Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
File: iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft (raw, json)
Hash identifier: o08J1t3lfJDUdcljiF8U0gcXBid8+11WlxrRjA7GKJg=
Subject key identifier: 13:74:8C:07:FF:E3:78:C6:B6:1B:3F:00:E7:7A:07:21:C7:39:48:C4
Authority key identifier: 8B:03:DC:A7:63:19:90:31:52:F2:46:E0:5C:06:9F:D1:A1:DB:5C:59
Certificate issuer: /CN=8b03dca76319903152f246e05c069fd1a1db5c59
Certificate serial: 0199FE7E1F49536D8FCF3D4039DA9D56E6D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
Manifest number: 07EE
Signing time: Sun 19 Oct 2025 22:01:42 +0000
Manifest this update: Sun 19 Oct 2025 22:01:42 +0000
Manifest next update: Mon 20 Oct 2025 22:01:42 +0000
Files and hashes: 1: 7M8D3IxMWjzAgVSAuyFX2gLMxAs.roa (hash: MD3KP2LMgWTsm6lhsmms5WwgB8xDS3rVO74n7Xs0hs0=)
2: iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl (hash: 9yBW4Yh3+xYrMiB374P/luaF1F+shAb65RaTt7et9Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:1f:49:53:6d:8f:cf:3d:40:39:da:9d:56:e6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b03dca76319903152f246e05c069fd1a1db5c59
Validity
Not Before: Oct 19 22:01:42 2025 GMT
Not After : Oct 20 22:01:42 2025 GMT
Subject: CN=13748c07ffe378c6b61b3f00e77a0721c73948c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:17:b1:34:d0:79:44:22:e0:7b:e1:80:54:5a:
97:53:c0:30:16:44:6b:c9:c8:d0:0d:f0:a2:08:8f:
aa:04:15:05:65:7a:7d:89:66:8c:db:98:ef:10:b5:
a4:59:15:4b:61:5f:69:f4:21:78:af:6b:8e:9e:12:
b3:cc:6a:c3:c2:9a:c3:99:30:3b:f1:4d:09:0e:6a:
1d:4b:0e:38:f5:34:bd:bc:50:e7:98:5a:01:45:20:
0e:76:4c:3f:49:76:b9:82:d1:2c:49:70:ca:54:ce:
22:cf:cd:c4:32:4f:83:31:3f:f1:da:95:ab:29:6e:
61:14:ae:a2:e0:cd:ce:8b:fd:8d:1d:fe:21:7e:f1:
cd:03:92:45:be:d6:7a:a2:cb:29:f6:a1:62:a5:4e:
63:cf:0b:71:b2:ac:10:88:3c:d6:a0:9c:75:89:ff:
83:d9:f0:00:4b:61:10:5a:eb:96:d2:73:29:00:f9:
00:38:56:72:20:7d:22:0e:ce:78:cf:ce:a7:b7:e0:
47:a8:ab:12:d0:7c:fc:2f:02:3f:99:2c:5e:13:62:
3f:12:11:04:a0:5c:48:03:0d:40:7b:7c:cd:29:78:
67:4e:cd:c6:29:d3:f3:14:80:ef:48:0e:88:90:e7:
71:6e:39:d6:b3:98:55:ad:11:05:bc:43:d5:a8:ac:
a7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:74:8C:07:FF:E3:78:C6:B6:1B:3F:00:E7:7A:07:21:C7:39:48:C4
X509v3 Authority Key Identifier:
keyid:8B:03:DC:A7:63:19:90:31:52:F2:46:E0:5C:06:9F:D1:A1:DB:5C:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2c:c7:cd:8e:81:38:fb:bf:f7:d6:da:08:46:58:24:91:9c:
8a:a3:75:f0:6c:da:f8:03:84:85:63:ff:d2:85:ac:cf:93:9d:
28:dd:ac:c2:dc:65:40:f4:f0:50:03:4e:61:7d:7d:f7:90:a1:
71:7c:f0:30:f7:40:75:95:3f:a0:a3:8c:dc:c1:a6:f2:2d:ec:
a6:a0:49:43:7e:fb:4f:68:ff:22:2a:ab:bf:e5:19:d8:31:ac:
67:e6:82:bd:2e:68:87:19:f6:68:ee:dc:b5:ed:d5:3a:de:09:
80:93:cb:4f:e4:f3:79:79:c0:93:56:36:6c:27:9a:9d:e6:ba:
e3:9d:82:84:14:08:b9:ff:66:11:80:2b:7f:b2:aa:52:09:f4:
62:d4:ea:18:d8:7a:c5:9a:5b:37:18:c6:b2:ec:9f:64:5b:ec:
08:8c:54:32:02:e2:28:fd:b1:86:0c:cd:86:9f:fe:6a:af:e1:
06:b6:65:9d:c9:34:1b:f7:b9:e5:17:04:32:0c:ad:37:68:90:
b0:8b:2b:30:45:fc:ab:df:ed:51:b0:e5:e6:9f:70:4f:c5:d3:
0e:ea:90:52:f5:f3:aa:45:1d:fd:9e:95:8f:2c:18:2e:7c:60:
27:49:1b:59:19:c5:6c:cb:d4:f3:63:07:35:56:50:90:18:86:
2e:8f:bb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:54:34 2025 by rpki-client