Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
File: Iqz2bwAZxVYzG--ezY32UngqY_g.mft (raw, json)
Hash identifier: 9nQduWhtTqk89k9t87KMAqpQTDKI1pAsyDDPYxaYKNc=
Subject key identifier: 37:E3:39:4E:AD:96:A6:0A:0F:4C:7B:15:D5:51:43:D4:9E:99:4D:AD
Authority key identifier: 22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
Certificate issuer: /CN=22acf66f0019c556331bef9ecd8df652782a63f8
Certificate serial: 0199FC213D7E18720027A130A6BDCE55153B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
Manifest number: 163E
Signing time: Sun 19 Oct 2025 11:01:00 +0000
Manifest this update: Sun 19 Oct 2025 11:01:00 +0000
Manifest next update: Mon 20 Oct 2025 11:01:00 +0000
Files and hashes: 1: Iqz2bwAZxVYzG--ezY32UngqY_g.crl (hash: Zjm+jvDPTUHCyOKBs6T+1b89npQfC3Y+wveLIP/RRMQ=)
2: UVEBG1ExZGcscljMEXZmdhHPbmo.roa (hash: OGY1ZCPh4kqtkS+2sWG7TSBefV4b/lqw2cPXHz2iP6A=)
3: l7ZphxTNLdfz3s0c0sr67IQOn_Q.roa (hash: 7qT5TEH8UgfN71QCeNJwaAV6tPLOUHK85hJIN/udCok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:3d:7e:18:72:00:27:a1:30:a6:bd:ce:55:15:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22acf66f0019c556331bef9ecd8df652782a63f8
Validity
Not Before: Oct 19 11:01:00 2025 GMT
Not After : Oct 20 11:01:00 2025 GMT
Subject: CN=37e3394ead96a60a0f4c7b15d55143d49e994dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e9:1a:8d:75:79:a0:e2:0d:b8:79:c9:87:0f:
22:d0:c6:27:78:74:9d:bb:ba:29:bc:9e:05:7f:9b:
95:5f:84:63:e9:b8:62:c1:b1:36:cd:a0:ac:bc:4d:
4b:30:25:75:c5:b3:16:60:ad:d0:2d:b7:53:f6:9d:
90:66:4b:70:09:c0:87:90:90:cc:1e:6a:d3:63:6b:
02:3c:e4:e6:bf:e4:0d:fc:8a:d4:86:58:02:47:0a:
30:1e:5b:54:61:a0:88:5e:8e:d5:ca:cf:c7:49:5c:
46:39:e8:ee:e9:63:c9:45:9e:a5:d6:64:49:81:1e:
88:66:00:6a:d0:9a:19:84:6f:3f:1f:4d:5c:83:bf:
89:b2:c2:41:93:bf:3c:74:60:a1:43:db:af:fe:8f:
e5:a9:56:bf:20:df:9c:c2:fd:68:fc:6b:a2:24:8b:
f1:bf:57:1f:63:32:f7:a2:61:30:b7:34:9d:7f:b9:
d4:77:e5:02:e6:05:da:a4:fb:a2:81:f2:7e:ca:1e:
7b:8c:68:de:c9:d6:74:39:08:08:19:d4:88:3f:8f:
d5:5b:1e:b2:30:a0:d6:c4:a1:b3:6c:6b:6c:7e:d2:
d4:53:34:98:c1:75:eb:ef:17:9c:f1:8f:c2:44:1f:
3d:4e:37:2c:fb:74:ca:15:aa:fa:1e:90:cc:e0:f6:
ce:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E3:39:4E:AD:96:A6:0A:0F:4C:7B:15:D5:51:43:D4:9E:99:4D:AD
X509v3 Authority Key Identifier:
keyid:22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:63:da:5e:fc:e3:c0:e2:0f:13:c5:fc:c8:3d:46:f1:68:36:
67:cf:93:d4:d6:ae:64:37:d3:ca:ad:ed:24:6d:66:ef:d0:97:
38:cc:ed:7c:10:29:3d:f4:7d:07:1d:b6:84:90:db:7c:88:a8:
be:1b:75:a2:33:66:6f:c0:70:63:e8:50:d4:9a:12:b0:73:2d:
1e:52:79:43:b4:88:de:0f:49:62:9a:2f:d5:c4:63:92:e7:e6:
65:49:f6:0f:ab:57:77:7d:b6:15:0d:0d:25:6a:d4:1e:b9:7e:
31:5b:15:7e:57:b6:a1:b2:34:58:54:23:b9:de:e7:9d:63:58:
f3:1c:c8:21:21:90:cd:40:95:60:5c:27:e3:d1:82:2d:48:80:
cb:54:0b:f1:f2:d5:3e:1b:3f:8c:d8:60:17:56:b9:34:32:73:
b9:40:cb:27:97:da:57:29:fd:5a:53:ee:78:3e:10:2f:09:53:
55:a6:33:bf:09:86:9c:88:d8:f1:c6:69:cc:56:7d:a3:75:27:
e5:f3:4a:d3:9d:9b:83:30:92:d7:1f:11:39:6e:de:43:12:bb:
2d:b9:d4:71:85:af:c1:95:72:2d:f0:b7:3c:c4:ab:c6:58:1b:
24:51:0b:d4:ef:19:c1:e3:68:d3:e0:45:3e:46:5b:45:b5:77:
ac:38:83:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:07 2025 by rpki-client