Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
File: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft (raw, json)
Hash identifier: 8SMSv8XGoMoCtt9FFEqdmRqSlZ1NvaN1ZeybQlj4W6s=
Subject key identifier: 55:5D:53:A7:A8:9B:32:2A:65:CA:42:C3:42:2B:B3:59:7D:35:3D:28
Authority key identifier: 88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
Certificate issuer: /CN=88e719f426793b1e9063771460abd311a3dff116
Certificate serial: 0199FC587CC2E574ABA0487AB4B8F1986B24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 12:01:21 +0000
Manifest this update: Sun 19 Oct 2025 12:01:21 +0000
Manifest next update: Mon 20 Oct 2025 12:01:21 +0000
Files and hashes: 1: 2JOqb_FcM3JCaikWzh1QzLM3NNs.roa (hash: isQtSQoVI4VnIJhK4p6fvX5w7lFtKPVqkwJW/rfKCwA=)
2: KkqNZ54Qewj5mCBLo3rtzCSFt7g.roa (hash: Rbv/KvRW9C13yYdCBXyUxqLUAuWNRC3szrxFy+NiiA8=)
3: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl (hash: yaTIwefN7Vcz7q9TmZI949U2TU1AwgjxtMwDTtBM4Tg=)
4: soZKqGzihNQNfxzcrDh_Qn-1Tnw.roa (hash: +H581vOHkrLuu+UEmJR0K8H+S0wh9yACSCN32HI4jio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:7c:c2:e5:74:ab:a0:48:7a:b4:b8:f1:98:6b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e719f426793b1e9063771460abd311a3dff116
Validity
Not Before: Oct 19 12:01:21 2025 GMT
Not After : Oct 20 12:01:21 2025 GMT
Subject: CN=555d53a7a89b322a65ca42c3422bb3597d353d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3b:56:8b:85:10:6b:33:dc:01:cb:f6:a4:ff:
ce:88:0e:05:82:09:bd:79:dc:9a:91:0e:23:b4:20:
97:2f:d2:96:d6:f0:1e:6c:eb:a4:7a:5d:b2:7a:4f:
a1:88:fd:1e:e8:7c:88:ee:38:73:60:4d:c2:4f:6d:
37:f6:52:76:6c:2b:b3:a6:df:4e:0e:27:50:83:5b:
fe:9c:52:98:2e:99:fc:be:dc:8a:24:03:c9:9b:96:
3b:3f:0b:60:f0:66:a9:5f:c2:4c:96:48:b2:c7:15:
db:f3:d7:90:d4:20:74:0d:35:f7:97:6b:6b:fa:62:
10:e0:eb:c2:3b:6c:11:39:80:2e:be:89:19:27:0b:
33:17:0b:7c:fa:35:50:38:f2:9c:e9:05:96:3a:17:
90:3a:94:32:57:2b:bd:e6:ce:67:19:27:dc:13:d3:
59:30:73:d6:a8:9d:82:9a:14:5a:da:98:8f:9b:cb:
61:60:f1:21:54:87:66:4b:49:ed:a1:3e:35:cb:dc:
6e:a3:c1:d7:99:d4:c7:29:9d:30:6b:58:f6:d9:32:
3d:17:dd:68:78:f7:bb:40:33:5a:dd:df:97:40:88:
9a:9b:12:37:3b:fa:03:ec:d6:cf:d2:52:61:46:fe:
ff:eb:43:10:cb:08:46:16:58:00:61:13:96:ee:e3:
ab:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5D:53:A7:A8:9B:32:2A:65:CA:42:C3:42:2B:B3:59:7D:35:3D:28
X509v3 Authority Key Identifier:
keyid:88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:e4:01:85:05:5e:36:e4:6f:6b:c2:c9:d4:f1:a3:81:66:be:
cf:cf:6c:d4:83:d7:da:66:64:4d:43:47:83:40:26:3a:70:fb:
6d:46:b7:b4:8a:4a:6a:15:12:07:8d:34:d3:4a:d0:2e:37:e0:
66:32:79:b3:6b:dc:02:92:2a:ba:f5:2c:7c:97:c0:1a:18:8c:
dc:9e:ba:6c:7c:cc:d5:20:d1:42:0e:bd:0e:16:91:d4:f2:c1:
9c:58:e6:16:78:f9:bb:4e:a3:c2:dc:80:9e:c2:c4:4b:f0:15:
e2:7d:01:69:ea:63:80:cb:e2:2d:58:01:02:c0:82:ea:f1:e4:
38:e1:c1:f4:71:86:52:44:c0:11:e1:00:8a:ba:4d:a2:88:76:
92:97:ec:24:fa:cb:3a:db:e4:60:8e:ba:cd:6e:40:ed:3c:5e:
fb:4c:fd:b6:00:7a:13:9b:8a:b7:61:72:22:2d:74:2b:d5:dd:
b4:b0:5c:b4:09:57:4a:19:b1:4b:74:0c:7a:00:aa:0d:69:ab:
19:8e:53:69:c0:23:76:a3:dd:4e:cd:7c:37:99:b8:e3:44:26:
12:bf:3e:5f:b7:5e:eb:7b:3e:d6:9a:c9:47:18:7b:a7:22:70:
29:ed:27:36:c6:ed:48:54:31:10:4e:d1:27:17:31:b3:9a:9d:
44:ef:1b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:39:03 2025 by rpki-client