Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft
File: iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft (raw, json)
Hash identifier: 79GuQzvrhyj+yqg0XBQClpmZ0d9MlEcsWi9vSGIoXgA=
Subject key identifier: CA:68:69:B4:59:08:AD:37:4A:D6:04:84:20:8A:2D:92:B7:F2:2F:5E
Authority key identifier: 88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
Certificate issuer: /CN=887e81ba84344598c61462833aadf3204eae087c
Certificate serial: 0199FE4741533DFC429A7DAB119EBACA7AB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 21:01:46 +0000
Manifest this update: Sun 19 Oct 2025 21:01:46 +0000
Manifest next update: Mon 20 Oct 2025 21:01:46 +0000
Files and hashes: 1: G8pM4BO4SDFuG0O0aHGZFSHu0bY.roa (hash: z8nYleBnvbZLzPZcC36R6KcHw5MKTfcdnhsG0y6RlGM=)
2: iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl (hash: gr/heI8F+usU8KZClZvjBA6WOdTwMF1ny418FF0apFA=)
3: shLVoHyiaZbg7eg2YqA4ky_a-CU.roa (hash: eojzTxeSDWN8wwV7q5opIiiSFcYnrY9hg5to5e5Gp1s=)
4: xifnCCeMNH18n0eWMqga1pgyjCM.roa (hash: apTXD8raL3qZhnZiaGrtnxJWUf2/cGGa8lnT/pZJ1So=)
5: ywH8wQjufiysHP5OXijDjTOBrH4.roa (hash: Kuw4rCVLsz9XQ+KOtke/DWSrK02REb1j13WO/v4sxqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:41:53:3d:fc:42:9a:7d:ab:11:9e:ba:ca:7a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887e81ba84344598c61462833aadf3204eae087c
Validity
Not Before: Oct 19 21:01:46 2025 GMT
Not After : Oct 20 21:01:46 2025 GMT
Subject: CN=ca6869b45908ad374ad60484208a2d92b7f22f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3d:b1:6d:73:c1:e7:6d:c9:cd:2b:f2:0c:fe:
65:2a:2d:0d:41:55:8c:97:c2:19:74:a1:74:2f:d4:
df:31:50:ea:4b:2c:72:02:9e:b6:3f:7c:af:4a:0b:
20:0b:ca:ef:f7:00:bb:d1:d3:3e:7c:31:7c:fb:15:
4d:74:58:db:d9:be:93:69:44:89:42:45:46:5f:1f:
6d:87:d0:27:ba:5a:9a:b6:73:27:30:44:b0:34:8f:
3e:4b:61:dd:53:27:91:28:cd:e4:c8:36:a4:1d:11:
ff:f1:83:4c:c5:7b:59:ec:8f:5b:5e:eb:cf:55:7e:
3e:c7:29:66:b5:69:9b:ed:74:57:01:b3:4e:5f:eb:
56:3a:b4:76:39:53:73:e3:f7:cd:0a:8d:59:36:6b:
be:19:ce:99:4b:20:47:e7:f3:64:5b:b1:69:5c:3c:
39:f4:86:83:a9:01:97:46:cf:46:a4:b3:71:76:34:
65:e5:c7:38:9c:0f:9e:68:5e:51:34:b0:21:4a:5b:
78:35:60:6b:d8:99:1b:3a:13:0c:0d:21:b0:4c:86:
82:1f:1a:d7:96:f7:2b:ff:2e:4b:df:3b:1b:13:2d:
f5:35:e3:d8:cc:1d:ca:8d:12:63:65:de:0a:fa:a7:
0a:bf:ae:08:47:b4:7a:3e:35:06:d2:af:e0:ba:80:
ff:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:68:69:B4:59:08:AD:37:4A:D6:04:84:20:8A:2D:92:B7:F2:2F:5E
X509v3 Authority Key Identifier:
keyid:88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ef:1e:52:18:32:88:ab:20:ea:74:41:f5:37:86:17:1c:22:
a2:2a:a8:ea:3f:7b:63:76:f5:97:de:28:98:bd:18:99:6c:ae:
b8:f5:b8:f2:ae:46:28:31:ac:ec:d7:8e:7c:bd:5b:78:aa:ae:
fc:4d:9b:fd:47:ae:67:37:9f:40:41:c9:0c:4d:f8:3a:c9:c9:
2b:64:6d:0c:2f:0d:10:93:73:e7:30:56:94:88:d9:f3:e5:a4:
0e:cb:2f:e3:6a:09:8f:52:46:40:9d:6b:38:87:41:e5:eb:b6:
b5:f6:22:dc:eb:14:81:29:a2:f8:ee:f2:12:83:94:b3:7f:8b:
34:5a:93:a8:3c:a7:02:45:8d:df:be:f0:d6:4f:dd:2d:34:2c:
ca:56:10:9d:c3:02:39:41:f1:77:16:ce:25:b9:45:08:d6:8c:
89:e7:2f:8f:81:29:fb:0a:02:18:73:72:fa:fa:98:23:fc:e8:
b7:41:c5:29:bc:64:d0:b2:d4:c2:a6:94:61:b8:77:b0:ce:d9:
36:b6:c6:bc:76:2b:00:b4:cd:b2:e7:bf:74:2d:d6:0a:5f:75:
40:bf:00:6c:1b:79:62:67:e3:f7:cb:2b:7d:1d:7d:ec:41:27:
a6:e0:53:e3:69:b5:39:3e:07:6f:f5:e1:26:6b:63:46:dd:16:
74:1e:a6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:21:26 2025 by rpki-client