Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
File: iwVEhe5ixvGTlhPLogZp7vRQT3k.mft (raw, json)
Hash identifier: cGavHS+ZnrIOCr9da5d37vFD/AUMbudgjnSBBrjtg/A=
Subject key identifier: FA:21:7B:D5:D7:D0:2E:CF:AE:08:AE:EE:C0:B7:E6:5A:04:40:8B:99
Authority key identifier: 8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79
Certificate issuer: /CN=8b054485ee62c6f1939613cba20669eef4504f79
Certificate serial: 019A4F62234A0FA7188BD1A1882466A1B6B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
Manifest number: 0CFE
Signing time: Tue 04 Nov 2025 15:00:22 +0000
Manifest this update: Tue 04 Nov 2025 15:00:22 +0000
Manifest next update: Wed 05 Nov 2025 15:00:22 +0000
Files and hashes: 1: FmWPQsDQv1I31vsCB-XoPwOttAE.roa (hash: xjF9H58/BASj6CKq3v5pVooMgpKIb+h+UMw0XGNXQo8=)
2: W0D9WIXmr4DG_xEj-xUZT82-dxQ.roa (hash: fBvWuzB9wp05SoO5x+Vb/EneDFqD/kJHT0KgvrAsF24=)
3: aheTt6_pS0K22xA67glREELod8A.roa (hash: qWC2pzWM7a75jc5rNLOSS10p2/VCBqYrjSpxRU7D9zI=)
4: g_SxF-_E_VpwVrwNdmKsnzbOYaM.roa (hash: wSo0WU3KC/Wo2i+eQ7vlG4IlKtTmfnJLRouHYXZqnO4=)
5: iwVEhe5ixvGTlhPLogZp7vRQT3k.crl (hash: 0gQsght608pP/P1SXRGa6DwCEebMPHv6w83gX965fp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:23:4a:0f:a7:18:8b:d1:a1:88:24:66:a1:b6:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b054485ee62c6f1939613cba20669eef4504f79
Validity
Not Before: Nov 4 15:00:22 2025 GMT
Not After : Nov 5 15:00:22 2025 GMT
Subject: CN=fa217bd5d7d02ecfae08aeeec0b7e65a04408b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:44:02:1e:0c:96:88:de:97:df:02:a3:6d:
2f:b5:24:73:58:20:65:a0:b1:f0:b2:3a:1d:c2:8d:
36:ee:ef:ad:2f:f0:30:82:cf:f9:30:f8:6d:48:c3:
5c:64:70:ff:ee:2c:9d:e0:65:ec:b5:5a:bb:87:96:
9d:6c:dc:f9:2c:17:39:cd:f2:a3:75:18:7c:67:de:
6f:7e:3a:ab:c2:a8:0e:6f:7f:5c:53:69:c4:00:7e:
7e:75:4f:a6:18:77:95:64:63:fd:14:f1:14:0e:bd:
1b:aa:08:76:72:9b:9e:fe:14:4f:05:f5:c7:2b:31:
5e:62:10:eb:44:1b:82:0b:41:21:4a:20:1e:e6:74:
b3:20:07:75:14:98:f8:12:69:1d:41:3e:c5:df:e9:
e7:27:a4:bd:24:bc:cb:6c:55:14:4d:6b:d0:2d:39:
38:0b:c6:91:b6:0a:18:6a:79:d2:02:af:38:53:a4:
b8:45:59:3e:74:76:7b:fa:e5:9d:1d:ce:62:3f:8c:
82:7e:91:de:8d:a1:1d:1d:62:2e:f0:09:e6:23:1e:
ad:ec:98:95:9b:84:30:c7:fa:23:ce:d2:0f:14:db:
82:95:8e:93:39:91:2b:81:5a:b9:de:81:78:1a:25:
06:d8:3f:b4:8c:67:bc:87:f1:9a:a9:bb:50:45:6a:
4b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:21:7B:D5:D7:D0:2E:CF:AE:08:AE:EE:C0:B7:E6:5A:04:40:8B:99
X509v3 Authority Key Identifier:
keyid:8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:9d:3f:18:77:c3:21:33:9f:c3:f6:7d:fa:19:7f:ee:1a:57:
d0:22:ed:48:56:a8:64:4c:bb:1f:33:d6:d5:c7:a1:bf:6c:51:
9a:b0:2a:4c:63:c8:09:93:d0:c8:cc:05:da:88:ac:9a:ba:ad:
d7:96:83:54:f9:29:fb:d0:31:4c:4a:6a:d6:45:e4:24:22:2d:
fc:f1:17:f2:70:5e:10:c9:87:95:9a:4f:f7:10:5b:0d:fb:6d:
4a:a8:3a:d9:b0:20:ce:e0:a8:ab:9a:41:94:46:63:bd:5a:58:
4f:cc:91:d9:84:c3:03:4f:c6:4d:e9:53:89:f5:81:a2:b4:23:
25:a3:ed:2f:4d:72:e4:15:fb:ea:83:e9:84:63:45:b4:5b:df:
d6:33:51:7f:b9:67:60:bb:9c:c6:cd:36:86:be:8d:41:4e:c8:
0b:ff:47:5c:09:92:1b:33:c0:9e:49:c1:a5:ee:84:c4:55:59:
60:a0:3c:ef:34:97:29:d7:f3:2c:51:c2:f6:de:0d:d3:ad:02:
a3:f4:cd:ad:43:51:38:65:4f:d7:a9:82:b2:5a:58:78:ba:52:
e3:21:c3:55:6d:d5:a4:3b:49:60:87:f2:7f:51:be:03:51:d5:
b0:07:59:19:bb:2f:af:4a:b9:d7:2e:43:3b:a5:39:79:2f:3d:
a8:ca:5c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:30 2025 by rpki-client