Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
File: i9S8vzXbf-LvZjUipaOjl5pPH_g.mft (raw, json)
Hash identifier: eWDMHCOrg+YbeYiKX2V4ddLkfzDeWE3f4NZ8KEx/Xp0=
Subject key identifier: 1C:1D:5C:F9:0D:7C:6D:82:54:0A:41:03:E6:12:D5:84:E6:B7:79:5B
Authority key identifier: 8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
Certificate issuer: /CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Certificate serial: 019A4E868976F2F30FB27CC8A71482864FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
Manifest number: 14D9
Signing time: Tue 04 Nov 2025 11:00:31 +0000
Manifest this update: Tue 04 Nov 2025 11:00:31 +0000
Manifest next update: Wed 05 Nov 2025 11:00:31 +0000
Files and hashes: 1: 1-_88t3hetlFBanVHA2DU4QOnOb4.roa (hash: latlaUAnjm2YfCy+iquDacPIbXwTYbtI55yE63hF5qU=)
2: 9bvrYkBqiqKMnn8_sup9wHDDvAw.roa (hash: OmLw4QBgjy48HSO5mm8k/HJy6DwFgzHoft0ePJqTlrs=)
3: i9S8vzXbf-LvZjUipaOjl5pPH_g.crl (hash: XMAqql6gOAYbsPP1c4JxF/pMzXU267CU3IRjlbgeJ6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:89:76:f2:f3:0f:b2:7c:c8:a7:14:82:86:4f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Validity
Not Before: Nov 4 11:00:31 2025 GMT
Not After : Nov 5 11:00:31 2025 GMT
Subject: CN=1c1d5cf90d7c6d82540a4103e612d584e6b7795b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8a:a1:85:9a:b0:95:fb:d8:ca:6e:93:05:5d:
ab:5b:71:c4:d5:bc:bd:a1:4e:fa:3b:ad:e5:6e:24:
77:7d:0d:7d:db:4f:8e:09:37:56:9a:9e:1a:5e:9a:
a0:4f:1b:d4:6d:00:ba:98:54:c6:f0:04:b6:9c:e5:
52:ae:33:06:12:24:3f:97:7c:da:9b:e6:4d:a7:ba:
f4:2e:6b:2e:86:87:4d:5e:f5:10:9f:c8:4a:df:7c:
67:48:b0:34:a4:e9:55:d2:47:f2:73:8c:a5:81:48:
04:26:37:61:36:4d:9b:8e:ed:2f:a5:ab:fb:8f:df:
97:10:61:9b:34:9d:ee:4d:90:53:62:f2:5d:ca:2a:
46:9a:f8:0b:7a:3f:9d:6a:9a:43:75:ec:4d:bb:ad:
a1:d9:ed:0b:b2:77:e2:9f:b5:7f:f3:91:0e:fd:09:
8e:2c:5d:a6:84:f7:91:65:6b:d3:7c:07:5f:6a:41:
d4:5c:91:fa:a5:40:ac:27:f4:38:a2:f8:d3:94:16:
9a:bc:f5:dc:59:1b:db:67:42:e5:ec:78:2a:dc:6f:
4d:14:18:be:b1:89:d6:61:c4:ab:6e:5a:ab:05:fd:
b5:75:7d:62:cb:e1:57:ce:ec:0e:7d:db:bb:a5:ed:
bb:5f:83:e3:90:97:a6:61:a1:71:15:fd:9a:b5:63:
44:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1D:5C:F9:0D:7C:6D:82:54:0A:41:03:E6:12:D5:84:E6:B7:79:5B
X509v3 Authority Key Identifier:
keyid:8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c3:f1:79:ad:e3:95:34:bc:d5:42:d8:eb:a4:b8:ee:37:87:
f5:0b:c1:b9:5f:d1:08:76:79:19:84:b4:c9:6b:4d:af:0d:30:
0b:30:f9:14:b9:10:dd:dd:f2:93:d8:2e:82:8c:98:30:08:b6:
b5:fe:da:53:dc:bf:ea:01:71:72:05:c7:25:c0:1a:c4:d3:2f:
86:75:30:14:c5:77:b5:4f:af:a0:00:f3:c8:f2:53:88:49:5c:
7a:49:27:66:bc:18:9c:8d:dd:bf:71:0e:15:55:19:8a:6f:82:
b1:52:4b:1d:6c:ea:e8:79:be:70:41:52:14:c7:36:dc:11:45:
0f:03:21:c9:f3:99:90:88:b4:37:59:92:2f:5c:c0:34:82:81:
4c:53:54:6d:b3:ae:ff:3c:83:3b:55:a1:9e:57:b8:e1:e7:16:
76:7e:4c:5b:a9:62:1c:d8:d5:35:79:24:d3:60:58:2f:63:c7:
2b:63:0c:ee:d3:79:99:6d:11:f6:7d:cb:fa:ad:69:f6:91:fc:
47:3f:ab:17:92:fd:2f:8e:59:e2:6f:d5:9b:28:56:4f:de:91:
31:78:5e:2b:ea:84:ce:da:1d:b3:75:28:65:84:4d:6f:37:42:
8e:bc:8c:b7:59:6a:5e:bb:27:95:22:8f:43:c3:14:5b:97:52:
a4:93:a3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:12:25 2025 by rpki-client