Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
File: io-pkrwKYdssvnhuHFnTYMzlRIY.mft (raw, json)
Hash identifier: iVw0qQz8T3Ozv5faRfhfKOXIaz6ByogPWTS5ZwtZ9Mc=
Subject key identifier: E0:77:F9:95:6A:99:B6:1E:86:74:93:AC:AB:1F:C0:AB:14:E1:C4:B8
Authority key identifier: 8A:8F:A9:92:BC:0A:61:DB:2C:BE:78:6E:1C:59:D3:60:CC:E5:44:86
Certificate issuer: /CN=8a8fa992bc0a61db2cbe786e1c59d360cce54486
Certificate serial: 019A4E4F73561D5251920E81F87D7B2AAE8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
Manifest number: 0862
Signing time: Tue 04 Nov 2025 10:00:20 +0000
Manifest this update: Tue 04 Nov 2025 10:00:20 +0000
Manifest next update: Wed 05 Nov 2025 10:00:20 +0000
Files and hashes: 1: UCOQjmQUUOgrTdTJgotuOqOo8tE.roa (hash: LKSVHd9tPQynvxDd2UN8Jk/eJK88GQBFqDbfRDHvZ3g=)
2: io-pkrwKYdssvnhuHFnTYMzlRIY.crl (hash: fe9LuEhKkvUEfI1Nbe3o1+jhgzea6MPZbLi+FmBW0gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:73:56:1d:52:51:92:0e:81:f8:7d:7b:2a:ae:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8fa992bc0a61db2cbe786e1c59d360cce54486
Validity
Not Before: Nov 4 10:00:20 2025 GMT
Not After : Nov 5 10:00:20 2025 GMT
Subject: CN=e077f9956a99b61e867493acab1fc0ab14e1c4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:26:52:05:e3:4f:45:d2:db:08:38:06:ec:7a:
bc:f4:1e:53:f6:34:45:5d:5a:ab:74:08:30:fb:73:
9e:75:44:ee:72:04:90:79:da:e5:34:72:b4:ad:08:
7e:d0:2b:60:d5:1d:6b:b5:40:90:25:09:04:51:2f:
0a:4b:5e:74:3c:0a:69:03:0a:6c:5d:bb:30:ca:22:
3b:dc:86:39:c2:3f:9b:97:da:51:94:78:9e:d3:62:
9a:76:59:a4:b9:a7:b5:05:4a:56:ca:a3:e4:77:9a:
51:34:ad:6f:5c:80:2d:70:e4:92:1d:60:08:b6:7e:
a4:ce:c6:90:67:57:8d:d4:e2:05:92:98:22:cb:a1:
45:05:29:a6:b6:57:92:ab:2e:29:ea:e5:37:f2:f0:
b3:33:e2:7c:72:e4:71:2f:0d:e7:42:7d:b0:b1:6b:
c3:c7:35:6e:32:07:af:9f:ab:7b:e2:ad:b1:57:f5:
48:2a:dd:34:3f:69:be:80:a5:60:18:1f:60:c8:09:
a4:21:84:dd:94:5c:c4:6c:c6:8c:e7:f9:7a:b0:6f:
12:63:b1:6e:28:24:0d:c1:64:5e:88:c5:c6:f7:08:
b4:79:0f:b0:3d:08:e2:a1:68:c1:34:68:8d:9a:03:
83:b9:eb:b9:2f:75:57:93:8d:44:41:f4:b5:a3:5b:
03:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:77:F9:95:6A:99:B6:1E:86:74:93:AC:AB:1F:C0:AB:14:E1:C4:B8
X509v3 Authority Key Identifier:
keyid:8A:8F:A9:92:BC:0A:61:DB:2C:BE:78:6E:1C:59:D3:60:CC:E5:44:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a6:99:8b:2d:b2:81:7e:66:71:eb:cd:73:ae:c4:0e:5f:6e:
73:9f:70:b1:8c:a8:5c:d9:07:27:42:d1:78:33:d3:17:4b:0f:
bd:54:d5:95:fc:ce:28:29:80:01:ac:d7:3d:6d:7e:8d:9a:e8:
8e:cf:c4:c7:40:b6:cc:23:0e:a6:9a:4e:bc:f7:92:7b:d4:27:
3a:c0:fe:fd:41:39:ff:e8:94:c8:d2:b1:7e:61:84:0d:aa:b6:
0a:0c:6f:f7:07:bb:3c:aa:76:eb:d0:27:87:05:fd:d5:4b:a6:
bd:ce:84:45:d2:54:ac:75:b0:c3:69:89:59:80:0b:1a:77:e2:
a1:6c:30:8b:db:78:fd:cf:18:20:ae:08:80:6a:73:53:89:6c:
3b:59:97:54:df:46:13:35:85:43:53:7d:6a:8c:e9:08:8f:2a:
7b:31:7d:bc:3a:62:08:17:99:a8:74:c3:26:07:f0:6b:44:30:
d3:ae:a1:69:d5:5a:27:58:2f:26:bd:b6:a6:c5:e0:5c:ee:51:
bb:15:5e:e0:bd:a5:22:3e:8d:98:59:ea:fe:58:59:0f:01:3a:
79:3f:9f:a4:df:ac:7f:df:a6:fc:9f:9b:f6:ec:03:6b:4d:41:
06:2f:ce:a1:86:00:f4:8d:ef:d8:04:ae:e7:7b:41:7f:5f:44:
ec:11:a4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:33:51 2025 by rpki-client