Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
File: iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft (raw, json)
Hash identifier: 9JSr8MqgFA70vRMdmFMHDqFxraWxO+3l8Bj3q0wFuMo=
Subject key identifier: B8:95:7F:E8:68:ED:73:57:32:71:6A:54:EF:0E:DA:07:E8:F3:0F:0C
Authority key identifier: 88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
Certificate issuer: /CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Certificate serial: 019A503E392F8DE73B8C28071289325BA618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
Manifest number: 1661
Signing time: Tue 04 Nov 2025 19:00:46 +0000
Manifest this update: Tue 04 Nov 2025 19:00:46 +0000
Manifest next update: Wed 05 Nov 2025 19:00:46 +0000
Files and hashes: 1: Qv6t4wP7j-uLsxcfTWHv2ZFQWD8.roa (hash: eR47NrGWjMdNEp9FBa07vBAWwdqKIDeSc8imYvJOwfI=)
2: iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl (hash: tgSK7fBXMIQnHdeTyPwRfLn2ZMp3qLncV2LIbmk5ybA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:39:2f:8d:e7:3b:8c:28:07:12:89:32:5b:a6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Validity
Not Before: Nov 4 19:00:46 2025 GMT
Not After : Nov 5 19:00:46 2025 GMT
Subject: CN=b8957fe868ed735732716a54ef0eda07e8f30f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:41:93:74:23:26:30:e4:55:69:a4:d4:aa:33:
54:7d:38:9e:81:61:8d:e0:63:58:53:1e:40:b7:54:
4e:27:db:43:8c:12:c8:96:58:61:7e:19:54:a8:8b:
28:a6:c5:87:a5:b1:4d:45:7b:59:ed:bc:ac:9e:7d:
3a:fe:12:0a:9e:0c:e6:e6:6f:37:75:90:15:65:b3:
bd:86:22:a7:a9:87:6c:be:3b:49:3a:02:b9:26:15:
90:71:d9:54:f6:10:c7:a8:ad:ca:71:99:d2:f3:80:
58:73:00:60:28:92:3f:44:b4:5e:31:f6:7b:53:d5:
70:08:77:39:03:63:5f:63:79:2f:81:85:a1:74:23:
02:f7:d7:24:64:2c:ee:cb:b5:e2:af:d2:d1:10:f5:
2f:67:04:da:d4:70:32:dc:ca:45:4b:15:86:08:85:
7b:72:96:45:15:b8:f0:05:b6:77:d7:bc:1e:b8:0d:
33:35:e5:9b:b2:22:55:e9:93:17:16:c7:e1:df:9d:
79:a9:7f:95:8b:e4:e6:4c:a2:85:ae:11:60:cc:5e:
57:7f:ee:2f:d6:e8:76:e2:c2:d8:c6:e5:f4:85:8f:
53:11:56:76:4d:80:ed:49:44:60:b2:b8:81:a1:f5:
54:8c:96:42:ad:d2:b1:a8:dd:fc:20:de:29:54:4e:
aa:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:95:7F:E8:68:ED:73:57:32:71:6A:54:EF:0E:DA:07:E8:F3:0F:0C
X509v3 Authority Key Identifier:
keyid:88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:1b:15:25:25:80:98:ff:4b:ce:f1:4b:91:56:87:2e:01:50:
a1:40:02:eb:02:5f:c8:d4:3b:39:3b:86:7a:b4:6d:57:22:47:
f8:73:40:76:7c:91:50:48:af:d7:59:f0:e8:76:38:61:73:72:
fb:27:fd:10:7b:c3:d0:de:29:08:56:1f:ea:fa:3b:b8:c3:fc:
b6:07:8d:51:78:df:f8:30:b4:17:16:1a:15:ae:e7:ba:d9:84:
f5:2e:63:4b:09:c8:a7:7d:41:10:42:df:15:b3:f8:43:ea:92:
30:48:0a:a6:0e:9c:74:ee:5f:68:b4:56:00:9e:50:78:26:2d:
ce:b0:9c:7b:02:da:95:83:8a:16:5e:84:cd:3f:2b:ef:c5:bd:
99:ce:cc:f6:fc:0e:a0:75:0a:c0:2f:a0:00:08:6a:7c:34:e6:
cd:b3:ee:cb:d4:c7:38:56:28:f6:dc:5a:d5:fe:59:7d:41:3f:
91:cb:f3:66:31:b9:9d:01:92:24:a1:ca:54:82:98:24:fe:5e:
05:7d:73:07:e9:e9:d3:fc:c3:ab:8f:86:a9:93:9a:1e:16:92:
0d:74:6a:b1:e9:c8:03:36:cd:7a:49:ee:b5:8a:da:57:7a:ee:
f1:0e:51:87:46:dc:11:71:ad:de:21:bc:09:26:bc:d7:5d:b7:
eb:44:83:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:46:29 2025 by rpki-client