Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
File: iWqh8O1Flucz-LYtOeN7jeUIXtc.mft (raw, json)
Hash identifier: 55L2maXbpsrnZLNQowiiJamUWpiTSNRe9FFQq+S71Fo=
Subject key identifier: CF:91:21:DB:42:7C:6B:9F:E8:71:E4:72:EB:A6:08:A8:8A:1D:52:7E
Authority key identifier: 89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7
Certificate issuer: /CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7
Certificate serial: 019A503DA6F530B3EA15F8FCBB17B9F19FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 19:00:08 +0000
Manifest this update: Tue 04 Nov 2025 19:00:08 +0000
Manifest next update: Wed 05 Nov 2025 19:00:08 +0000
Files and hashes: 1: eVsPR_b5z2ja1nvgWZaFAJsxzV8.roa (hash: NL/nj7PiRruzzNoJXPrVqMifeH+fC4R4vqg0qPtnqLg=)
2: iWqh8O1Flucz-LYtOeN7jeUIXtc.crl (hash: UTXye8broc57oq6tHXeL4BC6/hzFwbma5nLKpNN+F4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:a6:f5:30:b3:ea:15:f8:fc:bb:17:b9:f1:9f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7
Validity
Not Before: Nov 4 19:00:08 2025 GMT
Not After : Nov 5 19:00:08 2025 GMT
Subject: CN=cf9121db427c6b9fe871e472eba608a88a1d527e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ae:4b:9d:37:d4:c1:7e:9b:cc:b3:c6:1f:13:
bb:98:3a:28:cd:ce:46:9e:9a:9a:48:77:ea:95:78:
ee:22:89:7d:f9:68:9d:6a:54:c1:13:af:36:d6:c5:
14:1c:68:00:31:08:1e:40:3c:b3:01:81:02:c6:d7:
28:76:1a:52:5a:08:54:c7:b8:42:7e:3d:0d:d4:fe:
be:a6:8e:e4:77:52:cf:a8:23:6d:14:cf:dd:a0:44:
cc:ae:9a:d7:69:c4:6b:f1:1a:39:a5:dd:f1:02:5e:
77:37:10:6f:2a:dd:ad:51:7c:64:bc:bd:f2:38:25:
3b:34:1d:c8:7e:1c:f7:c9:35:28:45:7f:45:43:05:
fe:b3:a6:e3:ae:81:0a:f6:d9:36:5d:55:b0:13:43:
04:bd:34:c8:38:11:90:99:85:2a:f2:c1:63:4c:0a:
e6:b2:22:27:ec:ba:1c:30:35:8a:c2:28:42:19:dc:
ac:80:c8:b8:a1:b1:41:a6:43:cc:3a:8c:18:92:ea:
fb:50:1f:b5:6a:87:12:2a:fb:5c:51:cd:c5:87:be:
c3:c7:c6:0c:2a:ae:12:ee:ab:fe:19:9f:2d:aa:f6:
df:38:03:5d:d2:e9:af:26:b3:bc:30:16:55:ca:39:
94:e8:65:c7:4e:ea:da:31:3e:63:d4:01:08:17:96:
84:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:91:21:DB:42:7C:6B:9F:E8:71:E4:72:EB:A6:08:A8:8A:1D:52:7E
X509v3 Authority Key Identifier:
keyid:89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:bc:6a:e1:e9:34:e1:fb:f4:bc:36:ae:36:b6:c7:bb:3c:1b:
40:fd:ab:9a:7b:a9:40:a5:20:ca:94:07:91:c6:30:f7:08:5c:
10:89:6f:bc:91:76:87:cf:fa:8d:f9:9e:ce:4a:f6:7d:1c:87:
11:e8:ee:eb:91:74:78:3e:f5:44:63:6e:1e:20:ef:2b:88:d4:
c1:c3:06:c7:74:16:c8:f1:8a:65:57:da:9c:d2:d8:6b:5e:b8:
93:34:78:7c:e5:4f:bc:5d:3d:b9:c7:52:d0:e2:04:3e:71:84:
98:8d:4f:51:8e:62:9d:24:57:f1:d6:78:b9:05:80:6c:78:b6:
83:cd:cd:4b:ae:e5:07:09:65:8c:3c:4e:98:ee:eb:4a:b3:bf:
6b:81:fd:19:48:d7:81:c4:07:d6:db:a8:97:b5:b6:7a:02:ed:
ea:b4:8a:3d:1a:e9:94:84:a6:5a:ba:f6:62:c0:b5:4f:15:76:
4b:9c:e4:c3:3d:b0:0b:8a:38:f3:6b:dd:10:e4:05:6e:20:f8:
98:dd:cf:cb:dc:43:32:8f:09:f8:39:fe:2b:1d:bb:5f:52:e2:
7c:0f:05:9f:eb:58:f7:0e:29:2b:bc:47:bd:ef:72:c8:1e:ae:
f1:3f:c1:df:b2:9d:77:d3:56:96:c2:15:e1:06:6a:13:81:97:
67:57:aa:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:40:37 2025 by rpki-client