2d:5c:38:5e:29:94:ee:0c:16:e7:
29:ff:7c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:37:12 2025 by rpki-client