Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
File: iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft (raw, json)
Hash identifier: dr9VTPIv1S0aX3kTqxoHdn10ROUr+1xR4R0rHjLflyo=
Subject key identifier: BF:C6:0D:F6:41:89:FD:6E:B7:0D:4B:15:18:F6:78:2C:46:97:04:B0
Authority key identifier: 88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07
Certificate issuer: /CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07
Certificate serial: 0199FDD999698C308453FB244394CD7AAC20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
Manifest number: 1676
Signing time: Sun 19 Oct 2025 19:02:00 +0000
Manifest this update: Sun 19 Oct 2025 19:02:00 +0000
Manifest next update: Mon 20 Oct 2025 19:02:00 +0000
Files and hashes: 1: KYtWtlgqE5B9oPVpa5XtMWrTy2s.roa (hash: S7OWPBmD/em3aOMLq183MKVqtbhQIKvOUTkiCEiDOio=)
2: iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl (hash: I4u/CavrOQp+IB0ZqJoLoV/lfj8Jdg28Z+a5TEfpgIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:99:69:8c:30:84:53:fb:24:43:94:cd:7a:ac:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07
Validity
Not Before: Oct 19 19:02:00 2025 GMT
Not After : Oct 20 19:02:00 2025 GMT
Subject: CN=bfc60df64189fd6eb70d4b1518f6782c469704b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:14:d2:0e:20:7b:0f:8b:1d:f7:c6:42:6f:f7:
df:eb:c2:fd:5f:51:9b:0e:f9:41:75:1d:00:2f:04:
c6:03:23:d8:42:b2:e9:92:55:61:3d:da:f3:f8:ec:
23:3e:d8:8c:c9:75:ff:01:9b:5e:e8:b8:4e:d8:b6:
01:71:c4:e6:10:ff:03:0b:27:3d:05:52:fb:76:87:
c7:ef:f4:fc:12:89:7e:84:53:90:5e:6a:bc:b2:4c:
01:75:3b:90:07:d4:65:db:e8:49:cc:5d:38:12:42:
cf:51:1c:c2:04:c1:88:37:6b:f3:a1:9a:a1:00:a1:
9b:00:1f:18:dc:b7:4a:ff:a1:3d:cc:40:a0:51:4c:
f3:ec:21:14:96:cd:a8:4b:1d:8c:2f:0c:96:6e:23:
43:94:7a:8f:30:78:82:e6:25:eb:10:b1:4d:e7:eb:
b3:74:08:ae:45:d7:c1:bd:04:4a:84:8a:55:d9:2a:
3c:32:1f:b3:40:52:2e:5e:48:88:b0:36:45:64:77:
28:5f:5c:77:7e:ee:4e:f1:68:3c:56:97:11:9a:ea:
b3:72:13:fa:16:29:e1:bc:1c:b6:27:71:d1:0a:72:
43:41:7b:68:ad:4b:53:1b:5b:28:a9:f8:2c:d4:0f:
53:2f:01:b3:16:59:d6:d3:dc:0c:cb:6c:71:4d:b1:
de:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C6:0D:F6:41:89:FD:6E:B7:0D:4B:15:18:F6:78:2C:46:97:04:B0
X509v3 Authority Key Identifier:
keyid:88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:92:77:7a:32:f8:36:5d:bd:d7:83:b9:7f:10:68:f0:f8:7c:
c6:44:1a:d4:4e:71:d0:4e:70:8b:29:69:92:f3:3d:dc:43:1c:
f3:6d:b5:2d:45:c6:23:db:28:87:1b:66:49:04:27:15:eb:c7:
d5:71:1b:34:6e:f9:69:30:2e:7a:8f:87:69:81:e9:70:f1:83:
b1:9a:9f:24:0a:d7:54:d5:ae:4c:bb:85:f1:a5:72:fc:4b:a0:
1c:68:92:0c:c3:59:21:2e:d4:16:67:79:53:f4:22:8d:e2:af:
72:df:8e:f3:86:bd:d0:71:1a:32:c7:27:77:ed:68:b2:1f:70:
ba:eb:0e:64:3f:03:83:ac:5e:0e:2f:46:4d:ea:56:f0:06:7d:
06:ad:ef:8e:8f:77:84:74:0e:0a:6e:9a:15:95:a7:b8:b4:91:
77:ca:41:52:d9:0f:9f:dd:53:ce:a9:5a:27:af:88:e2:aa:af:
d7:75:84:3a:b8:30:a3:60:00:4f:bf:82:00:86:44:d7:94:db:
93:3c:8e:dc:06:09:eb:37:30:e1:ef:c8:14:d2:27:1f:7c:06:
68:23:76:62:5a:49:e2:9b:af:cc:52:79:9b:de:e0:a2:6c:7f:
3b:cd:de:76:11:8e:bd:0a:7d:41:30:cf:9f:80:59:07:dd:a7:
1b:84:3d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:24:33 2025 by rpki-client