Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
File: iAsPesuH0TTDhZ1y0NGmHkdRusA.mft (raw, json)
Hash identifier: O695wKhTb6uTY/j8u4lcjfOaU49Bc81v6NOXQ9SO1OE=
Subject key identifier: F4:FA:EC:8A:97:30:BF:12:17:DA:76:DB:2A:F5:8A:FB:93:46:52:C8
Authority key identifier: 88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0
Certificate issuer: /CN=880b0f7acb87d134c3859d72d0d1a61e4751bac0
Certificate serial: 019A51BECCFFC56CA760E07A3AF7F14ADE8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
Manifest number: 0DB9
Signing time: Wed 05 Nov 2025 02:00:50 +0000
Manifest this update: Wed 05 Nov 2025 02:00:50 +0000
Manifest next update: Thu 06 Nov 2025 02:00:50 +0000
Files and hashes: 1: UubezK0uH4JLqxbhgPEY0N-6nSw.roa (hash: Oagl7z5x1jSe2CWCzxXuth3kqDf2dweMIxQL2+jadVg=)
2: iAsPesuH0TTDhZ1y0NGmHkdRusA.crl (hash: utLzGPAKz5zcmj2U1GxE6i5qJkPfFbKRCuJQxmoIjm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:cc:ff:c5:6c:a7:60:e0:7a:3a:f7:f1:4a:de:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=880b0f7acb87d134c3859d72d0d1a61e4751bac0
Validity
Not Before: Nov 5 02:00:50 2025 GMT
Not After : Nov 6 02:00:50 2025 GMT
Subject: CN=f4faec8a9730bf1217da76db2af58afb934652c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8b:9e:5a:58:15:da:f2:20:02:68:6c:f2:02:
fa:8c:ed:1b:4c:76:37:35:c9:1f:16:f9:de:e1:be:
51:44:6b:22:5d:fa:90:43:f0:39:e2:b4:c7:54:7a:
aa:3b:8b:8c:1d:22:e8:76:9b:32:33:6d:d7:af:aa:
e9:0b:26:d0:01:54:c2:70:97:69:37:eb:5e:70:37:
85:2e:b3:fe:59:93:b7:b3:94:43:7a:a1:e5:82:d3:
00:9f:f8:44:36:48:af:94:b7:3e:14:fd:5a:e9:a7:
ea:5a:e4:44:e4:db:52:5d:78:af:68:7e:b7:34:26:
cb:79:9c:c0:58:ef:20:ce:5d:59:13:cf:df:b7:63:
40:cc:d9:24:82:9e:54:f5:72:d6:35:19:4c:53:8f:
88:0b:84:a8:c7:f4:78:3f:6c:cd:4a:07:50:3b:b7:
a8:2c:fa:63:f7:d7:9b:88:0e:a7:96:aa:fb:24:47:
53:e9:0d:10:ed:9d:f3:2e:9e:37:5b:f9:69:95:a0:
73:35:0f:d1:5f:2b:67:99:1e:34:e9:68:bb:54:9a:
c7:35:94:b1:31:bc:7a:77:a2:f0:68:50:48:0a:d2:
3c:18:e1:37:d0:6f:d3:fb:b3:ed:00:90:80:2e:59:
bc:75:65:ca:c7:c3:4e:74:17:1a:0b:16:c6:27:47:
56:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FA:EC:8A:97:30:BF:12:17:DA:76:DB:2A:F5:8A:FB:93:46:52:C8
X509v3 Authority Key Identifier:
keyid:88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:24:23:ab:d9:2b:dc:f0:39:f9:63:bd:ec:e8:57:3c:ab:a1:
da:d6:c0:7a:0e:6c:3c:07:1b:8b:ad:7b:fe:84:b3:11:1c:55:
56:24:93:ee:4a:fd:4c:d0:75:18:b6:4a:a5:01:93:d0:73:25:
0f:10:23:37:6b:03:34:f9:2c:06:44:51:e7:9a:41:6b:6a:cf:
d5:d7:93:aa:01:ee:66:93:af:c3:e1:ac:44:db:75:2a:c5:70:
d0:63:b0:dd:2a:2b:70:31:b0:f0:1f:cf:cb:a2:6a:63:da:56:
5f:70:74:3b:9c:1d:4e:d2:e9:19:f3:db:4f:e2:da:1f:d2:95:
e5:37:39:39:82:d9:79:fc:52:e8:fe:37:bd:6e:73:73:ac:55:
51:77:68:96:97:3f:54:c4:47:9c:83:1f:4a:32:3b:60:66:ca:
d3:13:c4:00:a4:3b:d6:f4:9e:aa:18:27:fd:76:ab:bb:0c:2a:
10:36:dd:0b:52:69:34:9f:87:72:9c:54:8b:b6:bd:d0:6d:2b:
da:a6:13:db:99:c5:27:a3:eb:29:9f:10:fb:13:17:98:6a:de:
9d:ed:2c:e8:4f:8a:e1:83:5e:34:3a:bb:c4:46:13:bb:b5:1d:
80:67:79:84:59:04:be:80:79:e1:68:50:96:ef:7d:c2:6a:d5:
c3:2f:7e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:04:00 2025 by rpki-client