Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
File: iiQuCntgz9644OA_-a7DPlq30sg.mft (raw, json)
Hash identifier: lq3zHTrnnwPC+vD348XN1fW93DKqx60mUSBiv3T/p48=
Subject key identifier: 82:60:38:4A:C5:DA:9A:B8:76:99:C4:B6:D3:7B:B9:C6:D7:F5:8F:28
Authority key identifier: 8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
Certificate issuer: /CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Certificate serial: 0199FCC6494668CA6840B8FAFFD7ED528FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
Manifest number: 0AF0
Signing time: Sun 19 Oct 2025 14:01:17 +0000
Manifest this update: Sun 19 Oct 2025 14:01:17 +0000
Manifest next update: Mon 20 Oct 2025 14:01:17 +0000
Files and hashes: 1: iiQuCntgz9644OA_-a7DPlq30sg.crl (hash: J/PEC3A3kdwfHpyQW+fBEhYeI78rcKu/VXZkzqtm4GM=)
2: siJjmLBZP9diFC7BYX9p7SQAfZw.roa (hash: Gsh0pNObMeNVow5ebFzkqw16IE2NyBLNNUC8IDCqBag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:49:46:68:ca:68:40:b8:fa:ff:d7:ed:52:8f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Validity
Not Before: Oct 19 14:01:17 2025 GMT
Not After : Oct 20 14:01:17 2025 GMT
Subject: CN=8260384ac5da9ab87699c4b6d37bb9c6d7f58f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a6:ed:88:d8:37:85:b3:d2:e7:d3:c9:0d:00:
f6:da:68:81:0b:ac:2b:fe:57:1e:e8:d1:3e:11:4c:
ca:a9:2b:82:11:50:80:97:25:9b:21:7b:3e:08:c8:
91:9b:c8:93:1b:ec:ff:e7:eb:24:4c:bf:d0:e0:c6:
8e:40:a3:5c:2d:0f:ee:a2:0f:52:70:a2:70:53:0d:
60:a0:ca:4a:1e:5c:3a:0f:55:aa:72:b1:b1:9e:92:
db:e9:e7:83:e9:34:a4:e7:b5:7e:47:5e:69:70:a6:
f0:44:bd:c4:43:ab:32:5a:c0:3d:63:ed:38:e9:75:
03:0e:79:dc:f4:c2:b6:91:f0:4a:92:08:92:cc:59:
64:ea:03:e1:a9:c2:6a:a7:50:fb:74:a3:a0:0f:41:
18:77:b3:48:4b:18:e4:dd:c9:6c:75:77:e1:6f:a2:
28:3a:6c:eb:ea:ba:7e:8a:40:67:dc:c6:e3:a2:31:
c3:8e:84:4d:14:70:c6:1c:41:ba:62:4a:76:55:bf:
d0:9c:17:b6:ae:21:51:03:0f:95:2c:f5:5a:eb:d0:
99:21:29:0f:2f:21:c5:78:51:65:47:d3:0f:9e:8f:
cd:a2:58:70:7f:bd:33:a6:a7:d1:67:d3:9c:57:f1:
8d:5b:72:88:e3:e2:1d:e6:68:c9:39:d1:01:a8:ef:
04:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:60:38:4A:C5:DA:9A:B8:76:99:C4:B6:D3:7B:B9:C6:D7:F5:8F:28
X509v3 Authority Key Identifier:
keyid:8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ef:c8:49:7c:4c:6a:d7:68:92:5e:51:79:5e:a3:7a:99:cb:
f8:c2:a5:af:1b:ee:65:98:73:60:26:1a:f9:6c:ef:5c:90:c7:
a0:35:e3:dd:8c:ab:27:30:a4:38:f2:a6:e2:fc:c9:33:45:d2:
3c:61:07:ad:5b:66:97:8e:71:bd:84:24:93:ca:23:a8:d2:ee:
4f:8f:4b:e1:8e:d8:76:e8:d2:12:15:90:64:45:16:40:b7:0a:
a5:c7:fc:36:b9:fc:b7:e6:e1:c5:17:47:89:26:e4:af:bc:53:
59:fe:e5:dd:e4:7b:a2:dc:4d:43:37:d8:29:1d:6c:4e:11:d0:
9d:71:0e:da:c6:eb:6b:cf:e2:07:f8:d1:31:fb:bf:b9:04:5a:
29:64:78:32:1a:c9:b4:d0:62:09:f9:22:7e:e7:72:f7:2a:cb:
ae:f2:a1:3b:09:11:9a:10:83:88:f9:79:f6:12:b9:c6:4d:3a:
95:1d:18:ac:da:bc:7e:0b:33:97:37:4b:cf:e7:2b:4d:63:08:
55:d1:09:d5:ae:a2:6e:9b:c9:05:ce:6c:00:3e:ad:09:cc:4f:
e3:11:ff:00:75:33:36:56:a5:d6:05:bb:bd:5a:2d:ae:82:f2:
5f:2f:43:dd:ea:19:21:ff:14:36:69:0d:f9:93:d7:0e:34:0d:
68:96:16:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:30 2025 by rpki-client