Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
File: iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft (raw, json)
Hash identifier: 0cci2OZ8te8CDCiCJnh03fZLVdg538N91l0du5CEs8I=
Subject key identifier: 13:D0:18:00:36:DB:F7:8F:BB:48:D3:2F:E7:A3:12:25:32:DF:26:E6
Authority key identifier: 88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
Certificate issuer: /CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Certificate serial: 019A522CD7C755BDCA4250D575AA4825703A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
Manifest number: 1662
Signing time: Wed 05 Nov 2025 04:01:01 +0000
Manifest this update: Wed 05 Nov 2025 04:01:01 +0000
Manifest next update: Thu 06 Nov 2025 04:01:01 +0000
Files and hashes: 1: Qv6t4wP7j-uLsxcfTWHv2ZFQWD8.roa (hash: eR47NrGWjMdNEp9FBa07vBAWwdqKIDeSc8imYvJOwfI=)
2: iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl (hash: tXb2Gauwq+y93lEU17T1dS4ENMw5hK0iWzYyQp5/hZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:d7:c7:55:bd:ca:42:50:d5:75:aa:48:25:70:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Validity
Not Before: Nov 5 04:01:01 2025 GMT
Not After : Nov 6 04:01:01 2025 GMT
Subject: CN=13d0180036dbf78fbb48d32fe7a3122532df26e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:00:b8:4a:5f:78:f1:53:60:d1:77:fe:91:99:
96:c9:18:28:86:fa:49:60:e3:c9:69:91:25:33:ba:
6f:aa:ff:90:9f:d3:69:8d:75:9c:6f:6b:fd:5a:39:
35:ca:4a:73:6e:54:1d:6b:ae:63:c9:c7:7c:ba:f2:
57:3f:f6:f2:5f:ac:13:f0:54:f0:14:13:07:72:99:
51:b9:92:ca:53:d9:9b:00:d9:a8:be:a1:63:4d:4d:
d7:f4:80:1e:28:b3:b6:78:bb:0a:bb:c8:89:8a:6a:
2d:61:3e:56:c8:25:ed:fa:83:0f:48:9a:c5:68:b2:
88:bf:a0:e8:b1:54:59:2c:14:b5:29:af:e7:d7:93:
bd:12:d3:e6:9b:d9:f4:29:e5:ce:51:b7:6b:51:b7:
2c:49:cc:91:cf:37:c7:24:df:86:e0:2b:80:47:bf:
7f:47:15:18:86:fd:f3:67:12:50:6b:3b:d5:c2:77:
e1:3d:35:47:8f:3a:da:89:6a:08:f6:4c:2e:ca:f9:
f5:da:dd:b4:5d:c0:6d:2c:e2:04:8b:dd:d6:d7:74:
f4:48:e8:8e:eb:84:cb:ad:70:f1:71:dd:7b:a8:e6:
76:ce:3f:d1:c6:b5:d6:e8:4f:da:32:57:71:c8:4a:
35:55:25:a0:79:77:a4:af:35:04:45:46:11:42:92:
5e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D0:18:00:36:DB:F7:8F:BB:48:D3:2F:E7:A3:12:25:32:DF:26:E6
X509v3 Authority Key Identifier:
keyid:88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:6f:cc:f5:78:b3:9e:01:20:98:4c:38:b9:c8:ff:41:92:a6:
f2:82:a3:d2:4f:54:7f:1f:80:d7:4f:3f:b4:4c:c8:62:5c:c7:
d8:a6:d4:d9:c9:94:03:fd:aa:2c:dc:e0:f6:31:a4:6e:22:b2:
9f:0c:28:0a:95:fe:31:bd:80:22:4e:63:59:ef:b0:8d:53:37:
b4:e9:85:78:d6:7f:80:27:27:8a:3b:f5:2c:02:17:af:ff:11:
1b:ed:07:8b:2a:e6:0c:c6:c1:a3:30:ba:dc:98:0c:ba:fc:0d:
6e:77:65:71:7f:59:ea:bc:29:f8:d1:8e:59:b3:18:53:99:f0:
6f:4d:14:bd:9e:81:e4:40:a5:c1:c2:b2:08:96:af:a5:b2:39:
eb:13:25:3d:8e:cc:f9:62:c5:1e:19:7f:c6:9b:31:6f:61:16:
62:c6:6b:b3:b0:c5:a0:16:0c:13:52:5a:cb:a6:f0:bb:97:af:
3c:b3:9c:50:70:1b:69:6c:ad:47:fc:5f:f5:be:61:d6:16:59:
98:ff:b5:9a:ef:a4:d6:ad:c4:b7:da:92:e7:66:48:87:8a:38:
e8:88:f9:9c:4f:56:5a:c4:d3:5f:f4:20:e1:2e:a8:d4:e7:83:
d3:32:6e:ec:0d:36:e0:1f:86:e9:be:7d:7d:45:03:64:19:84:
61:5f:41:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:28:02 2025 by rpki-client