Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
File: i5LFXos1lQd133Y-dJMNUinJ-gA.mft (raw, json)
Hash identifier: sWiaXCJ+SejC7PQOagzwL2eaEtyE6VTuG5FiXbIty0c=
Subject key identifier: B9:88:4C:A2:B7:BB:6F:70:21:5E:40:C5:CA:81:90:17:B1:7A:A0:1E
Authority key identifier: 8B:92:C5:5E:8B:35:95:07:75:DF:76:3E:74:93:0D:52:29:C9:FA:00
Certificate issuer: /CN=8b92c55e8b35950775df763e74930d5229c9fa00
Certificate serial: 0199FC21B890A28961C77053257E8C16DB88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 11:01:32 +0000
Manifest this update: Sun 19 Oct 2025 11:01:32 +0000
Manifest next update: Mon 20 Oct 2025 11:01:32 +0000
Files and hashes: 1: LNuPziOYyIrKubsBwXhoqEItKOI.roa (hash: HVHsB2c8MGUhz2rUlgm+F2HzTtyYnTiTaoLJeI/5tZw=)
2: i5LFXos1lQd133Y-dJMNUinJ-gA.crl (hash: UlIPjNRTot9WgqP3NYuefFcC5Tj+c5JfbULGX8+/dwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b8:90:a2:89:61:c7:70:53:25:7e:8c:16:db:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b92c55e8b35950775df763e74930d5229c9fa00
Validity
Not Before: Oct 19 11:01:32 2025 GMT
Not After : Oct 20 11:01:32 2025 GMT
Subject: CN=b9884ca2b7bb6f70215e40c5ca819017b17aa01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:04:33:12:62:4b:df:ab:af:cf:99:77:66:14:
61:e1:b8:2f:bc:70:68:52:f2:17:d4:b1:31:61:2d:
87:9f:c5:69:09:32:36:40:db:cf:26:90:b7:f6:9b:
13:27:b0:52:9b:9c:db:52:82:9a:93:21:6d:83:92:
7e:f1:40:87:00:cb:af:3b:b6:b4:87:28:25:ac:fd:
7a:ab:cc:75:db:4e:5c:9a:1f:f5:cd:ec:67:0f:64:
df:ce:6d:ca:9e:bd:62:9d:61:a4:9d:16:4d:c5:86:
36:8a:58:5c:be:02:45:6e:58:e0:08:65:67:be:d9:
1d:73:f5:e1:ab:37:0a:20:0e:7c:60:a9:31:4b:0a:
08:84:64:51:5a:b2:8a:49:96:94:f3:5d:87:52:6c:
b1:d1:b8:06:a7:2f:a3:b4:ae:5b:e4:0e:8f:e3:ce:
6f:b4:6a:df:c1:63:bb:5d:38:db:fd:25:1f:34:7e:
dd:98:ff:d9:c8:e9:71:91:36:6e:4b:8c:31:e0:cd:
c1:3f:77:1f:a1:96:03:f3:b9:09:47:35:66:1b:97:
ec:a7:a6:62:8c:5c:60:cd:b8:79:08:dc:76:76:45:
a7:f7:9a:97:9f:30:4d:f4:76:d8:77:d2:53:5d:c4:
8e:f7:ff:28:2d:9c:08:83:0d:3c:db:3f:50:a5:27:
ea:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:88:4C:A2:B7:BB:6F:70:21:5E:40:C5:CA:81:90:17:B1:7A:A0:1E
X509v3 Authority Key Identifier:
keyid:8B:92:C5:5E:8B:35:95:07:75:DF:76:3E:74:93:0D:52:29:C9:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:fb:28:3a:e0:b6:76:b7:2a:58:49:93:59:86:e5:0b:33:63:
61:d3:c3:91:20:34:ca:f5:ba:90:2a:40:bb:dc:b1:f3:d4:bd:
a7:9e:62:19:17:59:fa:40:7d:e4:0a:b8:5a:4a:0b:87:7d:e1:
e1:c2:2c:de:e9:4e:46:ac:99:bd:71:c1:02:ff:78:c7:84:7c:
6a:6b:e5:3d:c7:8a:dc:d7:a1:fb:58:23:43:f0:c9:1c:9c:6d:
87:2a:6a:50:23:91:fa:37:6f:43:68:2f:2c:bf:b6:e7:3f:77:
8d:aa:55:9a:9b:d2:a7:37:fd:81:e2:3f:ce:1c:0a:22:c9:a4:
80:eb:2c:ab:3d:00:41:aa:e3:74:56:5b:d2:f9:9b:3f:ad:19:
1f:36:a6:60:5a:68:56:2a:95:4e:da:ff:12:60:e3:6e:59:87:
19:94:bf:56:32:fb:fc:18:34:26:37:08:65:68:14:c2:0b:a2:
ee:71:b3:4b:0f:6a:49:e0:48:1b:c3:99:5e:da:fa:e7:5b:6a:
ec:09:41:00:61:c1:8c:99:db:94:0e:a0:59:dd:99:97:3a:b5:
22:cd:f1:f3:17:c0:31:d3:39:5b:ff:ec:a3:0a:e8:e0:ec:cb:
7c:fe:ef:7d:31:5c:7f:d5:d8:91:9c:6a:10:03:67:2b:04:3c:
1b:5b:ae:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:41 2025 by rpki-client