Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
File: IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft (raw, json)
Hash identifier: +CNomFS//czcq4ujSBQEJRKLabKB7zAcGwbmYLhugqk=
Subject key identifier: 29:21:D9:EA:C3:B3:4F:65:AB:3C:97:22:35:9F:EA:DB:13:24:B0:6C
Authority key identifier: 21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61
Certificate issuer: /CN=218af26f9a36653f4d996719d4a410fe84af4861
Certificate serial: 019A50072900A44FEA41B7CFFFAEED27D630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
Manifest number: 05D2
Signing time: Tue 04 Nov 2025 18:00:37 +0000
Manifest this update: Tue 04 Nov 2025 18:00:37 +0000
Manifest next update: Wed 05 Nov 2025 18:00:37 +0000
Files and hashes: 1: 8aRFc9FMZuB39L9ezbDQe4rTWqI.roa (hash: d0kPdTmIfua7sOVHFgh6TKa6BfDr4mbqEziPITcO1vw=)
2: IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl (hash: xE7W2bhf4zDIx/DdGVHLdQQz4l/no9052M24d6t9L7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:29:00:a4:4f:ea:41:b7:cf:ff:ae:ed:27:d6:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218af26f9a36653f4d996719d4a410fe84af4861
Validity
Not Before: Nov 4 18:00:37 2025 GMT
Not After : Nov 5 18:00:37 2025 GMT
Subject: CN=2921d9eac3b34f65ab3c9722359feadb1324b06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1c:4a:e2:d3:06:7b:d5:4d:d7:15:19:f3:7e:
fb:aa:b2:71:15:e3:05:62:bc:7b:57:b8:a2:ff:8d:
13:a7:5d:aa:ef:e3:e1:a3:1e:de:33:66:ac:82:4a:
8a:2a:83:98:02:27:06:8d:16:41:83:1d:2d:b4:28:
84:de:bf:77:3d:54:c6:72:8d:67:b7:17:bb:80:55:
1f:8a:57:af:5e:96:1c:17:56:e0:b0:51:d4:29:53:
c9:88:78:41:96:02:0e:44:2c:b2:d1:44:43:cd:00:
24:9c:f1:12:45:b5:93:ed:07:e2:dc:41:58:08:2a:
ee:17:95:3a:f7:61:71:e5:80:dd:2f:ae:3a:73:d5:
17:f3:92:7d:31:eb:54:5d:bc:b0:48:e4:9d:f5:4d:
00:36:5f:b3:7d:69:62:67:6f:70:a4:98:b0:73:c9:
52:31:6d:80:97:80:25:3e:7f:ce:bf:b2:74:d2:f1:
04:54:67:f7:e2:15:3f:91:05:e7:51:cd:43:e0:26:
04:87:2e:26:88:3f:25:ec:6c:f8:c2:d1:96:87:7f:
42:c8:c8:2c:c2:f3:2d:0c:69:d6:16:8f:87:2d:cd:
fb:2a:80:42:0a:85:9d:a0:d1:75:13:67:9f:0f:81:
ad:ce:68:89:14:10:54:90:db:64:b3:41:86:e7:7a:
08:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:21:D9:EA:C3:B3:4F:65:AB:3C:97:22:35:9F:EA:DB:13:24:B0:6C
X509v3 Authority Key Identifier:
keyid:21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:1d:08:74:b0:c8:f9:55:05:de:51:cb:f0:ef:d4:ae:59:71:
42:43:f4:93:69:f7:ca:23:9f:60:20:b5:71:bb:2c:a9:09:b2:
c0:5d:f0:5d:ef:60:d3:72:91:67:de:e9:9f:d7:f7:06:44:a4:
cd:4f:50:cc:57:d8:c6:29:7f:61:36:23:db:12:75:5b:52:df:
b2:ee:40:4e:b3:31:60:29:62:f3:51:ea:74:19:b0:84:c5:c6:
d4:72:06:23:7d:8b:47:91:7a:e8:4f:2b:ba:38:3d:92:a8:09:
f4:ec:4f:bc:c7:83:f8:28:9b:6d:d7:9d:37:60:cd:6f:83:e7:
de:a0:ed:30:ac:bc:80:c8:08:b1:3a:06:27:81:ae:fd:73:dd:
5f:96:e5:e9:83:1b:e2:82:a7:6d:4d:fd:be:97:c7:32:90:bd:
dd:26:75:2d:02:66:e4:0a:1d:46:f9:f9:5e:7d:02:d6:06:42:
9f:63:ef:69:32:7e:97:c0:4b:27:a9:dc:63:c2:83:33:c4:2d:
3a:6b:64:a3:cb:81:70:8f:e1:bb:b8:41:0d:c5:99:66:56:33:
c4:e5:64:49:8f:b0:3f:f5:03:aa:18:0f:83:54:10:52:33:b4:
55:68:15:6f:69:cf:09:7d:5d:20:3a:29:32:b7:4e:f2:ec:7d:
ab:4e:57:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:45:14 2025 by rpki-client