Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
File: i29IgAONVauY18tm38-ol7e6Eeg.mft (raw, json)
Hash identifier: 0U9pU413w7AHQgmJjguzbH7T0B90+yskpuoQWpOXn5A=
Subject key identifier: 22:45:6A:70:70:E5:89:CE:19:55:A6:40:1F:08:C9:BE:E5:C1:19:D3
Authority key identifier: 8B:6F:48:80:03:8D:55:AB:98:D7:CB:66:DF:CF:A8:97:B7:BA:11:E8
Certificate issuer: /CN=8b6f4880038d55ab98d7cb66dfcfa897b7ba11e8
Certificate serial: 0199FD3460B9E6B5748DA162D89FA504DD5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
Manifest number: 055B
Signing time: Sun 19 Oct 2025 16:01:32 +0000
Manifest this update: Sun 19 Oct 2025 16:01:32 +0000
Manifest next update: Mon 20 Oct 2025 16:01:32 +0000
Files and hashes: 1: i29IgAONVauY18tm38-ol7e6Eeg.crl (hash: vmOtxrQX4/htDX4L6xL9UPefarZdcZ1/r6iy6JQI+Bs=)
2: uJrupPlV0TuAxsM7Yezc0lvFtvQ.roa (hash: zjqfplB2jtSi/5nKhDu31J1mMkLaG/4MZV1txaGrR6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:60:b9:e6:b5:74:8d:a1:62:d8:9f:a5:04:dd:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f4880038d55ab98d7cb66dfcfa897b7ba11e8
Validity
Not Before: Oct 19 16:01:32 2025 GMT
Not After : Oct 20 16:01:32 2025 GMT
Subject: CN=22456a7070e589ce1955a6401f08c9bee5c119d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0d:d5:96:a1:9e:d2:a9:19:2f:e2:34:39:9d:
50:0a:d9:bf:5a:a0:df:de:d4:e9:c5:93:4c:5a:ff:
4e:d7:f3:df:5f:5d:e4:f6:50:aa:a9:9f:d3:f4:08:
b1:1d:a8:00:2f:ad:cc:95:55:f2:f7:70:8c:06:62:
29:d4:3b:dd:13:2e:fc:4b:ef:53:9f:01:a8:24:25:
cf:26:8f:bc:cb:2e:5a:7a:fe:da:fe:43:c7:1d:30:
5b:dc:58:b3:33:02:9b:e8:a7:73:39:77:b5:f3:f3:
ab:53:96:61:d8:8e:5d:43:28:47:99:df:04:26:01:
e7:cd:af:5f:2a:9d:89:a3:43:c1:a6:ed:e2:d8:af:
d8:95:04:85:33:dd:6d:29:2b:ac:d3:e7:ed:9b:e8:
66:c5:a5:ec:38:fe:f0:23:13:c2:56:9a:40:34:72:
0e:23:81:7e:9c:4a:82:32:da:09:b7:02:cc:3a:5e:
0e:04:97:0a:ea:89:d0:bf:56:e1:59:cb:24:71:93:
ab:79:69:ce:e6:9c:17:59:af:75:1a:4a:a5:c6:6b:
88:e6:b0:3c:73:33:82:aa:6a:67:09:40:4b:90:d8:
42:16:55:df:47:5a:a6:9b:1d:1f:c3:c5:7c:1d:3b:
33:24:67:ea:ac:b3:5e:a3:1b:91:8c:4b:79:2e:b8:
40:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:45:6A:70:70:E5:89:CE:19:55:A6:40:1F:08:C9:BE:E5:C1:19:D3
X509v3 Authority Key Identifier:
keyid:8B:6F:48:80:03:8D:55:AB:98:D7:CB:66:DF:CF:A8:97:B7:BA:11:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:32:7c:9f:84:68:ef:49:91:2d:17:85:1b:87:9f:b1:ea:70:
86:c8:85:68:d4:01:6b:6a:a6:84:77:46:17:71:28:8f:34:c1:
c8:39:9e:ac:51:ce:74:58:c9:6d:4e:3c:ad:cb:ce:a7:cf:9d:
86:07:3b:10:52:04:11:78:ae:df:51:63:3c:c9:b0:b7:7a:fa:
03:91:51:5e:55:67:3b:c3:64:bb:7d:43:1c:f9:b6:98:20:0f:
42:7f:c5:4e:87:22:ea:3d:4e:0f:61:d1:6c:71:4b:82:e4:0c:
72:b2:7c:e8:0b:38:6d:49:6e:cd:fb:99:a9:01:06:53:75:8f:
6e:8d:83:ed:01:8a:31:77:c1:40:14:ae:63:9c:ba:3b:ed:24:
82:65:0f:9d:97:c9:ec:60:92:a6:12:b7:e0:29:d3:b9:bf:18:
0c:da:d8:82:dd:3a:ca:15:32:2d:f8:f1:d1:02:21:e2:c1:6c:
f0:69:d5:b5:c6:22:b1:33:02:d2:aa:7e:a6:62:c8:9e:3b:47:
bd:80:ae:9e:af:45:e7:c9:6d:d1:48:ec:5a:ff:6d:9c:13:5c:
ae:50:c4:09:0b:43:75:a4:a6:0f:94:59:c3:d1:64:38:0f:f9:
73:d2:b5:60:57:2f:bd:df:6f:3c:a6:09:1c:e2:3b:14:a7:6e:
e1:61:11:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:41 2025 by rpki-client