Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
File: iOpSVfiNS5VxicFC-KxWgcUMaKY.mft (raw, json)
Hash identifier: h996vrJSXi9u/sJI9DrrpP3/k/PL9CkfCEO5v1T/1qQ=
Subject key identifier: F9:3C:1E:05:82:E7:CB:04:7B:9D:F0:19:54:7B:C3:6C:AE:7F:EC:74
Authority key identifier: 88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6
Certificate issuer: /CN=88ea5255f88d4b957189c142f8ac5681c50c68a6
Certificate serial: 0199FC21B5BDA85D1C3D5B881B110626618F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
Manifest number: 0967
Signing time: Sun 19 Oct 2025 11:01:31 +0000
Manifest this update: Sun 19 Oct 2025 11:01:31 +0000
Manifest next update: Mon 20 Oct 2025 11:01:31 +0000
Files and hashes: 1: AhbInrBuBxUhLDDb6t4H_dnP0SQ.roa (hash: LnUMs+GFvbcxwBQi1CgG4kL2ZNmGdakKt42fC58+8no=)
2: iOpSVfiNS5VxicFC-KxWgcUMaKY.crl (hash: T2OLZVuT/H9/9BuSA9xi2Mco2HoZdJ/PCrIG8bqbleY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b5:bd:a8:5d:1c:3d:5b:88:1b:11:06:26:61:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ea5255f88d4b957189c142f8ac5681c50c68a6
Validity
Not Before: Oct 19 11:01:31 2025 GMT
Not After : Oct 20 11:01:31 2025 GMT
Subject: CN=f93c1e0582e7cb047b9df019547bc36cae7fec74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:89:77:a3:48:fa:c0:7a:32:69:f7:ba:cd:1f:
01:f2:7f:f1:1f:0f:14:8a:28:4c:bc:20:84:db:ba:
84:b0:e2:38:f6:23:29:ec:0e:c8:5e:89:c0:52:24:
ae:6f:29:55:31:5b:27:d7:71:d4:13:92:c5:31:f6:
bb:69:5b:42:b5:f0:1b:5c:7c:e1:b7:53:86:a3:d3:
19:a9:d4:82:15:4c:9c:fb:a6:d6:a4:fe:55:db:1a:
bf:35:dc:b2:bc:70:3e:70:b9:37:20:0e:f0:03:4c:
f4:2e:3b:52:8f:c0:95:59:42:55:6a:88:e1:fc:f8:
7e:7b:76:87:3f:9e:57:58:9d:8f:9e:ca:71:24:0b:
35:45:21:47:85:5c:cd:03:20:ed:81:c1:c3:fb:36:
90:b6:bc:ee:18:1c:55:45:40:3b:e3:a3:05:44:b2:
40:36:b9:d4:de:25:b5:c5:a7:0d:62:40:c5:1c:48:
59:77:03:dd:4a:32:9d:c0:b8:27:88:54:27:b7:fd:
77:39:01:82:99:8c:9c:ff:b2:a4:9d:97:f7:e9:aa:
49:67:f4:d4:07:68:28:6d:06:c5:85:0f:90:0f:42:
18:15:a4:b7:c7:b0:39:0b:38:80:16:65:27:67:77:
f2:b4:87:9a:77:59:40:a6:9e:8e:31:e8:25:b4:11:
a0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3C:1E:05:82:E7:CB:04:7B:9D:F0:19:54:7B:C3:6C:AE:7F:EC:74
X509v3 Authority Key Identifier:
keyid:88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ae:86:ac:36:73:8c:bc:4f:09:b9:03:3b:7f:bb:1c:96:45:
17:73:ed:58:2d:b9:74:5a:39:41:4b:05:4d:7f:fd:71:7e:17:
88:82:1c:91:da:99:25:b7:1e:81:3c:8c:df:b2:46:b0:2e:c5:
61:92:6d:04:79:27:68:c5:43:05:fd:76:20:6b:05:e3:34:15:
73:6d:ad:c8:f9:80:e9:92:0c:ba:a7:13:08:39:bd:44:a4:f1:
3e:7d:fc:6c:8e:33:5e:ea:ec:77:cc:12:f9:eb:d5:82:c9:5e:
db:b8:d9:4c:18:7e:5e:b1:e1:67:29:16:2b:5b:e8:91:9b:c6:
f9:60:ac:47:79:2c:a6:e1:24:e5:5d:b7:c0:dd:95:23:6b:f2:
09:4f:28:f5:7b:3a:78:b2:4a:13:f4:10:36:b2:90:9e:5f:db:
12:33:0c:7c:74:11:14:b1:df:d7:74:e5:2d:85:31:e6:a7:78:
04:df:16:e7:b1:15:00:85:3f:c1:10:b8:62:47:d4:bb:7c:16:
27:a0:c3:db:53:97:88:da:ac:a3:95:65:45:76:e3:cc:c4:7b:
d5:d4:ae:b4:c9:b6:3b:59:9e:06:92:f5:8d:92:ea:66:e5:54:
ef:ae:3c:3d:b8:ed:1c:4b:9b:6f:9a:91:69:d8:57:ff:25:36:
10:91:9f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:42 2025 by rpki-client