Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
File: ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft (raw, json)
Hash identifier: QW/aEFmuiZEpUQqzZrSoZuYKhDFOSyPmyqaWccMFfdk=
Subject key identifier: F0:E7:75:12:C7:78:1E:B9:2B:0F:B0:1B:EF:58:35:F2:93:E6:A1:1E
Authority key identifier: 8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D
Certificate issuer: /CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
Certificate serial: 019A5150A868106AC3AF2279294205349F98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
Manifest number: 0852
Signing time: Wed 05 Nov 2025 00:00:31 +0000
Manifest this update: Wed 05 Nov 2025 00:00:31 +0000
Manifest next update: Thu 06 Nov 2025 00:00:31 +0000
Files and hashes: 1: 46cUFKURmF9XnPH8sSx3t3pgjTo.roa (hash: 0QimrSPj6EgGm2B8/lr6EDBnOBJIibCqv64JLqj1ceI=)
2: ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl (hash: YK7vG6C1KHiUntKYMLj4nbVLAlEPKeSxXquFCMM/qDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:a8:68:10:6a:c3:af:22:79:29:42:05:34:9f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
Validity
Not Before: Nov 5 00:00:31 2025 GMT
Not After : Nov 6 00:00:31 2025 GMT
Subject: CN=f0e77512c7781eb92b0fb01bef5835f293e6a11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3e:cd:b8:f7:82:96:48:dd:0c:f7:69:e3:70:
f8:07:75:5e:30:be:5c:b7:ab:cb:cd:9a:93:d8:a4:
07:c0:a4:a8:15:22:7f:c1:63:1e:22:94:dd:3a:94:
73:65:be:e9:8f:56:d2:68:95:a7:30:63:ef:25:cd:
41:05:7c:8c:2c:98:9f:b6:46:cc:a1:00:62:ee:ac:
d3:10:21:4b:16:79:53:b5:2f:8d:e9:a1:d0:31:a7:
be:12:16:19:2b:2b:41:d3:32:64:be:93:71:58:b6:
5a:fa:f5:c4:62:ca:92:62:00:64:fe:49:f6:ee:b6:
9a:47:c5:57:1e:41:70:4b:8c:9d:53:99:0c:45:33:
bd:f1:40:17:b1:41:26:90:8f:85:a9:0d:4e:0c:e9:
d1:e1:f7:8f:70:fb:e1:d8:a4:50:c5:03:6b:23:5e:
16:07:cf:95:88:38:6b:a7:64:d0:5d:8e:be:92:08:
63:b9:5a:f6:b2:83:2e:0b:18:06:9d:f7:e2:77:fb:
89:3e:42:20:2d:60:45:11:ee:df:6a:e0:c8:4c:3b:
5d:cf:f0:ae:9a:06:6e:0c:a9:3d:24:a3:39:e4:0a:
cc:f5:4c:c6:27:bc:2c:81:e7:1f:15:20:a1:39:8e:
26:d2:39:0b:ec:16:44:ae:79:0c:32:94:a1:3c:dd:
f7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E7:75:12:C7:78:1E:B9:2B:0F:B0:1B:EF:58:35:F2:93:E6:A1:1E
X509v3 Authority Key Identifier:
keyid:8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:9f:7d:51:c1:04:db:9b:fc:77:44:3e:48:cb:97:80:08:55:
57:88:dd:e6:ba:59:c8:9e:b5:9e:65:81:8f:39:f0:74:0b:2a:
85:68:e8:33:c4:da:47:c3:bf:5c:41:f2:ac:07:79:23:46:e1:
fa:6f:01:0b:3e:3d:ed:9c:f8:4d:bc:a5:59:64:f8:e3:67:8d:
3c:ae:73:fa:36:d8:72:4c:2c:a2:91:41:d6:b4:35:30:a3:be:
b3:5a:f7:e3:0f:cc:8c:c9:1a:a0:6b:c7:de:fd:70:c6:b8:8f:
33:b4:5b:65:31:44:a3:fe:27:40:67:3e:07:e1:ea:37:2c:bf:
1a:93:ee:d1:2f:91:d2:20:b5:e7:3d:31:3e:60:67:bd:10:36:
2c:39:44:84:58:d3:65:cc:4e:9e:e9:2b:b0:1f:14:b7:f0:2d:
8b:e1:c0:81:59:dd:ae:3a:e3:21:a7:8c:cf:1a:af:f2:61:1c:
79:89:51:4a:00:87:9f:b0:07:25:98:74:6e:0c:d4:36:4f:ee:
06:e6:33:6b:74:1f:ce:a2:02:75:4a:86:d7:28:80:21:e1:50:
02:0a:7e:6a:6c:14:3a:5a:04:86:6a:7c:35:19:a7:e7:9c:74:
0d:29:36:6b:2c:2a:46:98:15:b3:46:a5:fd:0f:83:0a:7b:c0:
ff:69:05:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:49:49 2025 by rpki-client