Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
File: cIYS6HA6ZgiJyg9FfPG02KDVO00.mft (raw, json)
Hash identifier: 0v70v4Cr180wgwudFwwsijHF1oDtQGLMA+RnjimMZfg=
Subject key identifier: EE:18:A9:40:B3:02:04:2C:69:11:03:AB:DC:35:F1:00:18:A5:75:92
Authority key identifier: 70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
Certificate issuer: /CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Certificate serial: 019A4E4F9214AD0EAA28B219AB30A5D13EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
Manifest number: 0DB1
Signing time: Tue 04 Nov 2025 10:00:28 +0000
Manifest this update: Tue 04 Nov 2025 10:00:28 +0000
Manifest next update: Wed 05 Nov 2025 10:00:28 +0000
Files and hashes: 1: DmXSHAWyzkOoxqiFMJESxxoNQRE.roa (hash: JS4gdknzcsCYuR0k7tQp82qH1Pua7AKi87dIAAaokTc=)
2: G1B5f1Zo9mXXkjO8qvbHOoggkQk.roa (hash: aEmK04Ia5XU5AnX1t6+4/7AVUK1sMbT5CaQWCjlA0q4=)
3: cIYS6HA6ZgiJyg9FfPG02KDVO00.crl (hash: MbPVIYJVbtWfSBIrN45z6cTaYqp+Rr6j01SsA2PojRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:92:14:ad:0e:aa:28:b2:19:ab:30:a5:d1:3e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Validity
Not Before: Nov 4 10:00:28 2025 GMT
Not After : Nov 5 10:00:28 2025 GMT
Subject: CN=ee18a940b302042c691103abdc35f10018a57592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fa:d5:36:07:d2:db:b5:ca:02:7f:ed:44:74:
a0:96:6a:45:1d:2e:3c:08:0f:18:e0:1c:f3:9c:cd:
f6:b0:2c:5a:8e:cd:fd:6f:8f:c3:02:3b:12:89:e3:
b4:ee:e3:01:fe:47:c3:dc:9e:6a:8f:f9:fd:ea:11:
99:40:fc:2e:90:61:85:91:26:d9:48:f7:23:ee:51:
f9:4b:07:0a:a0:9c:97:40:44:86:c2:dc:c4:46:fc:
58:2e:9e:2d:0f:db:bc:8b:d7:26:13:ee:e3:38:3e:
a1:ae:69:e2:32:66:79:1a:08:ef:70:b1:05:4b:c8:
d7:ee:80:b4:0e:cd:16:c1:df:a2:e3:5a:1d:80:ff:
5a:cc:48:bc:ed:57:6f:ec:d6:05:18:41:51:ce:ec:
fb:2b:18:1d:1d:cb:35:d9:8a:7d:d7:67:e4:c9:e6:
3c:e0:b8:ff:a2:d7:88:25:02:a4:7f:13:bb:ec:a4:
68:a3:51:7a:04:22:95:aa:7f:b9:47:c7:24:61:37:
a4:25:82:1d:f6:69:b7:25:dc:50:9b:d2:7f:f4:50:
9d:6e:54:15:e7:b3:ed:7e:74:c9:d3:ff:4e:44:95:
10:f7:5a:d1:e5:5b:76:df:45:84:0e:65:76:39:47:
4f:e2:1b:98:e1:3a:37:6b:1b:05:e4:30:2d:60:21:
6d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:18:A9:40:B3:02:04:2C:69:11:03:AB:DC:35:F1:00:18:A5:75:92
X509v3 Authority Key Identifier:
keyid:70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:1f:08:ad:d2:d9:a1:64:34:b5:27:9d:2b:90:e3:1e:c7:ad:
83:7a:83:5d:ae:50:cd:12:36:25:56:5f:b5:bf:f5:b0:fc:91:
ed:d2:c5:89:64:14:8d:2f:9d:3f:d5:40:58:bd:0e:4b:5a:52:
0a:53:e3:87:9d:dc:d2:f2:d6:48:b5:6a:38:16:61:d9:20:de:
82:57:20:a1:e4:f9:e0:10:6c:07:68:fe:4b:55:6c:b4:9b:bf:
06:51:fc:79:7d:a7:15:1a:f6:f2:b7:f1:49:30:44:2a:3e:a5:
4d:a7:de:ba:80:0a:ae:d5:52:76:4b:43:d4:41:64:04:c5:34:
84:60:ab:4c:eb:7f:74:dc:16:26:fa:ef:c0:2b:0c:2c:ef:79:
83:53:34:94:bb:f7:72:74:6d:06:e1:75:92:6e:c1:0a:29:a1:
64:70:e9:a4:4f:ec:16:33:90:ef:1b:7a:73:16:d0:bb:17:83:
f8:e8:ea:72:80:b7:78:ba:8f:d0:db:06:d4:23:76:e8:fd:f3:
bd:60:03:27:45:51:1f:38:85:a2:6f:49:2f:8a:da:85:45:8b:
a8:6e:7a:14:57:67:4b:b4:59:2e:d5:33:23:cc:95:e6:05:e6:
51:e8:b7:d7:b5:39:d1:7b:c9:f4:8c:43:5f:68:f4:7e:f8:7d:
b3:21:ce:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:16 2025 by rpki-client