Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
File: Ip-w-z0njhsoCnd94gDvvQi6rDA.mft (raw, json)
Hash identifier: /Bk1KDOmJaJFprP05cjJv42k3GR6hcANqYFdQiriis4=
Subject key identifier: 96:04:90:3C:28:40:1D:1E:BB:85:19:D4:3D:3E:4B:CD:54:29:55:B5
Authority key identifier: 22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
Certificate issuer: /CN=229fb0fb3d278e1b280a777de200efbd08baac30
Certificate serial: 019A52D1D1A6998DF7D765C08D9EDD85C268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
Manifest number: 0986
Signing time: Wed 05 Nov 2025 07:01:13 +0000
Manifest this update: Wed 05 Nov 2025 07:01:13 +0000
Manifest next update: Thu 06 Nov 2025 07:01:13 +0000
Files and hashes: 1: EdKpa32IZ9Dnd3k-vmeHaMU23Tw.roa (hash: WGOFdfPIgmzQx9aGUgM6u6XYxnkTJOLa0M2Z4HLrsFA=)
2: Ip-w-z0njhsoCnd94gDvvQi6rDA.crl (hash: 5gn+SM0bdF6gKHWQmuRT1XunIjK+DAerKKejwoPYi3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:d1:a6:99:8d:f7:d7:65:c0:8d:9e:dd:85:c2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229fb0fb3d278e1b280a777de200efbd08baac30
Validity
Not Before: Nov 5 07:01:13 2025 GMT
Not After : Nov 6 07:01:13 2025 GMT
Subject: CN=9604903c28401d1ebb8519d43d3e4bcd542955b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:15:93:50:50:62:e6:29:af:3f:34:f0:3f:8f:
ad:d7:9a:aa:53:12:18:90:e7:b4:ed:33:10:7d:7b:
57:5b:bc:7b:80:a7:fb:4d:d4:90:d4:15:d6:2b:16:
9f:38:ff:89:19:99:41:1b:7c:53:e5:4e:e8:eb:0b:
eb:3b:c6:ea:7e:ae:3b:7c:60:6b:87:12:07:30:b3:
0c:84:c0:38:d4:fe:ae:7a:43:aa:5c:4d:26:33:c9:
6c:c7:0a:d8:dd:92:e6:29:38:a3:ca:a8:1d:7f:dd:
ff:6c:11:be:60:18:5e:fc:f6:5e:3b:4f:3f:14:b3:
d0:5f:c5:4f:a2:a7:bd:dd:c4:68:24:c0:f3:b8:ef:
30:b4:0c:2f:68:40:e5:71:b4:b7:15:b2:ab:9a:7f:
35:4c:30:0c:56:34:fa:84:47:b1:cf:6c:24:4f:7d:
f8:9c:ce:d7:36:0a:a0:ff:31:6b:17:e3:5f:11:54:
ba:9c:bd:e8:17:38:77:e4:a4:54:19:97:ee:2a:7e:
1a:01:6d:e1:d3:18:cc:2f:ed:84:20:74:a7:00:d7:
63:f1:26:b6:9f:82:65:21:9b:73:1a:68:e3:32:b7:
1c:da:ec:27:39:d7:86:68:e1:99:f0:b0:27:0a:86:
ba:6a:ce:c4:67:07:a0:17:46:5b:e1:dc:8e:e4:e7:
75:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:04:90:3C:28:40:1D:1E:BB:85:19:D4:3D:3E:4B:CD:54:29:55:B5
X509v3 Authority Key Identifier:
keyid:22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:18:8c:03:b2:2d:51:75:55:14:af:6d:3a:07:f2:e0:0d:4f:
d0:d2:06:26:e8:44:9a:d9:e4:47:2c:05:fb:50:07:ea:26:d3:
cd:07:50:78:e3:dc:78:4f:f0:a4:dc:4d:28:65:a9:7d:1a:69:
ee:bf:c4:30:66:8e:90:e4:41:1e:b1:f4:18:18:63:e7:31:b6:
e1:de:1b:4d:7c:c9:b5:af:d3:b5:a2:58:e0:4e:1d:a0:7b:d1:
92:d6:b2:3e:12:d6:63:9c:55:56:3e:52:57:2b:fa:7d:fa:1e:
a7:16:0d:db:42:73:22:37:90:00:fc:f1:6e:49:eb:39:84:d0:
36:82:dd:86:d5:80:84:b3:4d:8b:a6:6d:9e:2c:cf:78:28:03:
04:87:b8:a0:e9:c3:e2:0e:e5:22:3d:54:f1:2b:ff:66:2f:88:
7b:f6:22:bc:b6:02:bd:49:ac:33:54:e9:7b:5d:8e:fc:92:3d:
6e:a9:ec:f7:ac:2a:43:48:26:2b:25:d6:92:96:18:ba:66:34:
15:87:5c:0d:8b:93:0e:50:af:28:7f:86:08:07:15:ee:d9:57:
50:72:e5:62:2b:c5:08:09:0c:92:93:5a:e2:76:74:43:a1:b3:
fe:b4:cd:6a:cf:e1:e3:20:4f:38:bc:63:4e:ba:56:41:e6:b1:
f1:6a:38:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:00:16 2025 by rpki-client