Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
File: IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft (raw, json)
Hash identifier: eCZlj9bm4CHOgLxaxtrKDpGz18SsinM0kbPq6sUshmg=
Subject key identifier: 6C:CB:6D:8F:E4:B7:57:82:78:BC:B6:6B:8B:3C:E0:D0:84:CE:B3:FB
Authority key identifier: 22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
Certificate issuer: /CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Certificate serial: 019A4E8690BFD61DAF45DA3B9FD6D906971C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
Manifest number: 12EA
Signing time: Tue 04 Nov 2025 11:00:32 +0000
Manifest this update: Tue 04 Nov 2025 11:00:32 +0000
Manifest next update: Wed 05 Nov 2025 11:00:32 +0000
Files and hashes: 1: 1-nMAZc-5nMETLGR20qQodJXwzWs.roa (hash: eYA8AUyf83NJ/62tL4Gk8TX1qXmPj/b3h3AkumPPTzQ=)
2: 7PCtQ5R_w0udczv79LfUn6Szs8E.roa (hash: UeOrmKK9TH1L4E/SbRA8TvqgXT96VYfRkeusRGYVXmU=)
3: IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl (hash: 9CQphrKPQ3ciLMygj2XGEZX2uau6kMBMxpeRyZkJxQ0=)
4: ayyHxivjLEoLFlxHs79jNQaOed8.roa (hash: QQS+fGK9P+7C6sfs4vGiJ9dFO6N+wnkemR+q8OHEfUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:90:bf:d6:1d:af:45:da:3b:9f:d6:d9:06:97:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Validity
Not Before: Nov 4 11:00:32 2025 GMT
Not After : Nov 5 11:00:32 2025 GMT
Subject: CN=6ccb6d8fe4b7578278bcb66b8b3ce0d084ceb3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d8:fe:f6:5a:bf:70:11:70:bb:b0:11:4c:5a:
6e:a9:54:36:20:48:d5:57:f8:67:9c:0d:a7:19:ff:
12:5d:7c:78:75:71:d7:01:9c:08:f0:88:8a:9d:0f:
9c:75:b9:b5:4c:9b:57:97:56:67:e7:b1:63:4f:4c:
cb:18:ff:13:97:1f:eb:c0:85:cf:99:b0:a9:05:1d:
df:62:21:86:98:d0:79:4f:a0:a8:40:dc:de:71:cc:
3a:2c:f3:ee:05:54:6c:e3:db:2a:a1:80:62:84:00:
93:26:af:24:ba:91:1f:2e:37:f6:b3:77:bd:c7:71:
00:e5:2e:d2:18:94:fa:12:28:3d:7b:25:17:d9:49:
55:ec:12:11:7e:9a:ca:31:9d:31:74:a9:29:c2:dd:
60:50:3d:fd:22:a6:b2:4c:b2:ae:cf:8e:df:c9:1a:
c7:96:d5:90:ad:a8:9a:b7:42:99:23:7e:a2:4b:83:
97:43:df:b7:64:fe:a2:dc:b1:0e:22:e8:87:81:8f:
86:91:04:1b:52:66:ab:4c:73:d7:0b:c2:46:88:05:
e7:ef:de:b1:c7:76:77:de:16:dc:ff:04:70:95:dc:
de:21:2c:f5:61:2f:63:bf:a1:0f:bf:87:9b:46:54:
36:a6:59:e4:99:3b:d3:b6:21:b5:7a:5a:cb:06:21:
c3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CB:6D:8F:E4:B7:57:82:78:BC:B6:6B:8B:3C:E0:D0:84:CE:B3:FB
X509v3 Authority Key Identifier:
keyid:22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:26:83:25:09:f1:3d:61:31:63:0b:31:f2:20:ab:4d:fb:8f:
e8:f9:e5:32:bf:08:c6:3b:09:a2:af:59:26:54:59:60:89:a0:
b5:64:54:a0:b6:8e:5a:c8:4e:a1:bf:54:d3:03:a9:e5:9d:d5:
e5:0e:5d:ea:2d:db:62:63:4e:ee:ee:96:35:1c:82:24:8e:ab:
95:bc:3a:43:58:63:e4:bf:f1:a7:9f:12:cc:90:ff:79:90:d4:
b9:9a:10:de:f7:58:d5:57:bc:90:bc:4d:97:1d:e1:49:e1:11:
44:36:0f:e4:6a:9f:a9:2e:d6:2b:06:08:23:c2:ee:ac:a4:b6:
d7:ee:24:85:0d:20:b7:9c:d0:e0:73:79:3a:00:81:e4:d0:d8:
11:9b:a5:08:6c:19:40:38:b9:44:bb:aa:05:db:70:61:f8:13:
f7:b3:33:a6:3b:c5:bf:8e:58:c0:b1:bf:ab:b7:9e:9e:4d:80:
24:c9:ab:95:dc:69:74:f1:2d:f3:fc:df:63:08:73:21:e0:a0:
3e:30:15:49:55:25:75:a9:31:c4:8d:db:b8:8a:10:1f:97:76:
a9:87:0a:d7:cc:5c:16:57:47:00:54:04:ff:c8:b9:f5:59:b3:
0e:85:d0:6e:bd:5c:79:0a:d2:e7:26:cd:b0:5c:ba:0b:6b:03:
e1:ea:d8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:54 2025 by rpki-client