Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
File: IqXYQFPisMMTrx47pRAkZqX3lng.mft (raw, json)
Hash identifier: Jf1lDpD+PaXa/tGuaOY7U9UndYtaEBrea5Jf1nid4jA=
Subject key identifier: 31:69:C1:03:A7:D8:1E:80:0E:31:2A:4C:2C:18:CD:73:BC:B4:7B:7B
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial: 0199FB45A564A75AC8BE2C5186938682FB2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
Manifest number: 0A12
Signing time: Sun 19 Oct 2025 07:01:09 +0000
Manifest this update: Sun 19 Oct 2025 07:01:09 +0000
Manifest next update: Mon 20 Oct 2025 07:01:09 +0000
Files and hashes: 1: Dc1SxW96IAQ3f2snIBmens7GV0U.roa (hash: A68NloNFUVZ/1yLMaTnJ5sUcnw8LpIIqTLsAe9oPGuQ=)
2: Hclo7mgAV-Jk6Qp5sVlZMDADheQ.roa (hash: cVUhTfbeGPClCYhj8aCdhEzcQl8l864NJzclgxFTC+Y=)
3: IqXYQFPisMMTrx47pRAkZqX3lng.crl (hash: pSEP8yrqkNWAuJStfyYIPmISoOkto1MkaRC7I5ERm34=)
4: Ku4DjWMj_wrBqXvp8QwLCV7LvMQ.roa (hash: MiHDGBqhLXLE6nmzkue9evydNoK6FMJwJm/pNx6ZNnQ=)
5: _bqJOppJMYlhCqHfIAJ6Sh83vHA.roa (hash: 1f0aFmNhmLx4lKQjnS1bd4RzjmzmwwV3y7zrSykmheM=)
6: ajmq5QdlQvXrCBRMjUs67yP9AmI.roa (hash: mQ5XjE5gzuzrTdkByBU3/meXRrw3VOANPbjnntSYJ74=)
7: cwh3r4eWlWrhqTwyia3Y6IkQ-I4.roa (hash: EAtSuVfxmrmE7PUep+zevWjbxh//ARj59/51XZyWbTI=)
8: iIyJKjInlinbrFoxMvyP7cHrL18.roa (hash: jppb7YCDugjMDFMLhWTY9NbjBHwSDw8mYabJJeuiwkQ=)
9: xmgEeMB7WvkvTgZR5WIp3Cku-OQ.roa (hash: DB/674zCoFtnashikqEwhqolbIZIshtp2JBUcqe8xB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:a5:64:a7:5a:c8:be:2c:51:86:93:86:82:fb:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Validity
Not Before: Oct 19 07:01:09 2025 GMT
Not After : Oct 20 07:01:09 2025 GMT
Subject: CN=3169c103a7d81e800e312a4c2c18cd73bcb47b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:59:da:81:18:20:4c:37:d5:3d:5a:9e:09:e6:
5d:0d:da:a0:3d:5d:e1:f8:c0:13:a1:eb:48:ec:3a:
0e:bb:9e:a6:70:d3:4c:c5:7d:fb:78:75:59:c6:a3:
0c:8f:b8:23:7d:fe:5b:c6:27:c1:5c:2d:a6:69:22:
e2:9b:85:ee:eb:d9:87:d8:5e:19:8c:c7:ae:4d:bd:
09:95:86:6f:21:d0:67:fd:d4:c5:a8:d7:ec:b2:92:
b5:68:f4:5e:c3:3d:65:a6:18:6e:65:7e:a9:ff:f6:
a9:41:0f:d5:95:5b:02:33:73:eb:43:26:bb:45:35:
1b:5b:d7:a3:69:b6:af:da:0a:1a:3a:8f:45:e5:1c:
c0:d2:0a:44:8a:6a:45:49:cf:17:e1:8f:e1:36:a4:
9c:00:c7:ae:28:2a:2e:15:43:be:64:f2:8b:89:37:
05:8c:2c:c2:c9:34:96:79:b2:5c:88:41:63:96:06:
65:f1:a8:33:be:ab:68:80:a1:bc:9f:63:32:12:5a:
b6:5c:59:8d:a4:7c:3f:3b:a8:a3:f3:73:bd:ce:c8:
7a:e8:0d:3b:3f:ba:f2:c5:a1:dd:7e:66:c6:67:ef:
47:8a:80:82:c2:b1:2a:aa:09:da:d6:35:05:23:1a:
b1:db:69:cd:07:63:0e:63:9e:d5:86:21:b3:3e:b7:
98:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:69:C1:03:A7:D8:1E:80:0E:31:2A:4C:2C:18:CD:73:BC:B4:7B:7B
X509v3 Authority Key Identifier:
keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:7f:b3:08:0e:15:74:a8:a5:16:0d:10:f9:44:12:e6:be:95:
8b:78:dd:bd:7d:12:16:5a:19:95:86:09:b2:0b:46:0e:85:8f:
85:88:aa:41:33:24:41:4e:b6:f8:72:f8:dd:68:54:73:32:18:
1d:f8:13:92:e1:c1:f9:61:9c:96:f6:45:cc:86:74:57:ed:1b:
8b:11:13:8b:ee:84:38:bf:fd:86:7b:95:74:4e:10:5a:10:5d:
2c:5a:1c:45:85:74:6e:ec:d8:6d:ef:38:a4:17:18:b2:69:d2:
9e:bf:f9:8b:06:e0:d0:ba:5c:49:b6:e9:0e:af:68:32:3f:0d:
83:f8:ad:5d:3e:22:80:1b:7d:1d:02:8b:a0:c1:80:bb:54:1d:
bf:8e:69:54:de:46:10:99:7f:fa:ae:91:f6:10:5f:55:e9:ce:
89:7d:65:05:e9:b8:16:88:6f:83:4a:86:8f:b5:b4:63:7c:dd:
50:eb:27:53:f5:69:cf:99:8b:eb:57:c6:b1:f4:17:a2:0a:ea:
77:5a:cb:40:ba:f4:d0:66:0a:7e:d1:ee:19:d0:a8:df:1c:49:
e2:fd:90:57:e2:0a:4a:d5:03:c0:ec:44:ba:07:94:14:f6:37:
02:4e:62:0a:9a:2a:50:00:8a:87:45:7b:4e:10:ea:d5:d5:63:
76:5c:31:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:22 2025 by rpki-client