Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
File: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft (raw, json)
Hash identifier: iDvmrokkXO7WSQsUTWP6QhDzU/gGrYi1IsF3+1lHZh0=
Subject key identifier: 89:89:E7:A6:E8:15:5E:58:EC:BC:57:0B:3B:66:2F:8D:63:76:D1:72
Authority key identifier: 23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
Certificate issuer: /CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Certificate serial: 0199FCFD1F0AB1479B12B5307D571F5BCBA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
Manifest number: 0C5E
Signing time: Sun 19 Oct 2025 15:01:10 +0000
Manifest this update: Sun 19 Oct 2025 15:01:10 +0000
Manifest next update: Mon 20 Oct 2025 15:01:10 +0000
Files and hashes: 1: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl (hash: uubzZKY2SD5KcpN0KRFIWKkJoi87Cm2odh5CNharmjU=)
2: LCSxsz-FQ4GzwZw8Odnzg4_wz4s.roa (hash: cOtRnPje7E9WAoJFvY2RM5FM1p4R+PS2ZqyaTPw4hic=)
3: WWsWrGhHJPhxsXXJtUhA3vzECwE.roa (hash: LLPjYgAmQluoQLBe3s0wxjIyXNJ82uAq8ra1WEAoLDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:1f:0a:b1:47:9b:12:b5:30:7d:57:1f:5b:cb:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Validity
Not Before: Oct 19 15:01:10 2025 GMT
Not After : Oct 20 15:01:10 2025 GMT
Subject: CN=8989e7a6e8155e58ecbc570b3b662f8d6376d172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b1:7d:9b:4f:e5:a0:b7:9b:a1:cc:b6:30:ad:
84:24:c9:7b:0a:94:c9:6f:66:ff:e1:fe:8b:cf:41:
fb:26:52:56:bf:57:f0:e3:96:53:1f:ff:29:f3:a3:
5f:dc:05:58:05:d2:97:db:cb:9d:9b:1e:8a:4b:56:
db:54:64:e4:fd:3c:9d:0d:80:30:9e:76:20:0a:57:
28:9a:71:5c:a5:20:44:e0:fa:18:de:21:f7:e8:ce:
f3:ca:b6:7a:5e:ce:e9:f9:ec:bd:0d:73:18:d3:8c:
1a:39:87:4a:0c:b0:5e:b3:25:92:7a:72:a0:51:53:
57:81:1a:b1:4d:24:11:10:36:f1:bd:f0:c0:50:5a:
ea:c2:27:1f:ff:e8:08:7d:3b:8f:22:b2:d1:ac:99:
8f:0e:45:3c:82:dd:f1:b3:b6:f6:16:17:a6:7b:82:
90:b3:ab:79:3d:be:5d:06:0d:eb:2e:28:8b:3b:f1:
93:fc:2c:76:89:20:0e:45:5a:70:92:8d:ef:75:66:
2c:1e:44:e9:36:6a:ba:5c:50:da:a6:ab:c8:8f:0d:
a4:77:59:49:15:47:60:96:bd:7a:96:0e:ab:07:35:
c3:9d:e9:11:eb:68:e7:3c:d8:62:71:98:8a:64:98:
80:74:14:84:e5:87:a3:eb:04:6b:3e:73:91:4e:4f:
00:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:89:E7:A6:E8:15:5E:58:EC:BC:57:0B:3B:66:2F:8D:63:76:D1:72
X509v3 Authority Key Identifier:
keyid:23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:96:ec:c3:86:6a:c3:6a:e5:9d:fc:6b:0f:9c:24:42:eb:e2:
7f:15:fc:85:dc:51:3e:0c:6e:b5:54:07:f7:0c:5e:29:be:ff:
98:bd:ed:ba:33:1e:cf:1c:6f:06:1b:c9:04:4a:46:fe:33:44:
5a:e0:7e:b1:7d:43:71:2b:e2:3b:2c:88:f7:8c:ef:ea:9f:b3:
96:05:a6:b9:9b:c2:e9:4d:a5:76:02:75:07:ab:1c:b7:be:f5:
79:b4:0d:c6:af:08:8c:7a:2c:a3:b4:8f:2c:fa:4b:15:2e:44:
06:87:bd:48:21:57:5c:cf:b7:d5:31:eb:40:59:fd:83:13:39:
6f:17:0d:99:a4:67:bb:07:45:bc:1e:7e:d4:06:c1:87:e0:bd:
dd:e7:6f:2a:19:6e:41:a3:b5:01:2c:73:7f:9d:e0:7d:86:d9:
cf:ed:45:fe:7f:fd:67:eb:4f:16:87:9b:44:8e:13:d5:cc:c4:
9d:17:59:ce:ca:8a:b5:9e:3a:9f:33:b5:84:eb:a1:52:74:d5:
2e:8d:f5:83:ee:99:20:17:c3:0d:58:fd:f1:48:34:4e:a2:93:
40:1f:88:4e:d6:22:ce:35:1a:22:42:4f:eb:f7:2e:76:7d:0f:
95:98:42:e5:89:06:5b:af:7a:42:e5:19:26:60:5f:80:18:52:
f8:27:21:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:41:55 2025 by rpki-client