Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
File: IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft (raw, json)
Hash identifier: GqedBTDQuFLnIQkjtvQwL9+DruQHHx7R31Nk+4ko6NI=
Subject key identifier: 84:DF:22:F5:12:23:77:44:DD:C2:C5:4D:29:A6:0F:D9:6F:16:B6:CD
Authority key identifier: 23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
Certificate issuer: /CN=23051215f6f1bd227db7f40df748d64c106f84a3
Certificate serial: 019A4DE1DBE94F6E939F0B9D21BEDDDCB2F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
Manifest number: 0449
Signing time: Tue 04 Nov 2025 08:00:38 +0000
Manifest this update: Tue 04 Nov 2025 08:00:38 +0000
Manifest next update: Wed 05 Nov 2025 08:00:38 +0000
Files and hashes: 1: EuYflw2vpOToo9K8lFetTYAhWyo.roa (hash: SUT2OfNUp9WFMOp/u/f5+vrQyr/WoDJgwv8+U/p5Afw=)
2: IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl (hash: wLXcjmAyPaQbLq47PAyi9Hv/nqu4bWUoCcDhcErSw5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:db:e9:4f:6e:93:9f:0b:9d:21:be:dd:dc:b2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23051215f6f1bd227db7f40df748d64c106f84a3
Validity
Not Before: Nov 4 08:00:38 2025 GMT
Not After : Nov 5 08:00:38 2025 GMT
Subject: CN=84df22f512237744ddc2c54d29a60fd96f16b6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e1:25:20:2a:30:fd:52:2b:85:b8:0a:dd:fa:
62:cc:b5:d3:27:b8:50:b8:91:79:05:b8:9f:47:93:
3d:c8:f4:89:25:87:0c:1f:09:54:ba:60:76:18:06:
39:d7:3f:02:cd:5e:81:c4:6d:4b:99:dc:c4:0a:78:
80:e9:af:2b:80:99:f2:d9:27:48:16:94:12:a3:a2:
74:c4:ff:65:90:d3:31:c5:b4:80:d8:60:30:59:5a:
2d:f9:47:d2:35:20:e1:43:6a:d9:6b:e1:99:20:51:
18:cd:dd:94:52:12:6d:81:e4:d7:c7:93:3b:de:b0:
62:7c:9c:7a:9f:f0:93:11:52:ee:0c:d1:5d:34:09:
96:b6:0b:cd:69:0a:12:43:22:e7:0f:88:9b:5e:0c:
b7:81:57:4a:f9:60:7b:50:0a:4d:89:1e:52:46:27:
61:dc:3a:c8:b6:52:d5:27:7d:5b:1c:27:50:df:fa:
04:5e:e3:c8:7b:e9:79:af:55:0d:a1:af:f6:28:bb:
f1:e8:f2:a3:9e:91:7c:dd:30:b7:d3:68:cc:bc:f9:
8b:89:27:4a:46:c1:e4:3a:98:20:b3:c4:ac:d5:41:
62:05:78:dc:67:a7:19:7e:c6:98:85:c1:2e:7b:80:
aa:c6:33:28:d1:76:eb:36:56:ea:4f:ea:16:cb:f1:
c9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DF:22:F5:12:23:77:44:DD:C2:C5:4D:29:A6:0F:D9:6F:16:B6:CD
X509v3 Authority Key Identifier:
keyid:23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b5:63:04:76:a2:6d:97:dc:94:08:2b:3c:e3:ce:07:e1:f2:
27:f8:2e:42:69:9b:1b:d2:b8:f2:57:a6:ba:13:99:81:3a:ed:
17:15:ba:32:96:5d:db:36:48:2c:67:05:50:2b:0e:ee:db:85:
46:57:d7:e6:55:f0:01:53:6d:0f:5e:00:19:30:02:29:3b:24:
47:d8:79:5b:cb:78:60:8d:0f:e8:dd:a9:60:84:2c:9e:09:5d:
ee:d8:ab:85:a1:17:a5:75:d6:b4:3e:62:a6:86:84:6a:e0:6c:
10:6b:5c:87:dc:a8:e8:f0:15:98:fa:47:b5:30:a5:da:99:dd:
d9:8c:e9:ef:bf:3d:b8:4e:ed:2b:6d:96:48:4e:af:14:23:c0:
7a:bf:03:14:c1:3c:e8:d6:ea:05:61:c3:ec:20:92:0f:09:88:
78:30:d3:0b:02:e3:07:e3:8d:78:60:b6:c2:1f:f8:24:3f:8d:
1f:b8:de:86:67:0b:c6:a7:a0:8e:a3:16:95:23:0a:52:cb:97:
e2:57:c5:83:cb:9d:83:ce:3c:89:4e:9b:0a:17:7b:c1:1c:84:
eb:a9:b6:8f:d2:6d:93:77:14:f1:26:75:b4:2c:86:4a:cb:ea:
18:7b:45:03:6e:b2:ff:14:18:cf:18:8f:89:d6:17:30:63:25:
4d:74:fd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:39 2025 by rpki-client