
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
File: iQH2c8aw_4g16gL67bpbSc8UIk4.mft (raw, json)
Hash identifier: vxy+yPC+9UvS7ZtI8UNi3HeIQh0sXE31zLPgBaL85oo=
Subject key identifier: 9E:A0:71:F4:99:83:9E:74:4E:92:D1:C0:55:FC:C3:52:49:EA:E4:1B
Authority key identifier: 89:01:F6:73:C6:B0:FF:88:35:EA:02:FA:ED:BA:5B:49:CF:14:22:4E
Certificate issuer: /CN=8901f673c6b0ff8835ea02faedba5b49cf14224e
Certificate serial: 0199FB0EE4094A4677440B3721DA3E2C42F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
Manifest number: 0D80
Signing time: Sun 19 Oct 2025 06:01:20 +0000
Manifest this update: Sun 19 Oct 2025 06:01:20 +0000
Manifest next update: Mon 20 Oct 2025 06:01:20 +0000
Files and hashes: 1: LwODeFlTbNm331VlQw3cZjyD1Sg.roa (hash: 6xKklCkI+s1DbuNSCG9T6RXJeAeTq1fLNQfBDhNCOAU=)
2: iQH2c8aw_4g16gL67bpbSc8UIk4.crl (hash: iQ4BECHWmRyPAwuU5Zegw7aGShOrP0fOG5Myb71k8uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:e4:09:4a:46:77:44:0b:37:21:da:3e:2c:42:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8901f673c6b0ff8835ea02faedba5b49cf14224e
Validity
Not Before: Oct 19 06:01:20 2025 GMT
Not After : Oct 20 06:01:20 2025 GMT
Subject: CN=9ea071f499839e744e92d1c055fcc35249eae41b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cc:03:72:58:b3:ca:54:75:27:44:dd:e3:35:
e6:84:fe:82:55:7e:be:8f:51:50:8c:52:82:a2:f4:
11:9d:54:5d:d7:cb:be:50:74:49:40:e7:d7:9a:f9:
ec:dd:a2:7a:e6:a0:9c:d3:f6:81:3b:23:5d:33:52:
41:e3:b8:03:59:38:8d:ad:92:9d:39:6e:28:cd:99:
93:73:da:5f:f4:72:0f:06:4c:7f:dc:da:ee:cc:50:
b7:51:13:12:a0:49:97:d3:a7:e4:b5:38:f8:76:60:
53:c2:3d:a5:ba:1a:f3:b7:42:91:78:42:d4:08:23:
d6:94:3d:10:fd:f4:89:b5:d1:30:0f:04:12:cb:35:
e0:f5:48:b1:39:cb:c1:59:cf:51:17:a9:69:42:cb:
c9:41:13:f1:70:7f:98:c7:fa:30:a7:ff:83:b7:ab:
d3:6a:8b:52:19:32:75:b2:13:0c:81:c6:ed:9e:59:
52:f6:39:b2:68:cc:43:41:c0:88:3e:d2:4f:33:18:
6f:16:38:00:b9:56:e7:1b:93:f9:17:25:f3:1f:c3:
c8:6c:93:67:d4:a2:c5:a3:bb:b3:54:d5:8d:77:4e:
53:11:3e:dc:1b:56:38:ce:f8:ea:ef:d9:dc:27:8a:
e4:23:32:ff:de:0a:02:9e:aa:a8:75:d7:b7:64:9b:
b5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A0:71:F4:99:83:9E:74:4E:92:D1:C0:55:FC:C3:52:49:EA:E4:1B
X509v3 Authority Key Identifier:
keyid:89:01:F6:73:C6:B0:FF:88:35:EA:02:FA:ED:BA:5B:49:CF:14:22:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:bb:7a:28:70:36:aa:32:66:02:cc:04:ef:de:98:63:6d:a3:
79:e0:cc:97:2d:67:9d:15:02:2f:bb:eb:ad:34:96:76:3d:d3:
cc:c5:61:77:55:fe:fb:c7:6c:a8:40:50:cd:24:cf:fd:e2:64:
cf:9f:43:95:6b:f0:a5:f4:e7:f2:a7:a0:66:7e:7b:e0:f8:63:
43:33:53:eb:8d:8f:91:14:7f:3c:e9:27:03:4d:6a:4c:a9:1b:
1d:89:46:39:c2:89:a8:48:5a:05:cb:21:cf:ea:4f:07:18:58:
8e:7e:7a:3c:ee:36:32:47:5d:9d:ef:38:c3:59:ac:e1:a5:5d:
31:ab:24:b7:10:ee:6e:50:93:15:2d:e2:70:f7:c1:09:ed:b5:
3e:f5:ee:62:b9:a7:6a:61:0d:eb:77:1a:90:c3:3a:f1:7d:33:
9b:2f:25:f4:86:ff:1c:b8:c7:4e:07:b1:18:66:8e:3e:b0:29:
e9:c0:84:d3:7b:1e:80:05:a8:85:28:e0:a6:58:94:27:86:7f:
d2:fc:76:0c:f4:7b:4d:77:32:f5:15:1a:4b:d8:70:ff:8b:45:
a2:30:4d:dc:ee:43:a5:f5:d0:a1:b8:25:df:c0:72:d5:70:d8:
0c:3d:62:2d:b1:42:8f:b2:60:e4:aa:ed:ec:5d:c4:41:e5:18:
fb:f7:51:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:33 2025 by rpki-client