Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
File: ieXrHhIJiXh0XVQNypbP8N5HBNo.mft (raw, json)
Hash identifier: brRYARTeHsNM+tqBNLA4LGomlCKFC4xFekE1kMHzOHs=
Subject key identifier: 99:78:32:C1:5B:88:2D:BC:2F:9E:7A:7B:58:B8:E5:7F:40:91:40:42
Authority key identifier: 89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
Certificate issuer: /CN=89e5eb1e12098978745d540dca96cff0de4704da
Certificate serial: 019A54F6C26287EEA6C1AD68119349C7A4E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
Manifest number: 0B85
Signing time: Wed 05 Nov 2025 17:00:49 +0000
Manifest this update: Wed 05 Nov 2025 17:00:49 +0000
Manifest next update: Thu 06 Nov 2025 17:00:49 +0000
Files and hashes: 1: ieXrHhIJiXh0XVQNypbP8N5HBNo.crl (hash: bqmuG58PXHZd8KvcNx4EJY9vPcyGqYXjRiZY0Tz5tvw=)
2: l-HFEGYP57VmF8aDDh7--ZbJBDw.roa (hash: z6foBKVqU7T5Yu/Dwks8ZalWU/MYlRsXoQCU7GPCUOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:f6:c2:62:87:ee:a6:c1:ad:68:11:93:49:c7:a4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e5eb1e12098978745d540dca96cff0de4704da
Validity
Not Before: Nov 5 17:00:49 2025 GMT
Not After : Nov 6 17:00:49 2025 GMT
Subject: CN=997832c15b882dbc2f9e7a7b58b8e57f40914042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:00:74:ca:26:76:e6:67:84:96:2b:22:a8:c6:
92:b3:4c:fe:d6:b9:e6:42:81:06:61:98:02:26:ac:
d0:8c:9c:63:23:93:70:0b:02:a0:94:be:ff:8e:c5:
00:3d:3d:3b:5d:35:d7:84:db:ac:f3:fa:15:b2:ca:
f6:12:fc:4a:78:86:7f:45:62:1b:4b:4a:14:8e:9e:
a5:f9:83:a6:44:13:bc:20:cb:e8:ea:e4:ea:cf:2c:
b0:bd:5e:d6:8d:19:4a:04:d2:47:f7:1d:61:a9:0e:
b5:e9:58:96:fc:86:e9:b0:31:b9:27:9a:ba:64:94:
da:51:5d:40:66:7c:d4:8d:39:9b:fd:86:62:52:76:
b9:a6:b1:01:32:f6:00:a0:46:b4:7a:87:e1:90:33:
da:f5:48:16:36:b0:19:1c:5d:db:11:6b:1d:4d:78:
07:3f:46:7e:e3:f3:72:1d:d9:70:e6:9b:fd:b3:ce:
7c:34:f3:f3:fa:66:ef:bb:40:0d:19:55:5c:ce:2a:
5b:24:ef:4e:f7:ed:c3:6f:80:a2:82:3f:b5:ad:1a:
f6:ff:60:a3:a1:7a:43:7d:bc:da:2f:49:72:12:6b:
ba:9d:e1:5b:01:65:18:6d:4f:fe:3c:f7:7f:c4:eb:
49:37:a7:06:08:f0:8e:5d:e9:a0:07:df:d3:8f:e7:
35:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:78:32:C1:5B:88:2D:BC:2F:9E:7A:7B:58:B8:E5:7F:40:91:40:42
X509v3 Authority Key Identifier:
keyid:89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:63:fc:ce:35:c8:cf:cd:37:62:2a:f8:dc:ce:01:25:13:99:
62:aa:10:85:43:57:24:d8:83:02:08:e8:58:0e:0c:14:58:4e:
4f:6e:fb:5f:c0:ec:f6:df:9b:43:28:8e:ad:bd:04:9f:3e:8b:
a4:44:48:98:e5:56:34:8f:f5:18:f1:8a:3d:45:9f:90:c9:0a:
4e:f5:67:83:9e:05:d2:5c:fd:5f:97:d3:f0:7c:a4:e4:ff:3f:
73:d6:dd:b7:d0:98:78:25:32:0f:94:74:a2:0a:5e:71:e4:62:
c2:a8:61:a6:1a:b8:47:07:ca:f6:d4:83:16:9f:6d:f6:68:91:
a4:41:bf:92:8d:49:cc:da:ec:93:55:23:7e:de:56:3f:50:92:
bc:8c:01:7f:40:cf:a5:72:bf:3c:86:af:e1:0a:2d:90:30:80:
66:2a:bd:f6:bf:77:58:bc:df:f1:48:69:a4:22:49:75:d4:c5:
5b:81:8d:64:b6:ef:d0:b3:44:67:ca:16:0a:1f:ab:00:ee:23:
40:ea:cf:b1:5f:3d:17:6b:a7:76:9d:48:80:ca:5b:3f:00:41:
5c:36:59:8a:de:27:d0:cd:37:21:82:64:16:d1:f2:4f:6d:0c:
88:27:0e:2f:94:07:ec:c2:82:98:bd:bb:a9:21:bf:a9:d9:c3:
9b:b0:99:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:35:36 2025 by rpki-client