Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
File: iq94tpd0pVUH3qv4xMlpQunvDSA.mft (raw, json)
Hash identifier: KUWsnrL6WoB+oraTz4Ohr2U4ikfW0vndyUENiu/A3mA=
Subject key identifier: 08:99:0F:0F:17:AD:D3:2E:B9:12:3C:AE:D8:E1:37:20:46:11:08:81
Authority key identifier: 8A:AF:78:B6:97:74:A5:55:07:DE:AB:F8:C4:C9:69:42:E9:EF:0D:20
Certificate issuer: /CN=8aaf78b69774a55507deabf8c4c96942e9ef0d20
Certificate serial: 0199FD340EAA307BD65BA0A70438FF265325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
Manifest number: 0DDE
Signing time: Sun 19 Oct 2025 16:01:11 +0000
Manifest this update: Sun 19 Oct 2025 16:01:11 +0000
Manifest next update: Mon 20 Oct 2025 16:01:11 +0000
Files and hashes: 1: JQCJu_zj_dBb25hVe1CPLuILo-c.roa (hash: ppq/kkdZOhkWPFmrOFoKNIk30mkp2cJ+7oYbrYYHQUY=)
2: iq94tpd0pVUH3qv4xMlpQunvDSA.crl (hash: hpzvkq86mPZKDqHpMRP9K8yNlO97BbOoniHy1oy75eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:0e:aa:30:7b:d6:5b:a0:a7:04:38:ff:26:53:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aaf78b69774a55507deabf8c4c96942e9ef0d20
Validity
Not Before: Oct 19 16:01:11 2025 GMT
Not After : Oct 20 16:01:11 2025 GMT
Subject: CN=08990f0f17add32eb9123caed8e1372046110881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d3:43:d0:69:c2:fb:fd:47:ae:5b:eb:09:f2:
c7:7f:e4:45:5f:6b:0c:32:87:1d:77:e9:c1:6e:a2:
32:15:1c:43:f8:16:a9:52:29:b1:5c:f3:e7:d9:28:
5a:db:c0:ac:62:82:1d:75:fd:cf:a8:44:60:c2:1f:
3c:51:fc:ac:39:e1:0c:a2:46:2e:59:ce:6d:9c:eb:
88:88:cb:9c:66:08:84:38:f7:a5:ed:e8:8e:17:a5:
4b:95:74:42:b8:f5:fd:3f:07:0e:1f:a5:d0:1e:06:
ed:11:86:43:dd:5d:36:46:e1:2b:86:1e:5c:a2:ea:
b3:3d:77:08:13:9b:73:e6:e4:9b:2e:26:e6:14:bb:
4c:37:1d:e0:2b:ff:87:c6:7d:0a:1c:b2:0c:61:ef:
76:b4:98:59:9a:88:c4:7d:63:34:22:74:51:0b:70:
80:ef:5f:d4:47:74:9c:83:64:82:f8:d8:7a:87:62:
29:35:b2:57:ea:ac:cf:d9:0d:bd:60:35:d4:57:ee:
4c:66:cf:92:28:8d:7e:cd:b2:ed:e0:cb:e9:6c:d1:
57:f3:95:58:2a:4d:ee:34:7d:12:34:cf:85:b7:02:
7d:a5:40:91:81:c1:0a:f4:88:40:91:16:6b:da:00:
70:21:aa:6a:7b:b9:63:6d:a9:4c:c1:92:e7:64:20:
cc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:99:0F:0F:17:AD:D3:2E:B9:12:3C:AE:D8:E1:37:20:46:11:08:81
X509v3 Authority Key Identifier:
keyid:8A:AF:78:B6:97:74:A5:55:07:DE:AB:F8:C4:C9:69:42:E9:EF:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c9:a0:3d:a4:12:69:39:84:83:91:b8:d6:69:1b:5f:84:f3:
52:de:6f:6f:28:06:fa:51:d1:b6:ce:27:86:d0:25:b2:db:fc:
95:4f:71:9a:8a:c8:8e:cd:14:60:78:ca:65:2c:36:29:de:fd:
da:73:44:65:5c:63:e7:de:1a:c3:26:da:58:5a:f3:f7:f7:bc:
bf:bc:90:39:8c:4d:2a:60:8d:d8:81:91:33:2a:34:2e:52:3a:
bc:d1:13:2e:1a:a2:e4:05:ae:7d:bb:06:de:bc:d5:18:88:b1:
41:51:b2:33:55:4e:b5:ff:25:3a:8a:b3:13:77:98:81:07:4a:
02:63:cd:ee:42:aa:d2:53:87:a8:ab:69:8b:c8:d7:a7:79:e2:
a7:b2:55:a5:ba:db:9e:b4:4c:1d:a2:e2:9e:d9:22:d4:0c:70:
82:53:62:8c:78:4f:f6:f7:cd:75:94:72:c1:33:28:8d:3d:7c:
d2:57:69:8b:49:f8:cf:e1:f7:98:ff:34:5a:6e:0a:5d:0b:06:
28:fb:22:0c:27:04:c5:44:6f:58:05:2a:64:4e:16:17:af:a3:
ba:e5:7c:18:4c:7f:9b:12:2f:31:2d:5e:ae:20:86:ba:f0:49:
67:c7:9f:77:f9:01:d7:25:90:f5:2c:02:dd:f1:3a:81:c8:ae:
dd:3f:ed:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:23 2025 by rpki-client