Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft
File: ioNVXKoizpubFoNQOhTjzdg24Bs.mft (raw, json)
Hash identifier: ZDHedmSl7ofDUrhktKTLpqkfjkK5/RxZZvYilbySG8M=
Subject key identifier: F8:62:D7:57:BA:13:81:BE:B9:A3:07:8F:73:48:67:FB:1D:35:F6:FF
Authority key identifier: 8A:83:55:5C:AA:22:CE:9B:9B:16:83:50:3A:14:E3:CD:D8:36:E0:1B
Certificate issuer: /CN=8a83555caa22ce9b9b1683503a14e3cdd836e01b
Certificate serial: 0199FC58350B2DBC4762EB4CC493153FC6A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft
Manifest number: 0F50
Signing time: Sun 19 Oct 2025 12:01:03 +0000
Manifest this update: Sun 19 Oct 2025 12:01:03 +0000
Manifest next update: Mon 20 Oct 2025 12:01:03 +0000
Files and hashes: 1: 8ltVewMht9tkkoh6ikhHpmbvP28.roa (hash: qZH42qz06gavyuSaiRbHo+yLoZK1W5iI0G1jpEdB8DA=)
2: ioNVXKoizpubFoNQOhTjzdg24Bs.crl (hash: HVD8nmzhhQ6PlDbSHCkA/KVLaEWppVwsrhmagcUVTW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:35:0b:2d:bc:47:62:eb:4c:c4:93:15:3f:c6:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a83555caa22ce9b9b1683503a14e3cdd836e01b
Validity
Not Before: Oct 19 12:01:03 2025 GMT
Not After : Oct 20 12:01:03 2025 GMT
Subject: CN=f862d757ba1381beb9a3078f734867fb1d35f6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ea:2c:4e:cb:8a:93:81:59:f5:05:25:18:39:
88:b0:c7:9f:ca:c6:a7:c8:da:be:ff:77:34:ee:1c:
3d:25:2f:7f:7a:f0:b5:0f:f6:d6:08:de:c6:84:7a:
85:d2:b4:ae:a0:88:bb:2e:b4:fb:49:f8:f6:6a:27:
92:97:f7:a0:a5:63:87:a9:df:40:2c:6a:31:2f:9c:
d8:f7:2a:3c:58:53:3a:72:a4:cc:5b:61:95:f4:62:
e1:d8:1e:88:99:ae:2f:55:69:07:16:22:f9:03:9b:
ba:f8:14:5c:15:1c:c7:d3:b9:3a:a5:d1:ef:40:01:
72:11:9e:cf:a1:04:ba:bc:cf:03:73:8c:a7:fa:4d:
7d:2b:f6:cd:fa:1e:c2:ad:b9:0c:49:93:a5:4a:8d:
ad:07:98:11:47:a9:7c:50:a7:df:fc:36:2e:8f:ac:
43:54:18:c1:87:51:ed:cd:48:87:91:65:f4:f7:70:
b0:05:a2:0d:eb:d4:24:a1:0e:ab:91:61:63:b5:25:
3b:19:38:4e:99:7a:71:9b:eb:05:d1:ac:f9:62:10:
22:8c:84:53:a4:41:e8:1e:72:fc:86:be:d6:e3:d1:
90:39:68:1e:69:05:9a:d4:ab:7e:ae:3c:07:4c:31:
81:0b:61:2e:a6:e0:5e:0d:2c:54:74:4b:86:c2:8b:
c5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:62:D7:57:BA:13:81:BE:B9:A3:07:8F:73:48:67:FB:1D:35:F6:FF
X509v3 Authority Key Identifier:
keyid:8A:83:55:5C:AA:22:CE:9B:9B:16:83:50:3A:14:E3:CD:D8:36:E0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:4e:dd:5a:f4:fb:2d:da:87:56:af:ac:20:40:0f:94:76:04:
f0:ba:db:22:1e:c0:96:52:a7:b7:8b:54:c4:20:cc:49:3f:85:
3f:f5:ed:54:70:ef:46:64:18:75:ae:51:f3:a8:97:50:23:3e:
a8:42:60:e3:a4:47:7e:dc:da:2c:33:37:36:08:94:56:de:5e:
53:8a:fd:4f:c6:74:56:8b:ff:a1:cc:9d:b8:b9:bd:39:39:6f:
8b:8b:08:05:86:6f:e7:c6:4b:5b:46:91:23:d0:80:00:03:fd:
51:65:dc:34:af:1f:71:2f:82:94:ff:6d:77:94:93:a1:11:e3:
14:e5:af:77:ba:ea:4b:c5:95:e9:72:2c:e7:bd:cb:1b:cf:dd:
d4:6a:b8:c5:fd:e8:d9:8a:f5:33:3f:2b:8d:33:38:85:42:1a:
ac:b5:1d:f9:f0:48:3e:07:87:27:f4:6e:7a:b2:2e:c0:ea:09:
cd:a0:e4:84:4c:06:f4:3a:f2:dc:77:85:ea:9d:73:78:31:3d:
ef:4a:c2:3c:fe:5d:49:4e:d9:32:f1:8c:21:5a:54:cf:17:ab:
c6:b5:91:48:cd:21:67:8d:4e:0c:84:85:ac:1a:5f:b5:9e:2e:
1b:fe:2a:e3:87:34:aa:1d:e3:87:bd:6e:a4:93:47:d2:17:d6:
67:c3:1a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:44 2025 by rpki-client