Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
File: IwqhYKbohsED2tvkSyPCd3YFc5E.mft (raw, json)
Hash identifier: /1JOwrOcwbZJOod1f5a8GLKI4qp2OrVThdNb6I0vSQU=
Subject key identifier: 17:C6:75:4B:04:95:1B:54:20:10:4A:1F:9B:D0:0E:BC:D6:18:7E:79
Authority key identifier: 23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91
Certificate issuer: /CN=230aa160a6e886c103dadbe44b23c27776057391
Certificate serial: 019A4E86B205AE35CE3A6884A3F5B32DD1EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
Manifest number: 0EAC
Signing time: Tue 04 Nov 2025 11:00:41 +0000
Manifest this update: Tue 04 Nov 2025 11:00:41 +0000
Manifest next update: Wed 05 Nov 2025 11:00:41 +0000
Files and hashes: 1: 1H3wr9EMEu_9kf6Zl38WrkoAkBU.roa (hash: FprWo0wu1rkhWTeCTL4oYKvIo6iA1oIZ1p0P+xAQYGs=)
2: IwqhYKbohsED2tvkSyPCd3YFc5E.crl (hash: WgIfbCtERdKyuxUPnVHVgtgjM9F17L0fsJ8U7HktXOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:b2:05:ae:35:ce:3a:68:84:a3:f5:b3:2d:d1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230aa160a6e886c103dadbe44b23c27776057391
Validity
Not Before: Nov 4 11:00:41 2025 GMT
Not After : Nov 5 11:00:41 2025 GMT
Subject: CN=17c6754b04951b5420104a1f9bd00ebcd6187e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:26:e9:9f:4e:89:d8:09:d4:7d:f5:0f:47:0c:
ee:b5:94:3c:87:3e:90:16:e3:88:4b:a2:d8:b7:22:
1c:c0:3e:3c:88:69:e7:de:98:35:4d:b9:4b:d6:2a:
bd:68:20:fb:43:c3:36:b2:32:24:3d:86:cf:05:ff:
c2:ab:55:88:7e:64:1a:a5:b5:fe:4e:dd:56:27:37:
d3:b0:48:f4:5d:06:67:14:ce:d0:74:0a:e5:f7:02:
06:63:c1:96:f6:ff:93:83:01:21:cc:fa:75:86:d9:
7e:99:08:47:72:70:45:50:a4:de:77:63:c6:6c:0b:
69:fb:3e:33:74:8f:84:79:ae:d6:e7:a4:cf:54:1c:
83:25:00:49:36:d5:81:89:54:4d:9b:fb:10:d7:2d:
d1:bd:37:72:4d:6b:ba:a5:1b:58:69:2c:85:99:30:
c2:df:d3:38:c9:5d:fd:22:cc:db:48:a1:1c:d1:8d:
47:58:e1:a1:9c:31:b3:b1:7a:14:85:d1:42:d2:cd:
c4:7f:2c:cd:15:24:04:de:3b:f4:ba:a5:ea:7a:a0:
a6:4a:8e:7d:d1:f0:eb:98:91:c6:52:ac:ad:2d:b6:
cd:1c:52:47:3d:78:02:a8:df:a0:6e:67:67:b3:d5:
5e:cf:1c:81:c8:7d:14:fb:99:dd:a9:ca:d3:65:c1:
26:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C6:75:4B:04:95:1B:54:20:10:4A:1F:9B:D0:0E:BC:D6:18:7E:79
X509v3 Authority Key Identifier:
keyid:23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ee:36:26:49:bc:a7:49:d3:27:e5:cd:13:51:08:61:1b:da:
01:0f:68:85:06:48:e9:be:1f:26:af:b5:21:06:95:e7:f1:e6:
35:cf:81:77:d8:b5:95:49:fe:9f:ea:33:ce:5a:0a:0f:19:45:
33:c9:4a:e0:09:10:df:15:6f:31:47:a3:52:37:fd:74:2e:ed:
b5:ce:7a:f8:ea:be:f8:71:07:64:a2:56:35:1b:74:9a:ce:4e:
b7:28:c5:9e:22:3a:ee:85:a8:ba:02:86:87:c3:72:33:c0:5e:
63:f5:ac:6b:19:08:c9:a7:cd:8f:c6:be:84:50:5b:bd:67:f2:
c4:6f:47:7b:15:b6:b7:5a:4f:d1:54:30:63:ac:10:02:e7:d3:
cf:f8:ed:a0:11:0e:4f:4c:09:fd:68:be:05:5b:f9:7e:e7:8a:
6e:89:c2:e9:c7:83:3c:ef:7e:bf:a0:9b:bf:2a:69:2d:98:64:
26:1b:81:5b:d7:b8:a4:e9:56:6a:0e:ea:7b:cc:36:bc:33:6f:
46:0c:d9:e5:7e:e8:ce:45:d7:9d:1f:fc:82:12:13:21:84:d8:
0f:18:b2:e2:59:1a:29:a0:c4:d0:2c:ec:e2:ff:44:56:55:ee:
6b:6b:95:82:b2:14:29:d3:d3:29:4b:12:c8:ff:a1:fe:a1:49:
c6:9a:b8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:31:04 2025 by rpki-client