Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft
File: ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft (raw, json)
Hash identifier: svPlNVf0gt0GO/y99eBnKO9AdNvJ9Ik0L+Zm9c2cjSU=
Subject key identifier: C6:33:7D:CB:A1:07:69:B8:36:10:52:CD:61:49:7B:A5:D9:13:E2:30
Authority key identifier: 89:AE:22:0B:47:68:DA:6E:27:6E:6A:62:ED:D6:74:6D:8F:C3:C1:FB
Certificate issuer: /CN=89ae220b4768da6e276e6a62edd6746d8fc3c1fb
Certificate serial: 019A5187568D9ABBA21F387B995357AF5999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft
Manifest number: 0EC3
Signing time: Wed 05 Nov 2025 01:00:15 +0000
Manifest this update: Wed 05 Nov 2025 01:00:15 +0000
Manifest next update: Thu 06 Nov 2025 01:00:15 +0000
Files and hashes: 1: ia4iC0do2m4nbmpi7dZ0bY_Dwfs.crl (hash: r8GXHV1RcvY1sNA8kEVNI+h0AUUNRwe+Q/8sh0kkFEY=)
2: qmO8Fiuuh9KuRm81yMzephu_U-o.roa (hash: JTX7Cj1zPyi8sR8Cn5QR+pzD+tvVds3MwvVGO5fjdhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:56:8d:9a:bb:a2:1f:38:7b:99:53:57:af:59:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ae220b4768da6e276e6a62edd6746d8fc3c1fb
Validity
Not Before: Nov 5 01:00:15 2025 GMT
Not After : Nov 6 01:00:15 2025 GMT
Subject: CN=c6337dcba10769b8361052cd61497ba5d913e230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9d:fb:1e:73:62:e2:b2:7f:f9:01:5f:0b:b7:
83:77:a8:a4:00:de:72:f8:f3:40:91:1e:a1:b8:1b:
b7:82:78:e1:9a:85:4b:d9:d0:84:d6:93:18:0c:78:
93:33:f4:05:29:2b:6f:6c:9f:e2:a5:1a:64:31:02:
e3:39:24:e7:e2:2e:83:17:e2:42:05:ce:f5:cb:2a:
c1:69:b8:2b:37:3b:fa:73:22:10:91:f6:0a:ff:5f:
19:28:cc:0d:5c:0f:38:e0:4e:f7:0e:96:b0:3c:f8:
fe:98:f0:82:44:5b:2b:12:1d:91:1f:f0:d0:28:db:
61:80:35:c4:4c:bf:21:42:93:25:f1:ac:a8:33:50:
33:41:6c:ad:34:87:7a:53:38:f8:16:00:84:bc:11:
ec:f5:34:73:2f:ba:d0:60:a3:89:72:01:59:02:93:
3a:2b:71:c5:fb:b8:c0:a7:ca:ee:c6:05:44:f8:20:
6a:f0:bf:1e:fc:82:6b:d9:70:22:75:ca:97:97:c6:
2b:02:84:26:75:b3:db:45:1b:62:15:e1:d7:1a:54:
61:d7:e3:20:d2:69:e9:ba:c3:52:70:83:21:13:39:
22:6d:d5:fd:e6:a5:87:fd:35:79:fb:56:df:a1:02:
6b:ad:95:00:b9:d5:40:36:af:78:9c:04:d9:90:8b:
03:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:33:7D:CB:A1:07:69:B8:36:10:52:CD:61:49:7B:A5:D9:13:E2:30
X509v3 Authority Key Identifier:
keyid:89:AE:22:0B:47:68:DA:6E:27:6E:6A:62:ED:D6:74:6D:8F:C3:C1:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:91:71:e0:be:50:2e:05:38:8d:cd:5d:ea:05:72:2a:ff:0f:
f5:83:4e:41:38:11:9c:b7:95:12:b5:2a:16:22:9b:67:f5:5b:
00:ee:a1:d6:2f:6e:a6:4a:0f:3d:a1:d7:bf:5d:66:e5:9c:b2:
da:63:c0:0b:3b:c4:1d:f1:2e:2b:98:79:d0:93:58:93:d7:88:
c1:d8:3f:e2:a0:9f:17:9d:0f:c0:0f:35:a2:6a:db:25:d4:92:
28:be:6f:ee:cc:09:ab:9f:59:23:00:28:63:3e:21:e5:37:1e:
86:4a:05:2c:2e:f8:aa:0a:e0:84:ea:99:d6:d0:20:42:2e:c9:
cf:11:d8:11:af:05:ff:ee:f6:12:6b:c1:0e:ad:c0:40:4b:12:
66:74:a8:4e:dd:be:64:43:1d:e1:e3:cb:a0:0c:8f:4c:2c:66:
1f:ce:68:5b:fe:60:26:a3:b5:22:eb:18:b3:f4:72:07:2b:b9:
ab:bd:92:41:8e:42:e3:62:ef:07:5d:53:ac:18:8c:03:d6:dd:
cd:c1:a1:c8:89:0f:3e:7d:cc:fe:e1:35:59:bb:e1:17:4e:cc:
77:90:2c:52:fa:33:37:3c:57:67:d3:9a:be:47:26:89:c8:bd:
8e:75:d9:d5:71:de:24:74:11:b5:dc:38:2c:78:d4:90:b5:5e:
f0:24:e8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:16:01 2025 by rpki-client