Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.mft
File: iOiCv5ZPcJLEPNz3VQ3pViwmoCg.mft (raw, json)
Hash identifier: E89ho+9QSI0o8xr6nFCRuiZjWZAEpxKDl/IAmOhERQw=
Subject key identifier: 21:18:91:68:AD:52:89:69:BB:42:DB:EF:72:6D:D1:7C:92:97:35:BE
Authority key identifier: 88:E8:82:BF:96:4F:70:92:C4:3C:DC:F7:55:0D:E9:56:2C:26:A0:28
Certificate issuer: /CN=88e882bf964f7092c43cdcf7550de9562c26a028
Certificate serial: 019A4EF4140104FE5912AA96F117F9B2F0B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.mft
Manifest number: 035D
Signing time: Tue 04 Nov 2025 13:00:09 +0000
Manifest this update: Tue 04 Nov 2025 13:00:09 +0000
Manifest next update: Wed 05 Nov 2025 13:00:09 +0000
Files and hashes: 1: UZVUY94sqKLEh0icWoOQh0bntwI.roa (hash: vpvG9SY3H1VjvlXeI35sSNyZFm3fdFFooAVPM0TU2c0=)
2: iOiCv5ZPcJLEPNz3VQ3pViwmoCg.crl (hash: VCmm+PV1/Nezl4q8Uu6ZO9VT/EI1Qs0zO1KAqzSatMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:14:01:04:fe:59:12:aa:96:f1:17:f9:b2:f0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e882bf964f7092c43cdcf7550de9562c26a028
Validity
Not Before: Nov 4 13:00:09 2025 GMT
Not After : Nov 5 13:00:09 2025 GMT
Subject: CN=21189168ad528969bb42dbef726dd17c929735be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:93:64:b4:21:3d:f7:26:1a:52:f2:b1:7b:32:
ee:2f:63:44:7c:ad:64:dc:66:53:a7:a1:8d:98:74:
5c:f4:d6:9e:ff:e9:cb:07:52:98:39:b0:bd:2c:79:
f2:90:a1:0b:6b:1e:6f:7c:c4:ea:9a:a0:e4:8f:07:
9d:3e:f3:f6:b6:a7:cc:09:94:5b:9a:06:e4:94:07:
2a:c4:0c:8c:5b:43:31:df:d3:9d:99:74:c4:e6:c8:
db:07:b3:f1:c0:cc:6e:8a:90:15:47:22:43:d9:13:
cd:56:31:2d:45:66:d0:b0:87:a1:ef:54:4f:25:e2:
8e:ca:da:03:45:f0:89:df:95:0e:5c:81:5b:b7:4e:
ae:cd:19:25:9b:0f:86:d4:a1:1c:d5:8b:14:d7:a7:
26:fc:b6:1d:fa:2a:8c:be:67:ad:fa:12:68:45:ee:
7e:9a:ed:38:53:df:c6:23:4b:6d:e8:fb:20:3f:48:
45:a3:c7:76:99:c1:6f:a7:2e:b2:fa:3a:52:cf:b1:
0e:55:6a:14:17:14:d0:69:87:9f:aa:82:9b:14:f1:
c9:81:33:30:67:5a:18:70:87:85:96:83:fa:8e:7b:
ca:11:d6:10:10:dc:c8:78:1a:4b:3f:9e:25:7a:9f:
62:39:58:6d:55:da:a3:27:31:f8:98:03:c4:d4:0c:
b3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:18:91:68:AD:52:89:69:BB:42:DB:EF:72:6D:D1:7C:92:97:35:BE
X509v3 Authority Key Identifier:
keyid:88:E8:82:BF:96:4F:70:92:C4:3C:DC:F7:55:0D:E9:56:2C:26:A0:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c4:d1:b2:c0:d8:fc:ae:10:31:03:83:e0:31:71:b2:2b:9e:
cd:ae:6b:09:d1:87:d1:bd:8b:56:a0:25:d3:ba:81:02:75:bc:
fe:aa:00:74:ee:54:fa:fc:b9:2d:3a:67:44:33:98:84:30:f3:
a7:5c:ee:12:f4:fc:75:2d:27:6c:b0:67:9f:12:4d:5e:15:08:
b6:e0:e2:f1:04:59:4f:61:f0:77:a3:b8:06:34:b7:3d:e3:e3:
2f:90:04:7a:07:de:a3:5b:13:f3:84:16:d6:fd:1c:ee:31:f4:
53:26:93:ca:91:86:8e:d3:8a:f5:a9:9d:c8:72:18:de:9d:a1:
52:b7:48:95:c9:13:ed:07:fa:09:df:d8:15:f4:c9:28:ae:bc:
d9:70:00:00:3e:51:2a:bf:32:1a:ff:94:13:0c:72:27:83:df:
18:45:13:8a:a1:54:02:c1:8e:40:be:24:87:98:58:bf:c9:a5:
1b:06:ae:0c:49:70:59:01:e1:12:27:76:cf:5b:a5:77:56:1f:
24:a2:07:65:08:9d:4b:42:af:44:2d:47:95:60:3a:92:38:d9:
8e:a2:e5:86:62:80:a4:68:75:9e:75:06:bb:93:2f:39:f1:17:
3f:c9:56:24:c6:8a:04:f3:05:0a:01:aa:08:86:3a:5f:b1:a8:
00:96:34:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:41:47 2025 by rpki-client