Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
File: iGUv5lKWbXKKUnrubkPEhcaTn0U.mft (raw, json)
Hash identifier: AxBP8Ae10CDNU1Pu0IrUSh7qeG11LZ7MI7JdhBlgPmY=
Subject key identifier: 6C:5D:CF:07:FE:B0:3B:04:45:33:38:3E:E6:8C:72:A6:9E:B0:79:E5
Authority key identifier: 88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
Certificate issuer: /CN=88652fe652966d728a527aee6e43c485c6939f45
Certificate serial: 019A4E500CA74D7D897EAB9838254C478681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
Manifest number: 1431
Signing time: Tue 04 Nov 2025 10:01:00 +0000
Manifest this update: Tue 04 Nov 2025 10:01:00 +0000
Manifest next update: Wed 05 Nov 2025 10:01:00 +0000
Files and hashes: 1: 1b_wV0k49kuwRrhHplXiK2XiroA.roa (hash: RH2MIMTVkHxoiPuLQAUrE2Rqg6UxaLBroHReV0YDdhs=)
2: iGUv5lKWbXKKUnrubkPEhcaTn0U.crl (hash: D3eG6b/ehOr1+uJD5Oor3IYIQBnLuRtWa0IwL6QcNqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:50:0c:a7:4d:7d:89:7e:ab:98:38:25:4c:47:86:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88652fe652966d728a527aee6e43c485c6939f45
Validity
Not Before: Nov 4 10:01:00 2025 GMT
Not After : Nov 5 10:01:00 2025 GMT
Subject: CN=6c5dcf07feb03b044533383ee68c72a69eb079e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a4:8a:fb:a6:c4:50:75:14:50:6d:ed:c8:a5:
54:92:dc:20:91:e8:ea:9b:0d:3f:8a:15:14:23:fb:
85:90:b7:8c:33:83:b3:7d:69:7d:ab:ce:a9:f1:42:
9e:6a:c3:d7:20:97:bd:ed:f7:90:43:0d:e8:17:78:
26:64:76:70:20:9d:be:a1:b4:b8:d8:39:8e:45:19:
ee:b2:2f:33:2f:92:bd:49:09:46:23:c3:69:17:c3:
5d:7c:59:23:70:ea:24:f6:a0:47:a0:d6:c4:6f:19:
7b:a6:3b:d5:de:57:b8:7b:9a:62:bf:a9:23:c9:47:
d1:2f:c9:3b:05:b4:79:6f:00:ab:fb:1e:f1:b2:a7:
43:57:dd:58:6e:20:6f:98:c5:8d:8a:f6:3a:c3:aa:
77:bd:5d:3e:a4:69:aa:1d:97:23:26:ae:7c:32:bf:
dd:4c:48:99:d8:c7:1c:c9:4f:33:09:81:38:31:d5:
6c:5b:4b:fd:51:4c:a6:0d:4c:73:fc:b2:e3:31:e2:
c0:64:c7:fa:e7:08:be:63:b5:68:c5:63:46:c7:51:
78:65:05:95:6d:66:43:be:49:2e:ce:fc:86:36:0f:
06:19:ab:2d:12:da:fc:e4:4f:09:2d:82:ea:7a:c8:
66:3a:3d:fc:74:d6:56:ad:13:a5:5c:ee:21:a8:da:
9b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5D:CF:07:FE:B0:3B:04:45:33:38:3E:E6:8C:72:A6:9E:B0:79:E5
X509v3 Authority Key Identifier:
keyid:88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:3a:99:8b:69:96:4a:74:da:f3:6a:33:aa:68:d1:e8:0b:92:
56:e9:85:c2:64:01:02:26:85:78:c4:10:d1:ed:2d:0b:56:f2:
13:79:f7:87:e3:5e:2e:79:ea:57:ad:76:fc:d3:db:1c:37:d1:
c2:aa:56:50:a8:b0:6e:cb:5a:d9:9e:5e:f7:97:cf:86:60:06:
c6:ff:28:b8:8a:dc:3c:88:41:c9:e1:a3:f1:c2:26:1e:be:62:
05:b3:30:7f:8e:b7:4b:5a:25:75:f4:ac:94:98:a3:2a:4c:f4:
3b:03:a1:8b:af:22:3f:09:eb:0f:15:48:7b:70:fc:9f:f3:13:
ef:fc:89:a4:10:d8:f6:b0:d4:32:e2:1c:e8:db:cf:5e:68:fd:
cd:d3:3a:19:72:00:6e:7f:12:c0:3e:2a:aa:c8:83:e1:cb:76:
46:fd:05:76:85:87:be:65:0b:64:fb:e8:e9:a1:ac:ed:81:56:
e8:8d:23:20:6c:a3:bf:4f:6e:cb:9f:f5:56:11:79:8e:74:f3:
90:2f:87:37:86:96:46:a4:10:45:dd:57:9d:76:81:41:63:7d:
87:4f:08:ff:24:b2:c4:2a:b8:c3:a3:c2:5a:11:c5:ac:ee:e4:
57:eb:bc:77:93:b1:12:3c:36:b4:de:6c:7d:18:c1:f1:89:7d:
ba:41:92:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:07 2025 by rpki-client