Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
File: irYGzqebWr6BaDpjN5s5KJssq5M.mft (raw, json)
Hash identifier: Shac1X352D+nFgaFkq1DCzhYItA6ie0UHELRiG6wCFM=
Subject key identifier: 97:E3:01:6A:56:54:8A:62:54:17:0F:00:74:40:8C:BB:F5:12:EC:29
Authority key identifier: 8A:B6:06:CE:A7:9B:5A:BE:81:68:3A:63:37:9B:39:28:9B:2C:AB:93
Certificate issuer: /CN=8ab606cea79b5abe81683a63379b39289b2cab93
Certificate serial: 0199FCFDA8835EA706313BD703AF59479126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
Manifest number: 0866
Signing time: Sun 19 Oct 2025 15:01:46 +0000
Manifest this update: Sun 19 Oct 2025 15:01:46 +0000
Manifest next update: Mon 20 Oct 2025 15:01:46 +0000
Files and hashes: 1: Ol66WOHM5O0qZSOG9y7yOIgJsCo.roa (hash: tBXkTjKhKw+qp8WtoR3ZkzeeWQpNfDqudYVdDHWc62c=)
2: irYGzqebWr6BaDpjN5s5KJssq5M.crl (hash: 3RIPVi0Fsi7V7Z1Y7lmUESkH5THmKdEENSpzsVyNfIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:a8:83:5e:a7:06:31:3b:d7:03:af:59:47:91:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab606cea79b5abe81683a63379b39289b2cab93
Validity
Not Before: Oct 19 15:01:46 2025 GMT
Not After : Oct 20 15:01:46 2025 GMT
Subject: CN=97e3016a56548a6254170f0074408cbbf512ec29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:87:e8:c9:80:f9:c2:c7:50:d6:d6:8f:29:eb:
2e:a2:f4:81:8d:7b:11:f1:b7:3d:b2:7d:91:17:2a:
26:d0:48:7c:82:87:bd:ec:84:2e:8b:47:92:ec:13:
d5:f7:e6:53:58:81:8c:53:a3:83:6b:71:2e:7c:91:
9e:e9:b8:30:62:6d:ea:49:85:a8:6b:3d:23:14:30:
f5:87:64:ef:2a:1b:60:7c:1b:f5:1e:50:a8:77:de:
30:04:fb:8e:5f:1c:bb:86:3c:85:4a:36:97:4c:dc:
78:30:9e:48:e0:27:14:8c:5e:66:84:00:f8:20:62:
b5:85:a8:cc:a6:0d:a6:be:1a:21:8a:e6:0d:ce:7a:
34:63:8a:2d:7f:75:f0:88:19:15:2f:37:98:89:31:
97:9b:f5:bc:27:cd:51:55:c0:55:a1:d4:3b:fd:a8:
6a:f1:64:87:2d:08:a5:a9:30:b2:f5:03:eb:b5:9d:
c6:a9:16:51:08:5a:3b:63:88:49:82:cd:81:47:12:
d6:a9:14:c0:75:d9:c1:82:70:e6:d4:33:96:0d:83:
44:a9:a2:65:b2:b6:6c:1d:a3:07:a9:70:e5:21:46:
17:e4:97:a3:1e:9a:19:b2:e2:e0:24:7f:88:f7:a0:
9a:f5:9a:b2:6a:cc:fc:85:d2:9c:32:9f:d1:2c:95:
a9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E3:01:6A:56:54:8A:62:54:17:0F:00:74:40:8C:BB:F5:12:EC:29
X509v3 Authority Key Identifier:
keyid:8A:B6:06:CE:A7:9B:5A:BE:81:68:3A:63:37:9B:39:28:9B:2C:AB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1e:1a:b9:b8:76:09:8e:93:ae:4a:65:dd:3b:d1:bd:12:5b:
9a:77:85:1c:0e:7a:42:4e:51:75:4f:9d:4e:87:b2:1f:95:13:
d5:80:93:67:69:7c:1b:32:a8:5c:a1:4e:ae:f2:0c:a3:82:0f:
61:89:61:b8:85:a8:5a:e1:4b:6a:9e:20:ad:52:13:ee:5c:e0:
1f:7c:a7:32:10:ba:ad:17:81:1d:a9:79:b5:45:ab:f6:b6:d9:
9b:75:5e:e1:6a:a4:0f:42:e8:45:f2:f9:31:c4:7a:66:4d:fb:
65:c2:a2:eb:63:2a:38:50:10:d9:cb:81:e4:8f:97:85:03:81:
fb:57:2e:ce:0f:2b:07:88:cb:01:28:1b:ca:2f:56:a8:8d:2a:
ca:5a:e4:89:ca:8d:f9:1b:be:87:5e:23:59:10:8a:0c:d3:46:
f0:81:24:17:82:fa:9e:ae:bb:e8:c0:c1:f2:87:99:6e:1f:04:
42:d6:a1:02:41:72:82:1c:b9:28:d3:15:0b:61:24:b8:2a:9c:
33:80:cf:c8:94:9a:84:81:a4:45:ae:52:5e:55:2e:6f:81:75:
d7:03:3f:47:60:e6:23:67:64:fe:53:1a:03:06:7e:7e:64:ac:
54:7f:07:d8:43:79:3a:f0:38:3c:79:2d:64:30:91:bd:a1:a7:
41:6e:ea:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:23 2025 by rpki-client