Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
File: IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft (raw, json)
Hash identifier: gbp9Fai8HRzXh3Fhf5bpnsFttExm8V5FJm7kCRO1AI0=
Subject key identifier: 14:08:D9:8D:C2:EB:74:30:FA:6C:17:98:BF:21:DA:14:B6:05:5E:84
Authority key identifier: 21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88
Certificate issuer: /CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
Certificate serial: 0199FDDA438346772BFA2FBBD30E6AA910A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
Manifest number: 052C
Signing time: Sun 19 Oct 2025 19:02:43 +0000
Manifest this update: Sun 19 Oct 2025 19:02:43 +0000
Manifest next update: Mon 20 Oct 2025 19:02:43 +0000
Files and hashes: 1: IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl (hash: nAMOCZXPIwSILffeSUgobf46hVN8/RsucTAwyakdMmo=)
2: _zFGaif6ktuPRSZOOpcbI9GW7qg.roa (hash: 9+34ErT+7YS3/gqguf6KZOausCEOcTWh/OEHzcUf2rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:43:83:46:77:2b:fa:2f:bb:d3:0e:6a:a9:10:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
Validity
Not Before: Oct 19 19:02:43 2025 GMT
Not After : Oct 20 19:02:43 2025 GMT
Subject: CN=1408d98dc2eb7430fa6c1798bf21da14b6055e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:05:99:7b:95:ec:3c:32:f3:6a:e1:86:e8:
c5:e1:35:f1:24:99:77:04:d1:cb:d4:52:93:b4:ed:
bd:01:1c:8e:f5:af:91:58:58:44:6e:ae:36:ee:1b:
1f:37:4d:6d:50:df:b0:9c:40:11:48:7e:4d:51:cd:
d8:17:bb:88:53:44:fb:89:88:bb:7a:da:e1:4a:0d:
c6:ce:b4:e7:1f:b9:c8:29:4b:44:9b:dd:a2:3e:89:
92:29:8b:20:a4:20:88:81:32:6b:60:fe:43:3d:66:
d0:6c:1e:9d:a7:e1:3b:93:e1:ec:27:a4:02:c7:fc:
be:2b:7b:6f:72:9c:d1:99:0c:00:b3:bc:54:a4:a8:
9a:96:18:55:cf:ae:9d:7e:00:81:96:10:85:57:0e:
8c:ac:56:2b:76:2e:e1:eb:b5:51:dc:c8:1c:73:74:
c0:bf:1c:68:67:7d:83:ce:2b:03:4b:f5:ee:b1:90:
05:d5:5f:2d:3d:5f:93:b5:e9:c6:41:89:2a:09:1d:
a2:7e:26:fe:a8:96:92:d0:42:4b:46:a4:bf:ef:88:
e7:23:f8:b7:54:27:11:a3:de:3a:c0:91:ae:bb:b9:
14:8a:db:b7:5d:6e:a1:16:69:2b:99:10:db:25:4f:
b5:23:07:b2:ec:c5:69:52:64:3e:05:5a:66:f3:38:
ea:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:08:D9:8D:C2:EB:74:30:FA:6C:17:98:BF:21:DA:14:B6:05:5E:84
X509v3 Authority Key Identifier:
keyid:21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:fd:33:ca:98:4e:67:9b:1f:0d:bc:0b:8b:92:b0:ed:e7:58:
fe:4c:03:9f:52:06:ee:40:20:5b:19:77:28:07:0b:c2:aa:63:
23:bb:c5:97:0b:07:64:de:2a:a0:d5:22:aa:e3:81:28:56:21:
90:ed:62:74:90:35:bf:03:6a:20:38:fb:4e:a0:32:d6:d5:7e:
3f:dd:cc:3b:6d:38:8a:53:9e:75:bd:28:c4:76:bc:89:63:ac:
ac:2b:87:0c:05:1f:34:e5:1b:0b:90:bc:f2:d0:63:71:b0:01:
96:7b:2b:de:dd:eb:6a:4f:55:2f:af:a3:13:32:31:81:db:0c:
c1:5b:05:f8:6b:e0:ee:b9:4c:a2:e9:bc:7a:23:41:6f:9b:20:
81:6f:98:94:c7:5e:64:67:01:05:df:93:de:3b:08:43:ac:1b:
94:1f:8c:e6:41:86:f4:f9:b9:6c:d5:42:bf:6e:9b:e3:05:bc:
20:8e:f4:fd:8c:e5:e9:f4:e2:d1:d9:fe:8c:ef:64:bf:e9:a2:
59:80:da:51:02:96:b6:b5:f1:76:8d:4b:b2:76:3b:e9:c0:98:
36:10:95:82:4c:e1:e3:39:53:fa:3f:b4:06:d1:77:05:d1:94:
0b:91:cd:15:53:30:a9:f3:d7:86:7a:cc:37:c8:40:0d:d3:0d:
18:1f:33:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:26:28 2025 by rpki-client