Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
File: iPQfqz5j6vW98HFm31qmgWLq16Y.mft (raw, json)
Hash identifier: SwLmE0+0rfUlH1hKkHkV7fLdCK3fQIQ9/JPkUfEFyXQ=
Subject key identifier: B5:7B:B9:C8:67:60:BA:96:0D:30:BC:96:AF:1A:31:4C:27:E7:9B:EE
Authority key identifier: 88:F4:1F:AB:3E:63:EA:F5:BD:F0:71:66:DF:5A:A6:81:62:EA:D7:A6
Certificate issuer: /CN=88f41fab3e63eaf5bdf07166df5aa68162ead7a6
Certificate serial: 019A4DAAB7572A58BC73F58C347D5400C45B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 07:00:24 +0000
Manifest this update: Tue 04 Nov 2025 07:00:24 +0000
Manifest next update: Wed 05 Nov 2025 07:00:24 +0000
Files and hashes: 1: iPQfqz5j6vW98HFm31qmgWLq16Y.crl (hash: DJFN+PwGAwjNtKoRRt2265rk6OVY6eMcKyqQ3TtleyE=)
2: uNj0vhcUK_UhfSxrxVZLYp2n6nk.roa (hash: xTRc4Rd4GJsupl0R/CzG6nNJAwdCcx0IPu8T4AbYP1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:b7:57:2a:58:bc:73:f5:8c:34:7d:54:00:c4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f41fab3e63eaf5bdf07166df5aa68162ead7a6
Validity
Not Before: Nov 4 07:00:24 2025 GMT
Not After : Nov 5 07:00:24 2025 GMT
Subject: CN=b57bb9c86760ba960d30bc96af1a314c27e79bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f4:7a:64:da:97:36:d1:64:cd:9f:38:dc:3e:
f5:6b:b5:19:ee:80:f6:34:2c:30:63:96:5f:56:52:
45:69:31:8d:4a:b6:c1:92:0c:43:cd:92:b6:01:80:
94:22:5a:94:b1:66:fa:7b:35:39:85:44:d8:36:5a:
35:cd:ff:e7:7e:a3:a8:2d:29:ca:ab:9d:1f:cb:b8:
9d:bf:19:d5:ea:78:9f:d9:e5:8a:35:6e:dc:a7:91:
5b:c4:6f:dc:f9:39:39:39:c4:63:4f:d6:17:97:be:
30:7c:db:da:33:6a:95:1c:d7:b9:2c:b2:cc:1f:be:
e1:62:cc:3a:6d:26:c0:61:5e:39:92:a5:da:9c:1a:
68:78:8a:29:f4:98:38:6d:84:bb:38:0d:b8:ec:f0:
12:8f:86:8a:7c:58:1d:18:8b:22:1e:55:41:56:6c:
c1:19:b8:07:d4:5f:56:c8:f1:79:39:11:20:49:e6:
cb:70:7f:5d:26:fb:3a:b8:af:df:73:0e:ff:a0:29:
4b:d0:de:d8:9f:65:ae:38:02:b3:31:a7:36:b5:c1:
cc:de:2d:af:26:55:1f:62:65:f9:d2:34:4f:dc:6a:
44:7a:ae:4a:10:87:20:ad:89:95:79:bb:38:b1:10:
0a:11:3b:ab:e4:c7:cf:ca:57:65:0c:2e:46:b2:fe:
3a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7B:B9:C8:67:60:BA:96:0D:30:BC:96:AF:1A:31:4C:27:E7:9B:EE
X509v3 Authority Key Identifier:
keyid:88:F4:1F:AB:3E:63:EA:F5:BD:F0:71:66:DF:5A:A6:81:62:EA:D7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:70:74:f7:3f:06:8c:a0:0f:59:6b:f6:ce:b1:4c:c6:33:1b:
5c:e4:90:4e:80:52:36:6d:75:94:b8:c8:0f:7c:67:00:af:14:
6b:1e:70:35:39:4f:9f:5b:aa:96:1d:22:24:31:3c:a4:94:32:
15:69:de:09:db:f4:7a:ab:f6:40:d6:07:d4:ef:6c:24:cd:e5:
db:4d:02:06:18:35:4e:4b:ac:b3:8f:05:29:f2:37:ce:04:a0:
17:28:9f:56:df:4d:e9:82:01:ce:ed:61:dc:4a:b5:5c:43:d5:
32:71:0f:f3:f9:cb:c8:a1:75:1e:8e:6b:4e:1b:80:1c:15:b5:
23:3a:85:a8:80:4f:a0:a1:a5:5a:c7:43:84:de:2b:61:73:e3:
2d:5e:43:20:b5:08:ec:ea:fe:16:cd:e7:a1:a8:b8:d4:b7:f0:
ab:28:bf:af:a0:60:4d:9c:36:9a:9b:67:ad:7e:6f:75:fa:df:
14:8e:df:43:86:25:36:96:8a:3e:0c:16:a7:f8:94:ee:e2:5f:
dc:66:98:ec:dc:dd:ca:38:1c:8b:62:f3:19:52:90:e0:2b:a4:
ea:cb:1f:10:20:ee:cd:9f:d5:ea:5c:03:79:90:b0:e9:82:d6:
d5:d5:c6:fb:d7:9c:5e:af:83:dd:c9:fd:97:59:44:63:71:0e:
1f:df:da:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:22 2025 by rpki-client