Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
File: iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft (raw, json)
Hash identifier: dkuU+XlreOk0yNuu2xj/0EAf1HRnRBuQ5DVgNi5PlPE=
Subject key identifier: 8E:FE:CF:2B:1D:E2:14:EF:F2:C4:F4:0D:B0:1A:23:C2:38:9B:F5:37
Authority key identifier: 88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C
Certificate issuer: /CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c
Certificate serial: 0199FFFE9DBA3904A875670359C18F715BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
Manifest number: 13F3
Signing time: Mon 20 Oct 2025 05:01:40 +0000
Manifest this update: Mon 20 Oct 2025 05:01:40 +0000
Manifest next update: Tue 21 Oct 2025 05:01:40 +0000
Files and hashes: 1: PMwAzTvxWSjXFX28MV2s8k9HrhI.roa (hash: t71gV8OtnRcF1xNLqmy1I40UHYgIb7svkEMIzmfxErA=)
2: iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl (hash: jeuSzuDoOuWE+MWnVlpTf4/J1IfwHnpn5UoXGVvSFjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:9d:ba:39:04:a8:75:67:03:59:c1:8f:71:5b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c
Validity
Not Before: Oct 20 05:01:40 2025 GMT
Not After : Oct 21 05:01:40 2025 GMT
Subject: CN=8efecf2b1de214eff2c4f40db01a23c2389bf537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1d:32:96:d4:c6:fa:d3:b3:c3:68:c6:ba:26:
bb:bb:2b:4d:00:f3:17:fb:ff:4e:12:44:c7:3d:95:
77:b1:42:84:33:1c:c5:e4:d7:08:d7:3d:9b:e6:15:
37:ce:87:cc:58:47:e8:a9:f2:5e:56:92:2d:ef:d0:
14:9c:32:74:fe:6c:cb:cb:2a:a8:2d:81:c6:24:19:
82:8c:c2:2a:de:2b:e5:06:3b:ec:fb:9c:08:b1:bd:
88:bd:d6:da:d5:5c:7b:e5:b1:56:28:b2:74:43:32:
a6:2c:88:23:38:52:8c:1c:91:75:d1:0e:ef:c3:4c:
9e:67:d5:13:ab:dd:59:3c:a8:27:78:1f:62:01:88:
41:76:3f:e6:29:35:fc:b2:96:36:13:3f:aa:09:21:
44:57:c8:f9:46:68:91:d6:ac:b3:0d:49:e7:1c:be:
dc:10:66:bf:3f:29:fc:3a:d9:52:cf:95:ae:59:cf:
8f:62:3e:a2:59:d4:25:7c:28:9d:f9:6f:5c:25:53:
b8:80:7f:ad:32:40:ab:69:f5:fa:cf:f8:fc:20:45:
b2:44:0b:a4:68:65:ed:dc:06:1a:e7:5f:f4:e4:aa:
2a:d8:e8:21:2c:66:ff:44:8c:7a:ce:46:09:8c:cd:
bf:67:0c:4b:a3:67:56:b7:19:3b:97:38:8a:2b:12:
80:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FE:CF:2B:1D:E2:14:EF:F2:C4:F4:0D:B0:1A:23:C2:38:9B:F5:37
X509v3 Authority Key Identifier:
keyid:88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:0f:0e:f0:eb:3b:c4:a4:eb:c2:74:a1:a0:eb:7d:cb:5d:04:
ed:d1:c6:5d:28:d4:1f:88:9f:4d:2e:fb:2b:fe:bf:46:85:b6:
ab:c4:c7:05:16:8c:36:f7:b6:a9:2a:bd:f8:6a:ef:8a:60:20:
5d:d5:1b:2d:11:ba:d3:69:44:27:91:9c:27:12:b7:e4:f6:16:
b3:77:d4:c5:68:46:ba:0b:45:a7:f6:dc:53:1a:cd:3e:54:f0:
1c:e6:12:cc:59:5e:8f:42:58:b1:e7:eb:2c:43:97:2a:a3:4b:
b7:83:9b:74:41:79:90:9e:90:9f:77:24:7b:fb:78:84:be:ea:
7f:e0:d1:e7:16:d9:17:87:fd:e4:bc:f6:d0:36:ab:97:55:a9:
7b:06:29:26:21:38:93:69:ed:2a:97:db:e0:e8:0d:34:59:2a:
a5:21:99:94:cd:50:57:a0:ae:00:1f:ab:05:66:7a:af:ed:2f:
b8:4d:ec:0e:a9:10:3d:48:c4:6d:7c:ab:46:55:e5:94:42:e5:
88:ae:c3:89:e2:17:66:26:df:46:48:96:8a:27:9c:2a:21:6c:
6b:21:04:d1:d9:aa:52:65:ff:d4:53:59:dc:ab:d1:01:b5:b7:
52:fe:5a:85:6f:9a:95:ff:9b:73:f3:08:a7:72:5e:6f:50:70:
bd:b6:63:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:11:50 2025 by rpki-client