Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft
File: dI6Zox81gkAKtd-nd8YNFqyu3bM.mft (raw, json)
Hash identifier: DmQYHhPB4BdqVK+AE0NkeBmW3qhEp5g6U92YET04ZYw=
Subject key identifier: 9C:B4:1E:7A:0B:71:8A:A6:79:ED:D4:8D:F4:50:FF:FA:A3:90:D0:BC
Authority key identifier: 74:8E:99:A3:1F:35:82:40:0A:B5:DF:A7:77:C6:0D:16:AC:AE:DD:B3
Certificate issuer: /CN=748e99a31f3582400ab5dfa777c60d16acaeddb3
Certificate serial: 0199FDD8F33DC6D25B9B1E12535D0DD8C03B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft
Manifest number: 08B2
Signing time: Sun 19 Oct 2025 19:01:17 +0000
Manifest this update: Sun 19 Oct 2025 19:01:17 +0000
Manifest next update: Mon 20 Oct 2025 19:01:17 +0000
Files and hashes: 1: VWVp9Cs0S9PvQSERU4KTGGzQ8JI.roa (hash: SxWsENl0azYTplSpEg/TKtQu0dvHaU6Cl+WjOSHnKaA=)
2: dI6Zox81gkAKtd-nd8YNFqyu3bM.crl (hash: EPCqe276aX4GFDZhxDE//Mh7jbl+X17IimA52YM94BE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:f3:3d:c6:d2:5b:9b:1e:12:53:5d:0d:d8:c0:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=748e99a31f3582400ab5dfa777c60d16acaeddb3
Validity
Not Before: Oct 19 19:01:17 2025 GMT
Not After : Oct 20 19:01:17 2025 GMT
Subject: CN=9cb41e7a0b718aa679edd48df450fffaa390d0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:46:2f:fa:a7:91:1b:5e:06:9d:37:09:24:16:
11:39:26:db:e0:f3:a2:e9:2a:61:00:64:7d:47:e4:
48:15:0b:16:83:f1:83:30:9b:0f:6c:71:e4:0e:b8:
4d:96:20:75:59:41:70:eb:67:5a:97:02:96:77:d9:
29:be:d7:8b:08:c7:0d:8e:75:64:4b:f2:5a:15:78:
0a:92:a5:9e:af:0b:88:0f:2d:f6:e7:bf:18:e4:3c:
43:1e:14:98:8c:ae:d2:25:ce:6d:49:19:4c:aa:8a:
23:9b:f5:66:23:73:90:2b:86:d9:4d:2a:a8:54:65:
06:79:9f:bd:0c:4c:c0:07:8c:8a:c9:c7:ff:c2:8b:
2c:e2:d8:6d:5a:01:b5:da:6c:2f:b1:40:5a:5c:57:
d7:c8:21:84:02:e2:01:d2:be:1d:d8:57:d6:6c:2f:
3c:ee:34:2e:e2:63:9a:37:7e:da:79:b1:ab:06:63:
88:d4:7b:f3:88:a6:fa:e5:af:9e:a0:00:23:d7:32:
13:b1:37:c0:34:b7:98:52:b3:31:97:16:af:2c:e4:
49:31:96:cb:9b:6c:f8:05:01:91:44:00:92:db:48:
0c:8b:0b:90:60:44:fd:dd:fb:55:26:ac:8d:67:03:
0e:84:f1:b0:e4:71:0c:24:c4:6c:b2:0e:e4:15:a9:
a0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B4:1E:7A:0B:71:8A:A6:79:ED:D4:8D:F4:50:FF:FA:A3:90:D0:BC
X509v3 Authority Key Identifier:
keyid:74:8E:99:A3:1F:35:82:40:0A:B5:DF:A7:77:C6:0D:16:AC:AE:DD:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e9:54:c6:48:fd:08:58:e5:02:65:0b:e4:90:58:2f:d0:e6:
e7:a8:0f:bc:6c:09:bb:fb:a6:bb:f4:20:fc:31:5d:b3:7c:06:
b2:d4:5c:a9:30:92:2e:7a:fa:4c:7b:af:c1:51:74:b3:fe:35:
d1:a7:2d:9d:3a:06:89:8b:01:a3:33:ca:59:5a:4b:ea:82:e2:
f8:0d:e8:4f:bd:8b:7d:df:5e:26:f3:18:3b:b7:e2:70:08:cf:
a9:7d:30:f2:51:b7:00:f0:e4:60:fc:0d:a1:26:94:7c:de:29:
6e:a9:84:4e:79:5b:ce:ab:fc:d1:c7:4c:5b:97:12:e1:4d:d6:
90:12:c9:aa:08:28:9a:58:8e:22:83:15:59:91:89:3b:fd:a6:
61:2b:4b:ca:ac:e5:6f:a8:88:63:39:ea:98:13:da:ee:ff:68:
41:26:ba:05:a7:8b:74:70:00:c2:29:fa:61:7f:cc:c9:95:2c:
22:1b:55:e7:b7:5b:2c:f6:fb:9c:ed:67:26:82:ed:0c:44:bc:
76:6e:0b:9b:fa:61:9f:98:d0:83:ac:59:8a:c4:85:a3:d2:0b:
69:49:07:4e:e9:5e:51:1e:97:3d:2d:37:94:21:40:09:ec:e4:
09:9d:7e:9c:be:66:1b:8f:0b:61:8b:db:0c:04:9f:68:79:d9:
61:72:9a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:11 2025 by rpki-client