Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
File: iqR9CPyFIT30_aLPlWG45ovCc9w.mft (raw, json)
Hash identifier: SKxhwj9cMxn6ehL0lpSc9tYzqBUgPBU9kDqhjYbKYJo=
Subject key identifier: DD:8E:03:7D:CC:3A:04:E5:35:43:56:34:C9:74:9F:93:DA:5E:B8:F5
Authority key identifier: 8A:A4:7D:08:FC:85:21:3D:F4:FD:A2:CF:95:61:B8:E6:8B:C2:73:DC
Certificate issuer: /CN=8aa47d08fc85213df4fda2cf9561b8e68bc273dc
Certificate serial: 019A4F2B6562FED6449654CE3DB1D2EEBDB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqR9CPyFIT30_aLPlWG45ovCc9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
Manifest number: 0B9D
Signing time: Tue 04 Nov 2025 14:00:35 +0000
Manifest this update: Tue 04 Nov 2025 14:00:35 +0000
Manifest next update: Wed 05 Nov 2025 14:00:35 +0000
Files and hashes: 1: iqR9CPyFIT30_aLPlWG45ovCc9w.crl (hash: wksNj4rNOCQtcATED3N/jsjk5Ss72X0bsmxK5FD2DLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/iqR9CPyFIT30_aLPlWG45ovCc9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:65:62:fe:d6:44:96:54:ce:3d:b1:d2:ee:bd:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa47d08fc85213df4fda2cf9561b8e68bc273dc
Validity
Not Before: Nov 4 14:00:35 2025 GMT
Not After : Nov 5 14:00:35 2025 GMT
Subject: CN=dd8e037dcc3a04e535435634c9749f93da5eb8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4b:89:4e:1c:66:8c:c2:6b:5e:24:bb:72:dd:
8c:ed:1f:d4:ec:fb:d2:df:a7:51:5e:51:48:32:a2:
79:d2:c1:79:77:79:4e:e2:62:4c:b1:67:e7:49:32:
e0:f6:c1:42:92:f0:63:58:d5:a1:9a:83:ba:36:47:
2f:bd:d2:b0:c9:0b:36:1b:ac:b5:ed:c5:56:4a:47:
13:70:a4:74:a0:ea:f5:cd:63:2f:a3:28:d9:41:36:
2d:c9:c7:47:5f:bf:fa:7f:74:98:9f:ff:9c:8c:b5:
ad:67:72:eb:00:0d:15:36:c0:23:ce:28:51:00:92:
e4:4c:57:da:2c:59:04:a1:9f:58:f1:c8:d9:fe:97:
20:b8:4a:86:12:30:1a:8d:63:67:08:16:e8:5b:21:
38:24:59:bb:25:e1:31:19:4e:74:a4:47:33:d4:0d:
3b:c0:6f:b6:0a:89:b9:27:a1:cb:68:c3:46:c6:b7:
c9:c8:6f:ae:b6:21:33:3c:e7:bb:1a:55:3f:67:da:
9d:c8:79:2d:7d:fd:68:7c:b7:ae:c3:c7:ee:67:cd:
73:36:da:d1:ca:58:25:1e:51:e1:18:08:43:09:41:
bc:b5:64:f1:5a:52:d6:a7:28:92:05:66:f0:05:5a:
9b:03:81:70:82:1d:46:1f:c2:27:0c:f1:03:0b:1e:
93:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8E:03:7D:CC:3A:04:E5:35:43:56:34:C9:74:9F:93:DA:5E:B8:F5
X509v3 Authority Key Identifier:
keyid:8A:A4:7D:08:FC:85:21:3D:F4:FD:A2:CF:95:61:B8:E6:8B:C2:73:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqR9CPyFIT30_aLPlWG45ovCc9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d1:f6:fc:e0:16:73:37:c3:56:3e:0d:93:ce:e2:ff:31:e2:
4b:ec:c2:83:f2:8c:8a:7e:a4:58:bf:26:07:13:3f:93:10:c9:
e9:5e:a5:fa:47:e6:b8:89:a2:f6:0a:79:d9:e2:73:95:af:97:
f6:26:e3:aa:2b:96:7e:5e:f7:12:f9:d2:28:9d:9d:88:10:12:
31:e6:1e:45:f2:be:5a:b3:42:1c:4f:aa:02:78:12:7b:1b:4f:
65:2b:31:6c:de:33:50:bb:ef:ec:95:47:94:a3:c6:f3:e6:79:
14:c1:42:fd:04:2e:17:c5:bd:da:d5:7c:bb:00:c5:79:f4:d8:
ca:0d:5b:7d:c9:f1:a6:50:d3:48:fb:2b:a8:58:75:5b:4e:00:
41:a9:1f:4a:1d:9f:26:42:91:da:55:39:11:e0:14:10:57:43:
7a:f5:82:d6:2b:ac:4b:77:83:1c:b6:c1:37:be:14:3f:66:d8:
d2:3d:74:56:77:11:cf:6f:5b:0f:ad:a8:29:08:08:12:ab:8a:
ce:14:6f:67:0a:cb:5b:65:72:5a:6f:7f:7e:bd:4e:5e:de:63:
65:59:42:06:eb:b8:f8:0a:e6:01:a4:f3:a5:d4:e1:83:38:56:
c0:c3:4f:40:0a:6d:ea:91:81:86:8d:9d:d8:16:ce:36:e4:5d:
bd:2d:34:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:06 2025 by rpki-client