Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft
File: IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft (raw, json)
Hash identifier: fHkRDARDoEQJmWhkdpcKY8jGM7foac01/x29UcHlj8g=
Subject key identifier: 93:F1:C2:8D:FC:20:D5:20:38:DD:F6:80:3E:8A:3E:B3:05:92:88:B6
Authority key identifier: 21:81:C5:B3:CB:7E:EB:1E:49:58:21:55:A1:91:8E:C6:12:F9:5A:C6
Certificate issuer: /CN=2181c5b3cb7eeb1e49582155a1918ec612f95ac6
Certificate serial: 0199FB4605FC97C2CD0FB22D24B7049BF72F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYHFs8t-6x5JWCFVoZGOxhL5WsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft
Manifest number: 6E
Signing time: Sun 19 Oct 2025 07:01:34 +0000
Manifest this update: Sun 19 Oct 2025 07:01:34 +0000
Manifest next update: Mon 20 Oct 2025 07:01:34 +0000
Files and hashes: 1: IYHFs8t-6x5JWCFVoZGOxhL5WsY.crl (hash: TShcDIhN78p2ZoDQ7eycolhwjqa0EptWWdxu5WhbrM4=)
2: Tq4R9IdG22N3vnBq8Qo-UFuJbpQ.roa (hash: af3sYHdNbdlvdprU3qi9kp0Nrk2mSxcsF15s0Xd+YhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYHFs8t-6x5JWCFVoZGOxhL5WsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:05:fc:97:c2:cd:0f:b2:2d:24:b7:04:9b:f7:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2181c5b3cb7eeb1e49582155a1918ec612f95ac6
Validity
Not Before: Oct 19 07:01:34 2025 GMT
Not After : Oct 20 07:01:34 2025 GMT
Subject: CN=93f1c28dfc20d52038ddf6803e8a3eb3059288b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5d:52:1e:80:05:fe:09:46:85:2b:1e:20:12:
6e:c1:93:29:5d:f4:c9:dd:62:21:e5:81:8d:a0:11:
6a:1b:31:6d:97:3e:d0:13:09:60:62:25:9a:6a:d7:
b1:56:86:bf:99:cb:9b:c6:9b:21:7e:63:14:fc:63:
d3:c8:24:9b:c6:10:ca:ac:58:9b:e3:1a:ca:9a:10:
9b:37:84:54:5b:b3:10:3d:e0:58:5d:9b:9f:13:d8:
4e:32:94:6e:4a:6d:4e:ff:d0:a7:07:08:64:54:d2:
d9:39:aa:8c:70:46:6f:a1:91:30:fc:90:c1:9f:64:
26:ac:d8:c8:e6:c0:a4:3e:bf:42:b0:78:3d:7f:5e:
21:56:4b:f3:3b:d1:1a:74:e7:05:1a:99:58:9a:05:
ea:14:8a:e1:78:37:7c:f0:9d:ac:cc:c6:e2:c7:90:
87:db:8d:30:b0:26:7b:ce:a0:18:12:73:a4:02:83:
d4:4e:37:09:8d:19:ac:7f:d0:e0:35:b8:fa:7d:0a:
99:3c:09:f7:d4:29:1a:d7:4a:96:69:7d:db:2f:93:
a9:da:b7:c0:88:a3:39:08:fc:a8:0f:ae:cf:aa:37:
1c:1f:7c:13:bc:ac:50:3d:29:2a:a2:d1:f8:56:00:
fe:f4:e9:33:b8:8c:f9:12:72:83:31:82:e0:7c:58:
ce:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F1:C2:8D:FC:20:D5:20:38:DD:F6:80:3E:8A:3E:B3:05:92:88:B6
X509v3 Authority Key Identifier:
keyid:21:81:C5:B3:CB:7E:EB:1E:49:58:21:55:A1:91:8E:C6:12:F9:5A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYHFs8t-6x5JWCFVoZGOxhL5WsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:79:d5:48:e4:cc:13:1c:50:cb:b8:97:f7:d0:72:23:19:c7:
22:8c:90:c5:c9:2d:33:ba:82:c1:4c:c5:b5:15:55:4a:3b:66:
5e:87:7b:26:23:b2:b8:79:83:2d:6e:74:ff:27:af:dd:92:f6:
15:07:d0:bb:64:06:2f:47:3c:3f:d8:19:90:79:7c:4a:d8:9b:
ac:cc:e0:dc:54:55:f6:09:4c:e9:a3:85:03:7d:8f:52:01:a0:
29:98:b5:44:1d:2f:20:7e:c7:f5:e2:96:24:83:1c:bf:54:3b:
53:35:74:6d:f9:3c:ae:e8:53:68:ee:28:d5:b6:24:6b:c2:1c:
a3:41:6a:d3:2c:71:6c:24:89:e6:d8:7c:a3:64:a8:3e:21:24:
e9:0b:dd:e1:b2:6f:0f:97:1b:e4:e8:45:5e:5f:dd:59:81:3f:
6c:88:e0:98:94:00:e1:92:78:01:65:61:17:f7:7e:ad:50:ee:
81:49:02:bf:8d:d9:f0:2e:54:a1:48:33:15:ad:bc:8e:25:ce:
ff:52:6a:85:04:36:da:68:a7:6c:bd:a5:36:e6:ac:01:a2:b2:
63:8c:32:50:d7:69:d7:53:75:a9:98:bd:e6:4c:66:67:09:86:
93:e7:9d:c7:96:59:cd:a9:59:b2:26:81:d2:d5:31:06:bc:e2:
2d:a1:74:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:03:59 2025 by rpki-client