Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
File: iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft (raw, json)
Hash identifier: 9qUuGHeZ/2ZVjHUJYzhHFMQgGjCvH1K/BW+alzvoDdY=
Subject key identifier: 4A:66:55:CB:F8:D4:E4:95:8C:48:06:BB:16:A9:58:70:93:C3:83:9C
Authority key identifier: 89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
Certificate issuer: /CN=8916aaa5d252fd90145fedac683762d6e2074155
Certificate serial: 019A4E86DC0C951BF1B3C0AE8C707A2F5E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 11:00:52 +0000
Manifest this update: Tue 04 Nov 2025 11:00:52 +0000
Manifest next update: Wed 05 Nov 2025 11:00:52 +0000
Files and hashes: 1: EJO9ljE1s0Q84FuNpxDY98O5gUs.roa (hash: MidhZCUKLP8FjCtsor/fdefcfGoS6d1va0RAyvBU+x4=)
2: iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl (hash: CrvZHuQBp0OQWn2LJnAYd1Y5glsnhtbG7EGkhu5Cvok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:dc:0c:95:1b:f1:b3:c0:ae:8c:70:7a:2f:5e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8916aaa5d252fd90145fedac683762d6e2074155
Validity
Not Before: Nov 4 11:00:52 2025 GMT
Not After : Nov 5 11:00:52 2025 GMT
Subject: CN=4a6655cbf8d4e4958c4806bb16a9587093c3839c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d4:8d:5d:2e:b6:95:96:a3:80:e2:ab:ed:4a:
70:67:8b:71:27:75:b5:f1:af:b7:34:22:2d:cb:e6:
cd:99:cd:75:39:08:47:22:c4:82:77:6e:8a:69:77:
49:fc:92:45:a6:ed:5d:6c:f1:0b:ce:d5:50:48:ed:
0b:f4:2e:dc:65:8a:1d:50:6b:bc:2e:74:f5:61:52:
e8:78:f9:e0:13:2b:9a:bb:ca:4f:8f:22:11:09:0d:
97:9e:00:3b:48:f4:3c:2c:17:3e:86:04:ed:06:de:
cf:1d:5f:7f:f9:b4:3a:79:20:31:5b:b5:1f:67:7d:
f9:c3:ac:11:10:cc:c9:df:21:3f:22:df:d1:31:15:
f7:54:c2:8e:b8:a3:54:f6:d5:bd:04:6f:7e:fa:2e:
dc:d6:2c:0b:6b:6c:3c:af:bb:04:e6:d6:27:24:90:
3f:74:b7:cf:11:6b:19:73:97:c8:44:75:ea:1e:02:
08:25:0d:e6:30:16:a8:4d:9d:06:f3:36:9e:64:d6:
11:3d:f6:c7:a8:6d:39:8a:33:54:68:8c:98:97:96:
b6:8f:2f:7f:93:13:cb:17:8e:d5:5e:06:e8:d1:40:
1b:dc:b0:8d:0c:4d:bc:c7:dd:ee:78:8a:2a:35:19:
1b:69:a8:d4:31:73:cf:25:5e:56:d5:a4:0b:88:59:
cc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:66:55:CB:F8:D4:E4:95:8C:48:06:BB:16:A9:58:70:93:C3:83:9C
X509v3 Authority Key Identifier:
keyid:89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:27:a4:0d:9f:dd:8b:df:f4:2c:ef:54:ab:a4:3e:04:fc:02:
85:5a:0c:fb:55:42:07:27:fb:66:c9:bf:72:d0:09:f1:3d:f9:
bc:5a:d4:dd:b6:37:33:49:54:3b:c3:7c:90:a5:94:f5:75:4b:
aa:af:9a:64:04:07:f6:55:d4:fe:59:a6:68:54:61:fa:52:79:
aa:da:4c:a6:d6:b2:07:cf:58:91:40:a8:6f:1e:24:e4:9c:da:
9d:ee:e0:86:73:df:fc:c3:ab:c8:30:5b:be:f2:00:08:18:52:
a4:45:f9:dc:11:00:85:b5:a3:d2:9d:ef:87:dc:26:6d:c4:9d:
1a:88:ea:fc:6d:f6:63:c0:5b:99:bf:b1:9e:02:88:5e:13:29:
4c:61:1a:32:2c:b0:e0:84:a8:45:9b:bd:ab:b7:dc:1c:f1:a7:
45:d0:dc:f5:5c:e6:bd:a2:84:19:02:c0:28:64:83:48:5a:6a:
7f:af:bd:83:b9:ad:16:79:cf:66:3c:42:64:32:d7:1f:eb:fd:
2d:79:67:ab:7b:d4:77:9a:6a:eb:de:67:12:b3:04:77:84:76:
3c:fc:ad:9c:c6:8f:86:19:8d:4e:ea:b3:c4:63:06:0f:76:65:
10:94:72:76:ad:94:71:d9:33:f3:46:cc:3f:f8:7a:be:d9:8f:
a4:6a:38:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:33 2025 by rpki-client