Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
File: IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft (raw, json)
Hash identifier: b34tX3DyiV+SjV3FEwm2ZZWZ9xRDvIV2VsYDnZYRvGo=
Subject key identifier: D0:85:15:AC:BE:01:03:0D:69:4D:5D:D9:9D:20:E6:BC:83:55:A7:B7
Authority key identifier: 21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53
Certificate issuer: /CN=2146e560a3f5cac7c64fe0f13be663d94c871453
Certificate serial: 019A51BEE7CC8275A7E09FB8D4324A6CEB88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
Manifest number: 0593
Signing time: Wed 05 Nov 2025 02:00:56 +0000
Manifest this update: Wed 05 Nov 2025 02:00:56 +0000
Manifest next update: Thu 06 Nov 2025 02:00:56 +0000
Files and hashes: 1: 65OBtTjCvSppmw7kLz43nf5_Bv0.roa (hash: gdoaQ1Q9gp77JEHF6QFUxphPMS2cWPxD6n6ohLQUaSY=)
2: 7KVtKRza7VDnZMrMe02kpGBrUpg.roa (hash: eDnVdL3nLyal8dEfu0dA+KtEtGPaNa6zd/fLOYxM2vg=)
3: IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl (hash: AxQnSBjRMBbPZ/Mz/VFsA7cSKjhwR3Tp2GnSlmIC0cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:e7:cc:82:75:a7:e0:9f:b8:d4:32:4a:6c:eb:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2146e560a3f5cac7c64fe0f13be663d94c871453
Validity
Not Before: Nov 5 02:00:56 2025 GMT
Not After : Nov 6 02:00:56 2025 GMT
Subject: CN=d08515acbe01030d694d5dd99d20e6bc8355a7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:aa:dd:8a:2f:a7:20:b8:59:aa:0a:41:af:6a:
c6:c2:24:12:3a:6c:32:35:e9:01:ab:d3:a2:76:cd:
7c:38:fc:22:ba:8c:7a:0c:83:4c:4e:56:f2:98:fc:
fe:4e:99:d8:8f:1e:93:9d:f9:23:07:4a:2d:83:d5:
41:13:7e:5d:d0:b6:9b:c0:c5:1f:82:29:6d:10:ff:
ed:4f:16:2b:17:ee:db:75:e5:f5:95:43:f5:85:21:
43:53:95:61:2d:c7:b6:a9:bc:71:76:15:59:fd:e2:
e1:0a:38:f8:26:d6:4d:22:0f:a5:00:d5:75:dd:e8:
b3:99:76:eb:ac:fa:f6:6d:c7:1a:a9:68:b1:98:30:
5a:3a:6a:a0:7e:bb:11:23:ba:7e:ac:1a:34:7a:99:
9b:a5:b8:bf:00:31:cd:9d:eb:64:ff:59:3f:44:4c:
de:d1:cb:d7:a0:7d:8b:ad:54:14:02:dd:1d:e0:69:
41:bb:31:78:c3:65:36:b7:95:60:d1:02:d3:c4:7b:
05:97:e1:85:ac:e4:51:fd:d3:6c:08:e0:e8:06:4f:
fc:f6:ad:01:86:b4:59:7a:04:a3:5d:8a:e2:bc:f2:
ad:ad:56:60:6f:cc:ba:d1:a2:d8:b6:40:54:0c:ff:
22:b6:78:55:f5:e2:95:cc:79:36:44:37:67:3d:1c:
fe:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:85:15:AC:BE:01:03:0D:69:4D:5D:D9:9D:20:E6:BC:83:55:A7:B7
X509v3 Authority Key Identifier:
keyid:21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d9:e9:56:f7:d2:2f:ee:f7:4f:55:0f:f9:9b:e3:cf:56:d2:
23:5e:50:69:a0:f5:a6:35:7d:8b:9f:47:a3:c6:8e:70:15:f9:
dd:d8:52:41:3f:0d:cb:00:7b:d0:13:38:39:20:8d:a2:24:e2:
6c:b7:49:6a:03:2e:b4:95:cd:c7:a0:13:64:0b:90:3a:04:30:
d8:db:a7:5d:01:ae:c4:2c:c1:c7:59:ec:4b:4d:37:9c:02:3a:
79:1a:6a:04:50:3a:91:93:4c:8c:ea:6d:f1:a7:a4:ab:c9:87:
b0:59:8a:f2:0a:7e:7a:ed:16:11:1b:09:95:e2:9c:b9:80:9b:
00:62:eb:c3:48:11:b8:20:6b:42:8e:e9:5b:d2:78:27:7f:c2:
48:0f:c8:89:76:22:34:35:57:6d:43:eb:da:93:bf:a8:93:5d:
1f:ba:9f:98:48:57:62:ab:ea:13:56:05:0b:64:e8:dc:97:d9:
22:a8:ef:74:40:37:22:77:ad:d5:58:8d:7a:2b:19:4f:42:2e:
f0:20:27:d8:fe:da:f0:1f:c9:06:73:a2:01:a1:89:c8:9e:3c:
c4:aa:9c:52:4e:bc:39:16:11:a8:3a:6c:bb:a4:04:26:73:42:
f1:b9:ce:98:0a:8d:03:b7:2f:30:23:58:c3:eb:7a:97:77:08:
59:2c:1b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:34:34 2025 by rpki-client