Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
File: ip_Szd9LRN55pb_Iyhmlb1UutOg.mft (raw, json)
Hash identifier: kdA5w5lh6V5aWu9nOHyyH255RYP+NxLsz0wSLcYBOYg=
Subject key identifier: 33:34:61:77:EC:4A:22:4A:58:66:19:AF:78:1C:74:51:FB:91:FF:F8
Authority key identifier: 8A:9F:D2:CD:DF:4B:44:DE:79:A5:BF:C8:CA:19:A5:6F:55:2E:B4:E8
Certificate issuer: /CN=8a9fd2cddf4b44de79a5bfc8ca19a56f552eb4e8
Certificate serial: 019A5308273D5109772267E455C5C488DA57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
Manifest number: 03AA
Signing time: Wed 05 Nov 2025 08:00:34 +0000
Manifest this update: Wed 05 Nov 2025 08:00:34 +0000
Manifest next update: Thu 06 Nov 2025 08:00:34 +0000
Files and hashes: 1: EjHQSd2Nf6QUdVOjBa5Ak5N3IUs.roa (hash: 9F79YDrAyrZr3jGxVCvlmn8UnHKM3CvRjuESh5xZJzI=)
2: ip_Szd9LRN55pb_Iyhmlb1UutOg.crl (hash: 9hrIzIRPsZuZqS6BQvF3TzpzQ7py2bZwFpkgnx+GAq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:27:3d:51:09:77:22:67:e4:55:c5:c4:88:da:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9fd2cddf4b44de79a5bfc8ca19a56f552eb4e8
Validity
Not Before: Nov 5 08:00:34 2025 GMT
Not After : Nov 6 08:00:34 2025 GMT
Subject: CN=33346177ec4a224a586619af781c7451fb91fff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:80:0f:e5:9d:81:2c:c3:00:8c:f2:7c:3f:ea:
f6:a5:0f:c0:66:e8:65:d1:02:25:9f:0c:86:7c:b0:
33:a1:16:49:f5:99:25:c2:e2:77:9c:c8:5e:ae:dc:
2c:fe:ca:b1:de:63:93:2c:61:86:7f:ad:ac:fc:4e:
a6:a0:3b:b3:f9:df:03:b4:f5:e8:eb:b3:f0:31:ea:
96:24:00:34:16:7d:24:41:62:dd:c2:fd:ed:4e:4f:
9d:0d:01:c1:40:fc:5b:ed:cf:cc:f4:9c:36:96:56:
4e:a5:81:62:69:c0:71:57:4f:50:6f:67:f6:c4:6d:
eb:5d:bf:1f:60:2a:85:bb:ce:87:d0:05:6f:77:7f:
91:40:49:72:30:bd:9b:86:2f:e3:98:21:40:cd:4c:
9b:95:66:be:fb:43:2c:81:47:fe:f2:0b:7d:3c:94:
af:49:7f:3e:b8:f4:bb:d7:21:8f:db:c9:22:61:93:
a1:43:8b:af:3f:90:56:73:20:cd:8b:96:48:85:70:
b8:f6:65:53:93:0f:1c:a6:c5:42:f8:ba:00:f1:3c:
a9:71:6d:ef:94:43:2a:42:69:b6:3c:fa:2b:cb:d0:
53:5d:e2:c5:c5:27:83:d2:d0:d1:a5:86:b6:cf:c6:
90:85:bd:64:cf:07:13:5d:9d:f6:38:95:f6:42:40:
ac:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:34:61:77:EC:4A:22:4A:58:66:19:AF:78:1C:74:51:FB:91:FF:F8
X509v3 Authority Key Identifier:
keyid:8A:9F:D2:CD:DF:4B:44:DE:79:A5:BF:C8:CA:19:A5:6F:55:2E:B4:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a8:09:ff:07:02:eb:a7:97:fa:1b:40:8c:e1:06:09:96:86:
d3:52:d3:4f:9e:c7:04:4a:cd:2e:8e:3b:3f:fb:94:3d:e6:90:
56:71:5f:8e:79:90:75:39:bb:be:cb:22:5b:68:73:74:4e:85:
2d:d2:37:59:78:55:b5:62:8b:06:7a:1f:24:7e:b0:52:b0:ff:
76:cb:50:a0:dd:e4:01:c8:0a:6d:95:88:66:0d:f6:4c:81:11:
bd:c8:2c:d3:8f:a5:2e:86:b5:1d:e1:2f:20:86:cc:23:ff:1c:
c4:bc:c9:08:66:92:43:62:1e:1e:91:07:ee:ba:58:9e:10:12:
98:9e:bb:d8:ec:db:37:bb:96:c4:d0:ff:5e:98:d0:c1:3f:27:
87:d7:b1:b5:a2:19:c4:0e:b2:68:32:8c:a1:9a:59:96:80:7d:
22:10:75:44:d8:ed:59:45:9c:7a:87:85:4f:ea:68:4f:57:74:
b6:26:f0:19:3a:c2:67:af:0b:f2:70:53:6c:fd:1e:d1:1e:68:
03:31:b3:af:ee:52:1e:31:48:b8:47:4c:20:72:67:97:4e:a3:
de:cf:48:ad:82:3d:48:23:d0:e7:0a:00:6c:ab:c6:9b:3f:84:
99:a6:00:7f:23:b4:28:77:af:aa:59:58:73:45:c7:a7:6f:74:
f4:b2:dd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:29:08 2025 by rpki-client