Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
File: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft (raw, json)
Hash identifier: xSvuSCTb6EUx/NqCpsf+Zjfe3Q+jfBeu6pI5k2I7frE=
Subject key identifier: 86:BA:45:29:9D:45:23:3A:1D:9D:93:2B:8D:8B:D5:EC:F6:4A:68:90
Authority key identifier: 88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
Certificate issuer: /CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Certificate serial: 0199FCC670D10299E620D7D102204C8A8072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
Manifest number: 0A7C
Signing time: Sun 19 Oct 2025 14:01:27 +0000
Manifest this update: Sun 19 Oct 2025 14:01:27 +0000
Manifest next update: Mon 20 Oct 2025 14:01:27 +0000
Files and hashes: 1: 11w9K2dCR0A6XsEVx-Vg9m7G5bM.roa (hash: hj3QFv3Y2FaAu9Oijuk6KKEMBTD9UQTUqjejPr1gs7c=)
2: MR9ZuC-IL_jZ4767dS-IkZgCrJw.roa (hash: Vi7lFCDHTrpEyk68a6k87cSkUHM4wyPXzIO5RtGzU1U=)
3: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl (hash: O/TwR8VEWHX1cTfayXKNpQf283oAnqo6hhKVXcFPgyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:70:d1:02:99:e6:20:d7:d1:02:20:4c:8a:80:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Validity
Not Before: Oct 19 14:01:27 2025 GMT
Not After : Oct 20 14:01:27 2025 GMT
Subject: CN=86ba45299d45233a1d9d932b8d8bd5ecf64a6890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7d:7e:71:b7:42:86:bb:73:4b:b6:7c:a3:81:
42:7f:9e:73:8c:21:f9:b8:2d:4c:07:b7:ed:09:76:
44:70:95:6a:42:97:4d:4c:64:1e:fb:13:92:1d:9e:
a8:9b:3c:fc:93:2a:78:2a:e5:ea:1a:4d:2f:ae:24:
e9:1b:f0:e2:5e:b1:0e:c6:3e:4a:2d:41:e2:ea:9d:
46:39:39:43:7c:28:01:ba:10:6c:97:b0:ad:02:9d:
e4:d7:f5:f1:f6:6b:79:7e:7d:3f:b1:c6:55:cf:1c:
8c:91:b3:6e:ec:0b:f8:1c:65:de:01:61:c5:a3:0a:
ce:23:b5:15:0d:10:56:f6:e5:98:57:6e:d9:ea:aa:
60:1a:27:08:c1:63:a8:43:11:60:f4:c8:4f:ac:3c:
34:e1:f4:d0:f3:f6:0e:b5:b7:04:90:df:0e:9c:7b:
a8:3d:2d:6d:2a:40:14:a6:85:e6:cf:58:ae:ba:6d:
5d:f7:7f:03:a2:e3:68:9a:c7:49:4e:ab:d7:f0:49:
75:13:31:22:01:23:89:aa:34:97:fb:5d:ab:3d:f9:
66:1f:b9:29:66:a0:7e:98:02:cf:17:c5:ac:a2:bf:
33:1a:cc:16:70:cf:67:1d:10:14:ec:88:8b:15:e5:
1a:c4:17:09:9f:4b:a8:5b:4a:95:9c:fd:cb:4a:eb:
f1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BA:45:29:9D:45:23:3A:1D:9D:93:2B:8D:8B:D5:EC:F6:4A:68:90
X509v3 Authority Key Identifier:
keyid:88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:17:85:bf:e6:f6:22:bf:98:45:ed:a4:ff:27:0a:7b:43:62:
c5:ec:fd:33:28:f6:57:1a:27:f6:2a:1c:d6:74:d6:19:01:34:
35:cf:79:9b:af:23:77:f6:19:c4:94:0b:4a:a3:84:c7:6a:fd:
36:4b:ce:74:cb:22:76:b6:b8:e8:74:31:43:fe:b6:8d:73:3b:
69:b7:e3:4f:0c:cb:fb:39:08:54:80:8a:c6:25:b0:71:da:5e:
95:45:c4:45:d8:cc:46:c6:e2:f2:d3:85:54:e4:fa:8f:40:42:
75:d4:5e:d9:4b:27:1a:58:eb:36:47:86:32:1a:0a:ed:cb:df:
57:90:df:28:5f:75:2e:7c:a3:68:dc:97:fb:99:8e:71:01:05:
21:eb:b7:ce:46:c8:a9:97:46:ea:4f:24:37:2e:4f:d6:78:01:
f3:0d:6c:29:60:d3:30:8a:6d:31:ed:c9:2d:65:ce:ad:96:47:
22:49:f2:05:d8:87:09:37:ed:90:c1:fa:0c:04:cb:ab:b9:f9:
ab:76:af:8a:d6:34:fb:95:05:82:7c:6b:64:f0:bf:d4:78:ec:
19:cf:9f:26:54:fb:97:08:83:35:6d:11:b6:0a:a0:bc:26:27:
4d:ef:52:54:8d:fd:f2:2d:82:c6:22:5d:59:d0:aa:9c:13:d8:
27:8b:b9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:07:24 2025 by rpki-client