Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
File: IysXeNY2I3Q-2JyH3oDCpkCToGI.mft (raw, json)
Hash identifier: jQUSILAk12k6Vrvi3bV80bOcYEafFbMnqb7/D9vUqSg=
Subject key identifier: 33:FB:B5:B5:E5:E7:09:CB:A6:6D:55:9D:99:53:5D:23:4A:C8:19:56
Authority key identifier: 23:2B:17:78:D6:36:23:74:3E:D8:9C:87:DE:80:C2:A6:40:93:A0:62
Certificate issuer: /CN=232b1778d63623743ed89c87de80c2a64093a062
Certificate serial: 019A0110B5410F068A48934C76FC671A2F7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
Manifest number: 081D
Signing time: Mon 20 Oct 2025 10:01:03 +0000
Manifest this update: Mon 20 Oct 2025 10:01:03 +0000
Manifest next update: Tue 21 Oct 2025 10:01:03 +0000
Files and hashes: 1: IysXeNY2I3Q-2JyH3oDCpkCToGI.crl (hash: whvbJJaHjQ6oJR4ixGIY+HgDZBykuPt5/iL4x8sTxQc=)
2: Ljs9MQhWok74BFhLvX5tnc2erSo.roa (hash: +v8jaS8N6bSTt1OSxaSBvN/IEBx5vNtqPM0L9If78cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:b5:41:0f:06:8a:48:93:4c:76:fc:67:1a:2f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232b1778d63623743ed89c87de80c2a64093a062
Validity
Not Before: Oct 20 10:01:03 2025 GMT
Not After : Oct 21 10:01:03 2025 GMT
Subject: CN=33fbb5b5e5e709cba66d559d99535d234ac81956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:36:19:dd:20:94:9e:73:f9:11:1c:01:c2:0e:
87:d7:75:ad:7a:65:5b:9d:9b:00:83:80:38:51:68:
58:44:01:af:13:1f:d5:23:bb:0c:c3:ab:b0:fd:b0:
8f:4e:d2:63:cf:90:6e:0a:bb:de:c3:98:8b:ab:25:
75:21:f0:83:b2:49:2d:9c:7d:06:42:f6:ed:d1:c7:
54:e8:ed:29:86:1f:c7:8f:2d:56:02:58:e5:ec:04:
c2:8f:02:c6:3a:46:1f:3b:84:9e:3a:b3:16:ad:30:
c0:dc:ff:f6:45:38:62:57:88:5b:c2:27:89:03:90:
b1:b9:d3:68:78:a6:5e:21:7b:9b:e7:a9:5f:e6:60:
fd:74:ec:d7:9e:7c:de:35:be:7d:fe:3f:93:ac:8d:
e9:d2:4b:e1:d5:9e:0c:65:de:90:61:8f:5f:4a:39:
b9:a8:c2:61:2c:5c:c2:43:6f:9e:d3:3f:e8:b2:e8:
25:e0:f4:f2:ce:b5:e0:da:51:df:b3:0c:6c:0c:3f:
a9:0e:da:7f:19:14:e6:31:bf:0c:fd:67:fd:9a:d5:
05:6e:87:b4:69:a3:ee:4e:f6:87:5d:12:5e:9e:ed:
3b:e8:5f:59:ae:c8:5f:ec:15:bd:e9:67:6c:96:29:
c6:9b:2b:d3:be:de:79:a1:a5:14:0f:38:c7:3f:76:
58:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FB:B5:B5:E5:E7:09:CB:A6:6D:55:9D:99:53:5D:23:4A:C8:19:56
X509v3 Authority Key Identifier:
keyid:23:2B:17:78:D6:36:23:74:3E:D8:9C:87:DE:80:C2:A6:40:93:A0:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:1b:d7:8f:7e:71:c0:3d:24:68:36:9a:e7:5f:5f:ce:63:67:
a9:e2:fd:64:a3:c4:85:e0:43:f0:13:93:77:55:56:a3:e4:96:
a9:4d:7b:d7:db:4e:92:ae:0f:ee:f9:5c:60:59:d5:77:4d:55:
2b:ce:0f:07:e5:0b:27:16:13:4b:b0:80:bc:a7:a4:bf:80:b3:
b1:be:00:a6:76:2f:9e:42:f3:2a:8b:04:3e:01:7b:c5:d5:98:
37:14:e1:47:92:c0:d0:b2:75:58:ea:3e:3d:73:12:67:1a:01:
c2:67:be:5d:6d:bb:02:9a:e1:73:d6:43:69:72:8b:57:b7:cf:
ba:a9:83:72:a3:b2:6c:29:32:25:5b:48:c3:5c:fd:65:35:18:
e7:63:96:a7:a6:50:17:16:00:c5:0b:1f:48:9b:a2:ef:6d:87:
a8:53:56:69:6e:be:2a:5d:da:76:2a:fe:36:86:d0:b7:11:f6:
0b:60:1c:44:6d:7e:3d:a2:de:8e:fd:25:40:e8:57:9f:2c:af:
36:f8:fd:04:74:01:12:1a:70:06:cc:d9:76:80:f6:63:9b:01:
1c:f1:de:c4:db:46:f7:c2:eb:38:37:27:18:16:30:42:52:46:
1a:4e:43:0a:86:5d:f4:46:3d:d8:b2:89:12:44:36:24:cb:82:
cd:81:8e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:22:59 2025 by rpki-client