Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
File: Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft (raw, json)
Hash identifier: IdLH8lGyAaBDjFbHBJzdup3WlOAwwOT7tEe1VdhSlcs=
Subject key identifier: 12:43:D8:C4:6B:F8:F1:43:E4:AB:A0:0E:E4:25:FC:0F:79:EC:25:28
Authority key identifier: 23:3E:38:28:41:1B:AF:AB:00:6E:75:FD:0D:D5:F5:F9:EF:55:EC:25
Certificate issuer: /CN=233e3828411bafab006e75fd0dd5f5f9ef55ec25
Certificate serial: 0199FB45A5B56D50BE562B1BF7CEB2E05630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
Manifest number: 138F
Signing time: Sun 19 Oct 2025 07:01:09 +0000
Manifest this update: Sun 19 Oct 2025 07:01:09 +0000
Manifest next update: Mon 20 Oct 2025 07:01:09 +0000
Files and hashes: 1: Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl (hash: stlnopzgtMIpuaNztKXll2gJD8tg9jkcfWdY5Ekm26M=)
2: NCoehdmUvbF9hjrmMyI6BY_y1Tg.roa (hash: oKUbCP0RxT560oSwid+jhRboIkVkQAnDdP+HNoQNqUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:a5:b5:6d:50:be:56:2b:1b:f7:ce:b2:e0:56:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233e3828411bafab006e75fd0dd5f5f9ef55ec25
Validity
Not Before: Oct 19 07:01:09 2025 GMT
Not After : Oct 20 07:01:09 2025 GMT
Subject: CN=1243d8c46bf8f143e4aba00ee425fc0f79ec2528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:b6:2d:2e:9f:01:2c:4b:63:5e:77:85:8d:
b4:f3:39:48:cc:a1:83:df:c3:64:bf:8a:e1:ca:99:
5c:83:e4:61:90:c6:7e:ca:55:94:99:e1:e6:be:54:
3c:eb:31:cd:93:ae:35:8c:47:6d:6e:05:f8:1a:68:
d8:e5:44:11:af:eb:7e:31:7c:89:b6:f4:4b:68:c4:
c4:82:61:a6:c6:e7:0f:db:78:87:4b:29:18:82:a8:
8b:75:d4:e3:f8:1e:23:7b:5a:13:79:68:f0:5b:b5:
d3:7f:e9:c7:be:28:33:75:4e:08:cc:a6:aa:45:a5:
17:53:ec:59:30:36:e5:33:40:e7:10:00:7d:8e:a3:
5c:6b:ff:45:ab:4c:7c:03:4b:ac:90:fc:ce:90:f6:
37:fd:5d:28:d0:2f:07:a2:8a:c6:6b:28:1a:81:56:
98:d0:5a:56:02:93:4b:70:c7:5e:19:45:c4:31:b6:
ea:c0:bd:22:cd:95:c8:50:0f:08:31:ab:1d:a3:49:
c8:28:7d:6c:a6:cc:9f:be:7b:dd:75:d2:44:f7:40:
0b:20:33:7b:47:d0:40:7d:3f:64:2a:82:6c:fb:d5:
bf:e8:96:75:10:65:dc:6a:a3:51:5a:8d:9c:32:54:
8e:c9:34:b5:08:87:e5:e6:5b:bf:4a:a7:85:a7:c3:
f2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:43:D8:C4:6B:F8:F1:43:E4:AB:A0:0E:E4:25:FC:0F:79:EC:25:28
X509v3 Authority Key Identifier:
keyid:23:3E:38:28:41:1B:AF:AB:00:6E:75:FD:0D:D5:F5:F9:EF:55:EC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:62:08:bd:51:fd:c3:c4:1f:c3:5c:4f:7e:c7:bf:6b:cb:d4:
5f:ab:60:82:0b:04:4b:df:d8:a1:76:51:ce:d1:69:cc:c5:56:
5a:c4:81:d4:09:15:a3:f0:85:50:79:67:5c:53:fd:04:61:48:
ae:c4:b9:2b:11:c6:74:f8:d1:e4:5c:e8:c8:94:43:9d:91:51:
aa:f4:90:fd:7b:ac:c1:22:3c:37:8a:e1:a8:81:54:25:83:61:
13:ef:72:e7:01:de:f4:33:78:cc:3b:eb:8a:78:4a:27:bb:39:
e4:ed:81:48:8b:6f:17:7d:4e:c3:82:af:4d:90:f4:95:78:4f:
d0:13:f6:f3:a6:7b:3f:f6:c2:9e:df:31:3d:7a:76:6d:7a:04:
c3:ef:9a:cd:29:d9:d3:c0:52:df:82:24:f8:a3:16:c5:1e:77:
0f:c5:1f:3b:1f:81:03:f1:2f:53:cb:d7:8c:dc:21:52:0a:09:
51:9d:3c:74:0e:6b:de:5a:83:37:88:9c:e4:e6:66:5e:ba:e2:
f6:fb:7d:16:17:db:99:ac:ef:38:59:17:86:3c:42:6d:61:86:
cd:8f:1d:c4:a3:18:52:52:c1:9c:17:9c:10:57:87:08:28:22:
38:1e:0b:02:ea:06:1e:4d:0c:74:cf:c6:e5:3d:3e:aa:1c:e4:
1c:a3:bd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:52:02 2025 by rpki-client