Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
File: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft (raw, json)
Hash identifier: yjHdUd79rhI0Dtti/+0f40KVHcp2ndgoc5vL/23f8L0=
Subject key identifier: 71:27:13:A1:F7:15:A9:79:F6:A7:94:52:C1:8A:3B:42:B6:2C:DF:71
Authority key identifier: 89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
Certificate issuer: /CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Certificate serial: 019A5075306F3F582650BF83123EFE095C9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
Manifest number: 16E4
Signing time: Tue 04 Nov 2025 20:00:48 +0000
Manifest this update: Tue 04 Nov 2025 20:00:48 +0000
Manifest next update: Wed 05 Nov 2025 20:00:48 +0000
Files and hashes: 1: QdF_t5GM6hFZDI7Ycz1kPbhRE0s.roa (hash: gZA+5nFU0e3J+dZOb0p/gBtvIfB/51rVDEOTe4nlfP8=)
2: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl (hash: 2EZ3Go4VO5vXEjiVlBlQWy8VCnFlGS4LumU9sPb/YGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:30:6f:3f:58:26:50:bf:83:12:3e:fe:09:5c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Validity
Not Before: Nov 4 20:00:48 2025 GMT
Not After : Nov 5 20:00:48 2025 GMT
Subject: CN=712713a1f715a979f6a79452c18a3b42b62cdf71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:15:4b:da:5a:53:50:8a:ae:fd:91:47:7e:ea:
e8:c4:4a:9a:3e:d8:fb:08:c5:b5:b8:92:45:07:7f:
8d:a7:b3:30:0e:7e:a1:8f:ca:a1:ce:10:41:0e:7a:
e9:fb:78:2d:ba:32:bf:dd:ab:49:ef:25:a6:59:fd:
e2:b8:1a:09:65:77:90:25:7e:7a:05:fb:18:1a:22:
cc:8e:85:93:eb:94:42:e5:07:bf:7f:b8:7b:80:85:
b9:c0:51:71:9e:45:6e:8a:d4:d4:50:42:a5:4b:47:
5b:ae:53:64:dc:f6:87:f4:3e:91:b5:13:1c:75:81:
1d:81:0f:04:f0:82:40:d6:17:de:46:6d:dd:fb:f7:
40:c6:a1:2e:1e:32:af:25:1b:ac:e7:d4:ef:9d:a2:
68:f0:4e:1d:b0:72:cc:f9:56:d9:79:c8:4d:74:6f:
b1:fe:cf:22:47:ba:c2:6d:95:f6:87:14:b9:a0:62:
14:85:46:b5:93:08:7f:5f:40:4d:ff:93:a8:16:27:
49:57:b9:d5:31:7c:9e:32:10:7e:94:24:65:b4:ad:
2a:55:48:b5:4b:ea:78:20:f9:50:2d:fa:dd:d5:25:
66:29:ad:fe:7b:da:d9:ea:6d:b2:a7:3e:b3:a9:8c:
3c:38:ac:cc:7e:14:6d:d0:51:ed:da:6a:ac:2c:a0:
49:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:27:13:A1:F7:15:A9:79:F6:A7:94:52:C1:8A:3B:42:B6:2C:DF:71
X509v3 Authority Key Identifier:
keyid:89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:8d:3d:ce:48:cd:39:41:80:91:8f:39:c5:f5:68:c4:93:c8:
e6:ee:fb:b0:ae:74:ad:ec:fb:b1:c9:c4:8f:9f:aa:26:39:1e:
92:f8:be:06:89:ab:b7:bf:99:a8:9b:d6:0c:4b:18:e0:a7:2e:
56:c8:68:fc:1e:a7:e7:38:73:03:72:f1:64:0a:bb:d0:e5:08:
cd:52:57:d7:bd:c6:60:ef:33:5c:e3:59:5d:48:19:4e:aa:7c:
3c:28:48:40:8d:e3:12:2f:bf:64:f5:1a:00:5a:1b:de:54:06:
72:59:5d:43:59:64:2d:33:23:67:6e:4f:43:bf:d3:43:d4:59:
0a:3f:11:10:58:8c:95:e0:42:e8:73:5a:84:d5:4c:b8:1c:fc:
68:a1:60:87:96:d9:30:78:1f:b9:94:ba:ef:94:ab:7a:a1:04:
b9:b8:5e:43:37:c3:cb:db:3d:28:3b:b2:a9:f8:47:19:6d:39:
d3:ae:f5:b0:b9:50:76:ba:ca:b1:cd:62:e3:e4:ac:63:bc:58:
f8:b8:2e:ad:33:24:a1:8e:af:f2:81:9d:69:e5:d5:02:4b:ca:
32:b2:e0:78:e7:47:f8:26:4d:26:52:f4:82:52:28:9e:c3:d8:
13:01:4a:ff:5e:ad:6c:ae:d3:1a:cb:3c:6c:14:86:13:a1:86:
d7:12:1e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:44:58 2025 by rpki-client