Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
File: Iqs7vLPNUyaosST8ld7RRFN1L6I.mft (raw, json)
Hash identifier: THFTpSnjUitzShGuoZb6ejx4l30A+SY4rBZwzPSeXzM=
Subject key identifier: 1E:63:F2:AD:23:B3:1F:3A:D4:D2:BF:1D:DD:BC:E1:63:0E:51:78:AF
Authority key identifier: 22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2
Certificate issuer: /CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2
Certificate serial: 019A5299FBC2936592B94D775559E899B347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
Manifest number: 117F
Signing time: Wed 05 Nov 2025 06:00:14 +0000
Manifest this update: Wed 05 Nov 2025 06:00:14 +0000
Manifest next update: Thu 06 Nov 2025 06:00:14 +0000
Files and hashes: 1: Iqs7vLPNUyaosST8ld7RRFN1L6I.crl (hash: vWbUe6YLele9NbwPYMKzbtMxbY4g9RAkbhOChMWhz/o=)
2: uDx7Z1tuokndeydIySa8WuoqYoI.roa (hash: V+Jlh82Z7YVpAlrJMiPWI0QRjW3a+dx4x4YSGHlfjZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:99:fb:c2:93:65:92:b9:4d:77:55:59:e8:99:b3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2
Validity
Not Before: Nov 5 06:00:14 2025 GMT
Not After : Nov 6 06:00:14 2025 GMT
Subject: CN=1e63f2ad23b31f3ad4d2bf1dddbce1630e5178af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:ce:c4:5b:c3:c6:2f:c9:75:79:f9:66:43:
e7:46:50:03:03:5b:6a:0a:4c:02:e8:fa:8b:cd:a7:
55:16:5c:10:63:d1:72:24:06:9a:99:f3:83:91:bd:
76:2a:3f:b7:65:c8:3f:fe:b0:9a:7a:42:78:9f:36:
43:af:7b:91:eb:93:94:ef:98:6e:44:7e:c0:f0:6a:
18:8b:2b:88:c0:b3:10:6e:05:4a:84:83:bf:b4:16:
32:00:c2:d6:95:c8:1d:0a:cc:48:6b:ef:01:5b:6b:
ea:ea:64:35:23:12:0c:95:82:8c:c3:8a:c5:3a:23:
53:c2:96:68:bb:a5:c7:f1:13:7e:fa:9d:0d:59:8e:
08:53:99:19:c9:98:86:35:32:f8:3c:8f:01:41:22:
8e:48:bd:9e:2f:58:bb:fa:0d:c4:7c:17:ca:4b:83:
13:a3:cd:9e:be:ae:9b:c8:90:cc:9a:f1:21:e0:9a:
03:5c:db:28:c6:71:d5:fe:00:95:3d:d2:72:49:95:
63:10:f9:78:43:19:3f:2e:81:76:75:61:91:36:e2:
8a:64:48:ce:83:90:bd:e2:f3:19:4c:f4:ca:bd:81:
02:1e:34:d2:21:d8:94:95:85:f3:de:69:42:76:30:
ea:f6:31:67:1c:7e:e0:28:7f:8c:dc:10:7e:6d:a5:
ac:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:63:F2:AD:23:B3:1F:3A:D4:D2:BF:1D:DD:BC:E1:63:0E:51:78:AF
X509v3 Authority Key Identifier:
keyid:22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:8a:6a:44:f1:cd:99:7d:28:cf:a9:62:2d:a6:21:ea:4f:da:
96:86:d8:f7:44:b1:fe:0a:b7:58:40:a8:3d:fe:1f:0b:be:c5:
c7:4b:4a:12:36:82:77:a9:a7:69:92:db:c2:95:5b:fc:2d:fa:
1a:21:f6:39:2c:8e:55:2b:69:95:f4:1c:aa:2f:07:1d:ce:9c:
ab:46:3b:62:18:23:ea:ae:0f:c1:58:72:56:ba:90:14:f0:2f:
aa:77:fc:7b:89:de:4e:2b:12:a5:16:60:e9:5a:b4:a6:2d:7c:
da:e5:a1:e4:fd:da:e1:d9:3c:e1:34:97:14:34:8e:34:d8:b7:
36:93:ed:37:8e:08:20:bb:d7:6e:72:e6:b3:0c:9f:3d:d8:5b:
a0:e8:b0:3b:26:b2:d8:26:fd:80:42:74:15:23:57:e7:5a:c5:
f9:00:f9:48:ad:df:62:d5:4c:66:d5:60:eb:e7:a1:ab:23:e0:
80:c4:46:6d:9a:1d:bb:31:b0:0d:8a:e7:8b:22:ab:56:44:f6:
50:67:e0:92:06:b2:50:9d:da:63:52:52:ff:84:c0:c9:b7:2e:
17:a0:51:49:b7:c4:44:40:3f:d9:44:92:3f:b5:97:f5:ec:25:
46:71:37:5f:4d:ce:e1:d3:0f:ea:bf:71:53:5e:1d:79:f3:b5:
e1:94:73:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:29:26 2025 by rpki-client