Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
File: IURHLRaXNp2DK6Em5eFyMqzV9fM.mft (raw, json)
Hash identifier: 7tzpEFU/Qlsl4mTLWffupXL/qmvD6mr9TmphjAHkp9E=
Subject key identifier: 5E:93:76:A9:E6:73:7A:35:B7:DD:57:08:74:DD:61:B5:9A:99:7E:31
Authority key identifier: 21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
Certificate issuer: /CN=2144472d1697369d832ba126e5e17232acd5f5f3
Certificate serial: 019A4E86516880501DA3E4A0C74AC525ABEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 11:00:16 +0000
Manifest this update: Tue 04 Nov 2025 11:00:16 +0000
Manifest next update: Wed 05 Nov 2025 11:00:16 +0000
Files and hashes: 1: IURHLRaXNp2DK6Em5eFyMqzV9fM.crl (hash: 3IVZeayIcWGO1VdzQvR5Kg2KlF6i9oA8h7uL1omT0B0=)
2: jxP3zWsY1gZpCGxBiysaY7EpSc4.roa (hash: 8YozH8Bcb75tXVAEGcttViIiDw3bZdzWBPyjFnX3Zdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:51:68:80:50:1d:a3:e4:a0:c7:4a:c5:25:ab:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2144472d1697369d832ba126e5e17232acd5f5f3
Validity
Not Before: Nov 4 11:00:16 2025 GMT
Not After : Nov 5 11:00:16 2025 GMT
Subject: CN=5e9376a9e6737a35b7dd570874dd61b59a997e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:65:48:65:4e:02:dd:ea:1f:f6:db:7f:3a:15:
c6:d4:2d:31:00:ca:81:83:b7:c3:8a:9e:60:94:f2:
5a:a5:19:ad:9e:a5:d1:f0:c2:b5:e3:31:60:bb:b1:
69:b9:dc:3a:c6:45:c2:ca:9c:36:ed:fe:55:4b:f8:
08:88:ec:d1:50:68:40:44:ed:0b:b2:37:80:3f:cb:
c1:1b:cb:3e:05:a2:0b:5a:07:9d:76:02:ec:7b:7e:
91:31:4d:17:eb:5f:ae:88:07:8f:ad:31:a4:38:93:
f0:9a:db:d2:c5:ac:b4:cd:07:02:50:21:45:78:c7:
e5:b6:e7:b0:8e:df:11:90:a0:a4:ef:18:95:fd:bf:
56:4b:ca:41:a4:56:57:40:db:d3:09:aa:95:38:ee:
b6:f1:22:67:5d:93:fb:5b:ea:ad:bc:9c:ba:8c:3b:
d6:a7:55:ae:59:0a:4e:2e:46:2b:76:96:2d:33:5c:
44:30:32:be:b0:c0:2d:92:7a:9d:cd:c0:33:38:44:
90:fb:f9:62:a0:af:f2:18:39:cb:b0:3b:04:4a:99:
f1:11:d6:d2:75:6a:61:a9:dd:22:95:1f:a2:52:57:
e5:75:20:65:5d:8b:53:84:2c:0c:bf:79:6e:f0:08:
20:66:16:bc:dc:9d:fd:b4:00:ed:fd:a5:61:fa:3f:
1e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:93:76:A9:E6:73:7A:35:B7:DD:57:08:74:DD:61:B5:9A:99:7E:31
X509v3 Authority Key Identifier:
keyid:21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ff:33:12:74:35:c0:64:c7:ec:2b:d3:66:38:19:e0:64:44:
73:f7:19:d5:a0:b6:64:4b:c4:0c:22:ee:61:f4:96:3d:0e:63:
c9:9c:45:f2:b1:8d:27:11:3b:7c:45:6d:18:7e:11:42:60:68:
c3:66:be:16:b7:de:eb:b0:25:86:f8:b5:f4:e7:f6:c2:e7:7a:
fc:1a:82:46:68:26:ec:16:9b:8b:d1:2a:60:ce:57:48:2e:6c:
44:02:71:b0:e5:c3:7c:e9:e8:46:7b:a6:d0:a5:a8:ac:57:b5:
d2:8d:09:30:fe:5b:f0:c5:d6:dd:c0:f6:52:8b:7b:ad:9b:3b:
7e:f6:bf:b9:39:36:67:e5:c0:cf:79:2d:a6:45:39:64:c6:a9:
5c:15:7a:39:3c:0e:09:f6:42:7a:cc:9f:2a:c7:5b:84:af:ad:
7c:c9:cc:22:e1:87:6b:8f:37:cf:75:83:dd:94:0b:e7:b5:2c:
7b:55:dd:92:60:fc:02:7c:b0:6f:4a:e0:c9:94:f8:41:bc:de:
a7:7b:a2:7b:43:e4:87:99:56:69:2b:5d:e0:91:d0:8f:06:c0:
50:0c:53:69:8f:dc:6d:3c:3d:75:13:3e:23:5c:2c:c7:6e:ff:
4c:c0:a2:f5:6b:5e:94:82:84:0e:59:95:b5:75:15:aa:4a:a0:
88:eb:3b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:51 2025 by rpki-client