Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft
File: iJiSZOUPOa6IiuMnYQm7qALkWAE.mft (raw, json)
Hash identifier: dvTwBnO18cDgaRLnHFlS29GCZVwKa7qg0kDfMkssYIY=
Subject key identifier: FA:AF:B9:C6:A6:92:D6:93:72:60:68:13:A4:3D:77:B8:44:96:27:A0
Authority key identifier: 88:98:92:64:E5:0F:39:AE:88:8A:E3:27:61:09:BB:A8:02:E4:58:01
Certificate issuer: /CN=88989264e50f39ae888ae3276109bba802e45801
Certificate serial: 0199FD34705EFD95B118544DC04DAF766984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJiSZOUPOa6IiuMnYQm7qALkWAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft
Manifest number: 037A
Signing time: Sun 19 Oct 2025 16:01:36 +0000
Manifest this update: Sun 19 Oct 2025 16:01:36 +0000
Manifest next update: Mon 20 Oct 2025 16:01:36 +0000
Files and hashes: 1: e7H9B5-pB3ikZ5-oh15fm0ggCqI.roa (hash: We6P0vvIkU060wWseVebnunaD4trxKPA+u+6dudIhmU=)
2: iJiSZOUPOa6IiuMnYQm7qALkWAE.crl (hash: FLd/63S7p2sxbDk+Xi3ljwlRvdtmtO1R4nX4H3bl9Ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJiSZOUPOa6IiuMnYQm7qALkWAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:70:5e:fd:95:b1:18:54:4d:c0:4d:af:76:69:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88989264e50f39ae888ae3276109bba802e45801
Validity
Not Before: Oct 19 16:01:36 2025 GMT
Not After : Oct 20 16:01:36 2025 GMT
Subject: CN=faafb9c6a692d69372606813a43d77b8449627a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:0e:e3:1c:59:e9:53:ac:31:9f:8c:6b:10:
61:1e:78:14:f8:54:1c:ca:97:24:6a:6b:7e:9c:6f:
a5:ce:dc:03:1e:1e:4f:89:7e:8c:b2:35:7e:39:ab:
d4:88:81:23:ba:f6:a8:bc:90:39:bc:e6:4c:c8:b0:
77:93:1f:fd:88:ca:f5:e5:51:91:7a:1a:11:46:f3:
d9:da:bf:33:e3:c7:6b:72:d1:77:a4:7e:6f:5d:74:
df:a8:3c:0e:23:10:5d:7c:b9:5e:0f:ac:b1:6b:74:
e5:02:0a:d3:39:1f:50:34:6e:fe:7e:1a:ea:e7:3c:
88:0b:4f:f7:5c:7f:f0:59:a7:24:06:10:1f:15:c1:
cc:74:08:23:08:7b:e3:c9:7b:58:a0:05:ac:05:16:
ea:a2:c1:8a:e7:e3:77:78:08:e4:e3:4f:14:39:f1:
4d:7c:68:d5:fc:72:25:9d:a5:ed:31:e8:e0:7f:d9:
d3:4f:f3:f8:6f:d2:51:30:d3:13:04:98:15:69:1a:
4a:f8:6c:88:a6:7d:58:6e:d3:c3:14:ec:a8:b9:4b:
8f:1e:e2:5e:58:62:17:96:c0:15:ab:02:80:de:1f:
e2:55:34:1a:0c:5b:a7:06:f6:af:69:d8:1c:ca:ad:
9e:b0:24:e2:aa:79:fd:48:f1:27:1e:84:dd:08:b6:
cc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AF:B9:C6:A6:92:D6:93:72:60:68:13:A4:3D:77:B8:44:96:27:A0
X509v3 Authority Key Identifier:
keyid:88:98:92:64:E5:0F:39:AE:88:8A:E3:27:61:09:BB:A8:02:E4:58:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJiSZOUPOa6IiuMnYQm7qALkWAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c3:fb:8f:4c:54:6a:c6:37:47:71:e6:6d:8f:28:d7:e4:44:
31:67:e6:04:77:fc:d4:be:ed:a3:f9:bb:f0:2f:28:b5:38:59:
f5:48:12:7b:d1:39:f5:74:0c:22:58:db:86:06:ac:b1:93:6e:
b0:03:65:f6:18:58:db:1d:95:dc:34:f0:a4:b3:44:91:e2:a8:
d5:fc:33:cb:cb:02:01:6f:3b:de:8b:b2:02:fd:0f:3a:ba:df:
60:9b:9e:c0:86:8d:bf:e4:b9:f1:fc:34:cf:2c:de:72:6d:50:
fa:af:9f:4b:ae:4c:42:ed:c8:ab:0d:f4:6a:ad:f0:d7:73:64:
34:95:08:d0:2b:3e:f5:cb:2d:0e:59:e8:85:c7:51:6e:bd:38:
38:ca:32:49:22:91:2b:d4:49:77:68:9a:45:c3:b7:1c:f6:20:
f0:a7:bd:76:8e:e4:40:a9:5e:96:ea:51:7c:7f:79:a1:e2:76:
94:27:b7:9f:6c:ce:04:d8:c2:45:d0:b9:03:f1:aa:dc:55:df:
5f:90:9a:27:b7:c6:8a:e6:4f:76:a6:e6:06:83:8c:02:84:37:
0d:36:65:fe:19:9f:37:90:bc:e4:b4:b9:f9:a5:9a:47:8c:c1:
ed:40:aa:8d:5a:7c:7b:4f:cd:95:9b:8f:70:68:29:87:4b:0a:
5c:87:2b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:21:14 2025 by rpki-client