Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
File: ia6mmISBzqS5W2UTHMSYhPPtDj8.mft (raw, json)
Hash identifier: hHKv9Ovusvyr+cDm7cLQMT84WWYe4yLC/zG/Vi9hyRc=
Subject key identifier: A4:5E:97:C5:26:6B:A5:93:0A:4B:25:59:90:53:A9:C6:04:96:5E:2D
Authority key identifier: 89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F
Certificate issuer: /CN=89aea6988481cea4b95b65131cc49884f3ed0e3f
Certificate serial: 019A01EBC3BD96BDD792E9FF06CDC6C1C4B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 14:00:19 +0000
Manifest this update: Mon 20 Oct 2025 14:00:19 +0000
Manifest next update: Tue 21 Oct 2025 14:00:19 +0000
Files and hashes: 1: Fl6pOlPLU-YJzCc-HkB3wwedcd0.roa (hash: jlDQ+VkQoTEiq8ZQ7EeJUmtKUn70x3pUuA4q7simdPM=)
2: ia6mmISBzqS5W2UTHMSYhPPtDj8.crl (hash: 8/6XyUC/TPgBPCV3ldbfAmausrgCMZwdFXUliVnvh0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:eb:c3:bd:96:bd:d7:92:e9:ff:06:cd:c6:c1:c4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aea6988481cea4b95b65131cc49884f3ed0e3f
Validity
Not Before: Oct 20 14:00:19 2025 GMT
Not After : Oct 21 14:00:19 2025 GMT
Subject: CN=a45e97c5266ba5930a4b25599053a9c604965e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:68:c5:38:71:64:82:16:15:b6:de:89:32:a3:
c2:8d:4f:a0:76:73:22:5d:cf:13:4a:fe:92:c8:cb:
f0:86:3f:d9:a2:79:30:39:e2:06:09:6b:61:52:85:
5a:cb:ab:77:60:33:21:0e:95:45:25:5e:69:4f:b4:
ca:4d:ae:cf:fd:58:ba:9e:35:5c:bd:25:29:a4:01:
b6:9f:09:45:ae:9a:60:f4:c3:0c:cc:8d:c3:96:0f:
7d:b9:d8:aa:40:a4:5c:f1:b8:bb:ff:cc:86:63:c7:
63:f3:d8:fb:ed:c7:6d:19:45:d6:3d:bf:a9:fe:d1:
b6:78:c5:df:71:76:18:87:a3:2d:5c:e9:fb:d2:e7:
51:49:5b:45:cc:62:09:20:e4:63:13:3b:46:31:16:
49:b1:65:bf:cb:09:02:f2:c3:56:07:54:e8:5e:8e:
b2:db:0c:9b:d7:45:9c:63:52:c9:e5:39:83:2c:fe:
08:86:08:30:88:d1:47:fe:d9:9f:2d:76:a9:ce:b1:
08:96:e6:11:a9:fe:a4:e3:d0:b6:7b:08:fb:11:4c:
9d:ba:e0:53:3f:37:54:35:04:df:b8:b7:66:75:86:
fd:55:a9:e6:55:43:89:9b:69:4c:29:f4:cb:e1:ac:
7f:4c:9d:2a:5a:f9:3a:24:72:cf:0c:56:fe:31:5a:
55:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5E:97:C5:26:6B:A5:93:0A:4B:25:59:90:53:A9:C6:04:96:5E:2D
X509v3 Authority Key Identifier:
keyid:89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:27:6a:ec:79:7f:21:51:01:1e:ea:f8:b4:8d:36:f5:a1:ba:
dd:7c:14:69:43:e4:b1:03:81:80:9d:7f:fc:04:a6:9b:ea:91:
f3:46:d5:40:2a:9f:54:7b:05:88:a5:dd:a6:e7:35:aa:bd:e2:
f2:16:aa:a4:ac:f7:4d:b1:ba:8d:7e:ef:a2:b2:9e:b6:a0:80:
dc:35:7d:c5:76:da:cd:6a:56:7e:27:89:03:b9:35:2f:91:b2:
41:a5:42:35:60:a4:fd:9c:cb:bc:0a:df:d4:7d:54:51:35:ac:
b4:cc:72:43:fe:6b:78:77:09:e8:34:a5:04:3d:f0:6d:64:be:
7f:8d:d4:5b:58:97:f4:bb:32:30:05:03:6e:a4:81:25:10:67:
7a:57:98:a6:9f:21:9d:e4:52:fa:e0:86:f0:84:12:02:29:20:
08:96:fb:9e:66:06:53:7c:4f:e6:b4:7f:b9:69:d7:88:a3:9d:
78:e2:78:c5:47:e6:e5:f0:63:ce:64:79:1a:0f:88:33:3c:aa:
86:8b:db:81:fc:b5:57:5e:07:17:b6:fc:fb:45:6c:de:28:4a:
d8:70:de:d9:f0:83:52:f6:08:9c:2f:f0:c7:5c:e2:b6:d8:53:
9c:b9:5f:b6:1b:ae:36:4e:fb:9c:43:fe:a9:2c:60:15:55:e0:
ca:57:e6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:19:59 2025 by rpki-client