Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
File: iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft (raw, json)
Hash identifier: +j1qyQJId3U2wrLemB4/XuOH87PrSBBRFlCaumCk4BQ=
Subject key identifier: 22:2B:61:D4:04:5D:AC:08:D9:EC:B3:95:25:BE:30:6C:10:90:DF:68
Authority key identifier: 88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45
Certificate issuer: /CN=881ab180cb3517186221b3999b08b83af4f66945
Certificate serial: 019A545182F5FC185C39BF92D924C13EA60B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
Manifest number: 05FD
Signing time: Wed 05 Nov 2025 14:00:19 +0000
Manifest this update: Wed 05 Nov 2025 14:00:19 +0000
Manifest next update: Thu 06 Nov 2025 14:00:19 +0000
Files and hashes: 1: iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl (hash: ZITOkM60Z6yZwJIYod39Ix1F9WnOvA7LQOELfRPS3no=)
2: vy5zTXe1FQxKmoVnLtT-YONwy5w.roa (hash: AqKcisSO89b2UHYN+H37mx/RlCQTo8dhRQYzWSzGyh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:82:f5:fc:18:5c:39:bf:92:d9:24:c1:3e:a6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881ab180cb3517186221b3999b08b83af4f66945
Validity
Not Before: Nov 5 14:00:19 2025 GMT
Not After : Nov 6 14:00:19 2025 GMT
Subject: CN=222b61d4045dac08d9ecb39525be306c1090df68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8d:05:92:b3:ad:b1:a4:05:db:f8:d6:8f:9a:
c7:f5:f0:bf:3a:d5:d8:97:81:b4:13:d0:7f:ff:c4:
78:a6:49:ae:60:47:5e:86:95:e6:2f:ef:27:c7:df:
77:ed:d4:30:61:95:4c:77:05:f9:9d:43:f1:40:7f:
81:c0:1f:d1:4c:80:0e:9e:22:76:fd:29:4e:29:fa:
01:a7:79:1d:df:7e:d0:f7:86:b4:82:d2:e7:7c:ff:
05:23:c9:28:76:73:07:6c:d3:d9:1d:0c:95:7f:c6:
7c:00:f5:fb:f2:57:ce:13:fe:5b:1d:c1:4f:71:b8:
ff:c1:48:c1:cb:15:25:53:ae:39:4a:cf:96:d7:33:
10:4c:c8:8f:02:9e:9c:0f:42:01:16:22:75:90:76:
39:9d:21:13:7c:52:df:aa:39:e1:13:7e:f3:11:54:
a9:c6:97:40:f9:b4:4b:aa:ca:34:b3:6d:38:ec:68:
c6:72:d4:8a:f0:a3:8b:bc:88:a1:b7:38:05:ad:d9:
ba:e1:d6:58:5e:9c:56:2b:a0:d9:19:1d:1b:dc:07:
ea:74:38:cb:c2:32:f6:b2:13:f3:fb:bd:7a:af:a8:
86:d8:ea:09:14:5d:36:4d:dc:eb:4b:2a:22:32:13:
9c:90:33:35:b1:2d:95:47:10:d3:85:0d:63:30:8e:
a4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2B:61:D4:04:5D:AC:08:D9:EC:B3:95:25:BE:30:6C:10:90:DF:68
X509v3 Authority Key Identifier:
keyid:88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c2:f8:41:6f:a0:73:38:a2:75:69:f4:92:2e:3d:5e:50:12:
78:eb:6b:64:f2:63:c3:e1:42:ee:12:07:82:2d:f6:b9:d6:78:
4b:3b:f1:ee:44:74:dc:2a:08:01:04:bd:52:24:fd:1f:ef:f4:
4d:e3:75:cf:1a:50:5f:bc:2f:0f:1c:2d:95:2c:37:c6:80:07:
84:0d:36:2e:74:fa:c5:d3:50:2f:42:6f:f9:a4:3d:86:5c:2c:
69:5a:e9:8d:4c:cb:62:16:5d:5a:b5:13:9c:3f:eb:c0:6e:6f:
a0:25:82:b4:bc:95:fb:43:f8:b1:57:a5:d2:d9:e9:62:ed:96:
9a:14:2a:9d:4d:25:63:1c:9b:df:31:ca:db:a0:04:06:9a:2f:
07:50:4c:23:86:90:9b:09:3a:57:1e:96:c6:8e:5c:a9:e0:3e:
52:af:2d:04:f5:f8:13:44:cc:03:02:07:79:21:57:d3:48:3b:
00:12:d5:dd:98:25:99:e0:a0:b5:22:4f:c6:a4:38:d0:dc:4a:
16:47:4f:32:ce:70:7f:67:52:d9:3c:ad:be:71:00:8a:82:c7:
37:1e:42:bb:2e:91:7f:69:81:3a:8e:20:1e:d7:80:dd:03:7c:
98:77:a2:df:e8:e2:f7:d6:3f:9a:e2:bb:2f:64:fb:f3:cd:22:
5f:49:cd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:41:45 2025 by rpki-client