Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
File: iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft (raw, json)
Hash identifier: 41HdOLlFxW9tXkQwstbfa5KsVEZIxDyGQVVecDR7iTA=
Subject key identifier: 12:87:77:0C:57:55:15:20:3F:37:22:4D:95:5C:A1:61:1E:16:56:AE
Authority key identifier: 89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67
Certificate issuer: /CN=896d5866c35093352e7b9e0762c591e08e50f967
Certificate serial: 0199FC2183439E094040C5F092ABA8EA2A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:18 +0000
Manifest this update: Sun 19 Oct 2025 11:01:18 +0000
Manifest next update: Mon 20 Oct 2025 11:01:18 +0000
Files and hashes: 1: f3yhbMEZs7I1gQ_x-WS9JokM5lk.roa (hash: xqftVmU39BBrdEog4IYR5U/f0pT7cwZITaktIflO1FQ=)
2: iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl (hash: z9eAmuEWXrDtXxkioyWFQ1voSyMu5nCLMYHu233QT7Y=)
3: t3t-pfr4z9GKajIg-Z7_EPV6sNk.roa (hash: uoY/pW5jXoKIZBICE3itvMsyp7LXbbd5XR575s2v/qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:83:43:9e:09:40:40:c5:f0:92:ab:a8:ea:2a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896d5866c35093352e7b9e0762c591e08e50f967
Validity
Not Before: Oct 19 11:01:18 2025 GMT
Not After : Oct 20 11:01:18 2025 GMT
Subject: CN=1287770c575515203f37224d955ca1611e1656ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:89:ca:31:14:c4:df:57:cc:a0:fd:02:97:57:
64:fd:d8:2d:26:c6:20:40:bd:e5:be:cd:85:f0:4c:
57:dd:f6:0c:96:3e:1d:3b:fa:64:a1:65:cf:cf:f7:
e4:6e:75:16:3e:e3:80:47:75:a1:c1:8d:d5:66:d8:
f8:0a:e1:81:32:f1:92:ee:0c:ab:65:8e:7e:2b:9e:
8a:a6:10:a4:dc:9d:f6:da:65:40:15:d8:db:17:a6:
f0:47:f0:23:4e:15:24:b9:52:ec:47:fb:ed:8c:71:
21:db:24:a2:f5:78:e6:92:47:11:29:e4:c8:55:43:
66:5b:de:dd:0e:c7:5a:c4:97:97:e7:81:95:d5:ae:
cc:d1:94:03:7e:fb:0a:ad:c1:fd:d6:27:58:80:35:
ae:f8:14:b6:cc:38:ec:75:2b:1e:d1:98:b6:ca:88:
74:b9:c8:64:34:69:80:6c:73:bb:81:ae:d0:8c:e9:
de:e0:28:f9:3d:6a:b7:da:b5:e0:fd:ff:93:d7:6e:
a2:8a:4e:ce:20:1e:b7:86:87:91:15:4d:f7:bb:b9:
a6:92:a4:2c:9b:d3:d7:ea:23:bd:4d:00:4f:cf:5e:
6b:9b:12:d6:41:90:fd:15:0c:df:d0:2d:e0:b6:72:
c8:f8:09:51:fa:70:a1:39:67:e7:a5:21:1b:eb:ca:
87:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:87:77:0C:57:55:15:20:3F:37:22:4D:95:5C:A1:61:1E:16:56:AE
X509v3 Authority Key Identifier:
keyid:89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:38:f0:0a:de:c0:54:30:37:8c:d8:9f:1d:b1:8c:f1:16:86:
51:6c:49:64:f6:f4:01:9a:3c:28:d5:c9:e5:25:6d:d5:5b:dc:
70:0f:57:9a:67:39:d2:b5:fe:e4:c2:d2:cb:20:80:7c:ee:0e:
5b:7c:75:f1:f2:e0:db:4d:1e:e3:64:51:cf:8d:5a:c1:ce:91:
96:ac:8a:c4:88:bd:16:fd:a1:f0:71:26:88:fb:7f:6e:40:57:
01:9e:39:29:a1:97:27:8a:1a:bb:ad:b2:62:32:0f:9f:ff:8d:
9e:c3:c5:1f:6c:4c:33:88:f1:8e:38:2e:d9:41:ea:d2:04:e6:
18:8b:24:a2:18:f7:32:be:35:40:a0:88:35:87:97:0d:db:a8:
87:3f:87:b6:b4:f8:df:2b:b1:82:2c:01:fe:92:52:30:1a:87:
48:5e:00:5b:59:18:92:11:fd:da:e0:42:47:08:d5:df:49:a8:
03:16:aa:9d:89:15:63:89:e7:06:3c:df:14:1c:a9:36:46:99:
78:e1:41:45:71:c8:4e:18:78:22:c6:37:55:1b:53:14:e5:d7:
91:1c:c2:2b:f9:02:4a:2d:a3:a5:bd:9d:de:6d:37:a7:b1:ed:
78:b2:aa:ef:86:78:5c:40:1b:42:dc:2c:5a:2d:22:75:5e:fb:
ff:de:19:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:37 2025 by rpki-client