Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
File: iqtMDPIcGj1upBBoy-kIvjiORQo.mft (raw, json)
Hash identifier: b57Nu+pcvTJUWqO6Xst7qR1AWNFcSfrYioTGMyaaS6E=
Subject key identifier: 22:A1:DA:EF:1A:B9:1D:A2:26:FE:6A:D6:55:D6:80:C5:32:F5:9C:BF
Authority key identifier: 8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A
Certificate issuer: /CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
Certificate serial: 019A4D3D262CECC75EC1AC78B3172FA9A395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
Manifest number: 044F
Signing time: Tue 04 Nov 2025 05:00:44 +0000
Manifest this update: Tue 04 Nov 2025 05:00:44 +0000
Manifest next update: Wed 05 Nov 2025 05:00:44 +0000
Files and hashes: 1: G350oN6xck9sDuFPco_m0pUGJ-4.roa (hash: lAZMvwW39peHPp7Gi+NQnv+PV4aVrgoRzPsjZkOfCAA=)
2: KNoplKbnalbBlNJ0HrGiOS5fwgk.roa (hash: 6g25L6YriR7F4NqmIjLUqgHXTaSIa9NMu6Z6ggsvzHE=)
3: alNy-myxrA734TUoeZ1JVeikh6c.roa (hash: OCkDLXElKJB9eMUhsdq5dMT5WhX6caAwH3DuhC8oZvM=)
4: dQ-UnjUf_zrF6QrM_x6OnxYwXrs.roa (hash: lmcAQBoAG4rGhrHwCQpsyMirWvdOFHnh3mHdkplTacE=)
5: iqtMDPIcGj1upBBoy-kIvjiORQo.crl (hash: R2hIMC88m1C387w7hyLsZc+GBUCXwb4U9vaqxREF1X4=)
6: o6gIOFd94HWkz0C7qKDElB9ddLg.roa (hash: O6hiQL5dtUMOxfO7I5/Qs8GG3APxd+JEX/g4sJbBrHE=)
7: t-24rH7-JcWRQl10GG2TwvUWpfw.roa (hash: Q+PFhb4BxvMEH8mNwldbOzxcrgHXdHD5grZaE0hgfdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:26:2c:ec:c7:5e:c1:ac:78:b3:17:2f:a9:a3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
Validity
Not Before: Nov 4 05:00:44 2025 GMT
Not After : Nov 5 05:00:44 2025 GMT
Subject: CN=22a1daef1ab91da226fe6ad655d680c532f59cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:39:fc:eb:55:71:32:4c:82:42:a0:06:be:64:
5f:20:57:b3:87:e2:92:75:48:74:f1:42:6a:8e:e7:
99:34:63:36:34:a9:83:54:d3:fb:02:94:ad:5f:5a:
59:a6:60:f1:45:43:46:a8:f4:e2:2e:20:83:b3:78:
10:9c:34:db:3a:51:01:c9:f5:12:f5:7c:ee:f4:21:
8d:27:f9:9a:52:8c:f3:ee:b4:a6:50:00:b2:be:39:
ae:e8:33:b7:9e:d5:59:bf:de:f8:40:af:29:02:56:
7a:f0:5a:4e:cc:75:41:71:8b:04:67:9f:db:1b:fe:
b8:50:97:30:47:da:a6:d3:7c:9e:95:5b:f3:a1:12:
be:12:5b:08:5b:07:d7:ac:e8:f1:c2:ab:94:47:ea:
2a:03:ea:64:5d:e0:f8:1c:e2:bb:56:49:67:cc:89:
7d:9e:7f:1d:96:d1:06:7f:4e:4e:f2:ab:ac:f7:9d:
b3:e2:ec:4e:23:ea:e4:75:92:6a:4f:96:09:13:64:
01:5a:a5:d4:8b:73:22:4c:70:af:a1:a4:64:aa:b2:
06:a4:7a:26:0f:2a:2c:00:a1:d9:c3:7e:9d:a2:3f:
e6:e0:be:38:51:44:e3:cd:85:48:66:d5:0b:d0:1d:
59:56:03:56:39:73:f8:30:f2:16:b0:6c:08:fa:ed:
1b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A1:DA:EF:1A:B9:1D:A2:26:FE:6A:D6:55:D6:80:C5:32:F5:9C:BF
X509v3 Authority Key Identifier:
keyid:8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ac:88:d6:a5:7a:f7:92:75:46:04:04:8b:64:9a:85:76:4f:
d1:9d:7e:5d:52:fd:24:70:3c:10:dd:0d:53:c5:f0:3d:9e:a1:
3a:39:09:dd:9e:c4:92:48:72:c6:8b:27:a7:63:28:44:b9:c0:
30:a9:a3:b2:8f:e6:6f:24:b9:39:59:8b:73:2e:db:7f:a7:5f:
89:5f:51:0e:38:90:b1:de:1a:62:0c:1b:4c:99:8f:8d:e6:1f:
d4:ae:28:9f:56:00:d6:f1:ec:6a:91:ad:16:af:7c:fc:7a:f7:
cf:ee:aa:ce:6c:b6:32:0d:b7:2f:45:f3:f4:f6:cd:fd:c9:42:
7f:c5:ea:66:9c:35:67:81:f2:3a:74:0d:f1:69:e6:a2:1e:a8:
41:88:04:17:f9:01:35:70:7e:94:5d:76:6e:45:a5:44:e2:bc:
85:8f:fb:9f:f5:d9:55:3d:8d:14:3d:9d:48:3d:04:2d:8d:26:
6f:fd:05:b6:ac:72:46:ac:e2:f2:59:2e:53:4b:bc:46:12:54:
c6:13:af:e4:18:83:eb:27:41:48:bd:16:0e:e2:44:99:39:21:
95:81:f1:0c:dd:20:91:e5:97:98:a1:6f:b8:a8:38:99:1c:33:
a3:f0:96:bd:c5:5c:02:6a:27:d9:5a:a2:9d:4f:a9:00:ba:2f:
bb:46:cd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:42 2025 by rpki-client