Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
File: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft (raw, json)
Hash identifier: 7IcdnbKkSx8U8kcapB4GfgY8Ax2k6iaBURcEEJH0O5k=
Subject key identifier: 8E:10:EE:F8:26:BA:6F:38:9F:78:F2:FC:CA:73:C4:1B:BD:B7:2B:B5
Authority key identifier: 23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
Certificate issuer: /CN=230e9ac64510fa391846bb139ab52b8001d58038
Certificate serial: 019A4F62A24F3F6D74EE3DFC002DF4EBF017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
Manifest number: 13A2
Signing time: Tue 04 Nov 2025 15:00:55 +0000
Manifest this update: Tue 04 Nov 2025 15:00:55 +0000
Manifest next update: Wed 05 Nov 2025 15:00:55 +0000
Files and hashes: 1: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl (hash: 8QCj8tiP/1s8OzJmdpMZhV5RjVs7Ni4hFhdkIkiy5wY=)
2: UoyH2jgw3TjRmBGXcoIbjkHpXYk.roa (hash: 7Hn5Nml4HR5xVhJraj44LXb5goEfvTP/sHQKgiuE26I=)
3: pSCPepTx67SC5l3Ed1hdUBnE5IA.roa (hash: MWvK8q7nznQKhnSv15ZjQ+g2Xqx0IxpC4fGczjIPPSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:a2:4f:3f:6d:74:ee:3d:fc:00:2d:f4:eb:f0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230e9ac64510fa391846bb139ab52b8001d58038
Validity
Not Before: Nov 4 15:00:55 2025 GMT
Not After : Nov 5 15:00:55 2025 GMT
Subject: CN=8e10eef826ba6f389f78f2fcca73c41bbdb72bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1e:0c:35:a5:c0:b6:7a:7c:44:aa:e8:d5:ab:
56:81:f2:a5:6d:3d:8d:ec:3e:92:9d:dc:7b:77:fb:
80:f2:d1:31:58:fb:74:34:af:1e:36:e8:04:2f:a0:
47:db:6e:19:90:2f:d4:b7:44:e7:7f:da:f6:de:60:
9f:23:72:af:56:34:4b:3e:dd:cd:fb:5a:0f:95:7c:
45:3e:02:ec:21:04:05:b9:b0:15:8e:ef:cc:c1:17:
d6:ce:ad:9f:6c:d4:93:5c:b5:0c:86:80:1e:3c:5b:
da:ff:58:96:0a:0f:60:73:80:d7:69:02:5c:9c:c4:
93:1f:30:f8:5f:6c:73:4b:14:c0:fe:db:53:c3:44:
48:6e:10:49:78:df:e8:7f:50:87:ab:52:50:71:fd:
41:ef:fe:4c:d7:0f:83:07:84:52:e1:82:f1:5f:05:
11:d2:8f:76:1c:51:34:25:19:29:d2:87:5e:a2:07:
ac:92:d3:4a:25:ba:08:e7:9b:7b:b5:0e:8a:ed:a3:
94:29:be:57:70:9b:d2:dc:ef:c8:3e:19:96:cf:7e:
9d:23:67:92:d3:4a:44:be:7d:cc:5e:9b:b6:bc:38:
e2:93:7f:cf:1a:6c:07:65:f5:d8:e5:b5:c7:f6:0f:
e4:bd:91:dd:2b:66:87:38:86:31:3e:23:ca:aa:cf:
21:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:10:EE:F8:26:BA:6F:38:9F:78:F2:FC:CA:73:C4:1B:BD:B7:2B:B5
X509v3 Authority Key Identifier:
keyid:23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:a7:e5:39:b4:bb:e1:4e:50:69:25:ef:93:83:30:b5:03:13:
42:0d:60:c7:70:81:df:eb:f1:68:b2:b4:9f:7b:2f:16:93:f1:
18:0e:5b:70:e0:03:45:2c:23:9d:23:7e:de:2d:ac:05:74:17:
19:95:ff:0a:6a:fe:ee:20:c2:4d:11:52:ad:f5:2d:de:8a:5b:
82:b9:f5:88:2e:67:89:1a:3b:3e:09:19:32:0c:57:9b:a1:fc:
4d:01:af:61:17:38:1d:c5:aa:f9:10:45:79:10:d9:6f:3b:95:
5d:23:86:bf:28:75:2d:15:86:31:70:11:4b:80:f3:53:ee:8a:
28:75:55:0f:3e:6e:a1:65:15:7a:5e:62:c0:9a:05:ac:c3:6d:
2d:43:82:1f:78:65:02:ad:b4:4e:2a:95:5f:f9:69:db:8d:70:
f8:2b:c8:ea:55:26:ce:48:d3:f4:d4:0b:a8:31:55:59:30:63:
5e:23:be:82:6e:f0:4d:93:b2:18:d6:cf:23:84:29:9b:8a:37:
15:9e:9c:85:1d:72:1c:68:34:ac:c3:14:29:9a:0e:86:af:2f:
1b:f1:c8:dc:ff:25:16:e4:28:36:5e:92:ee:3e:e0:a9:c1:da:
6e:e0:f3:71:de:5e:c8:9d:3f:dd:c8:b5:6d:54:42:72:e1:53:
0d:2d:5d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:54 2025 by rpki-client