Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
File: IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft (raw, json)
Hash identifier: eNYadYqKxftk6iezmHAF7Uzvcum4Ra7w9AJisQlZmjo=
Subject key identifier: 41:4D:C4:B6:66:E5:35:2B:D5:40:DE:1E:E1:6A:94:EB:BB:CC:6E:04
Authority key identifier: 20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57
Certificate issuer: /CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757
Certificate serial: 019A4F2B42DCC693B321DB5761FE8736421B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 14:00:26 +0000
Manifest this update: Tue 04 Nov 2025 14:00:26 +0000
Manifest next update: Wed 05 Nov 2025 14:00:26 +0000
Files and hashes: 1: EoTaeWkOJz05rIXfnxtfbquyeqw.roa (hash: YVkUO2wCaslx/q3WOT6glv2Y26dcalE699S2nCt2534=)
2: IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl (hash: uJtPbqoCTlsPeP1fMdF39to+gewxDncZe2SxBPUJaqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:42:dc:c6:93:b3:21:db:57:61:fe:87:36:42:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757
Validity
Not Before: Nov 4 14:00:26 2025 GMT
Not After : Nov 5 14:00:26 2025 GMT
Subject: CN=414dc4b666e5352bd540de1ee16a94ebbbcc6e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7d:f6:e1:9d:4d:e9:09:c0:21:85:69:db:dc:
c5:26:2a:85:6a:bd:d2:e5:c4:09:2a:ad:d4:32:2c:
42:f6:55:7d:b4:66:98:36:c8:d9:6b:30:d4:3c:18:
a5:74:92:7d:de:8f:88:7c:d8:e6:7e:95:6c:c9:d1:
9b:9e:ae:ce:d0:88:fc:ff:60:17:6a:25:13:b5:d6:
aa:a9:c1:76:66:3e:a1:8a:89:1a:ca:e0:56:90:51:
11:6c:14:8c:45:e5:e7:84:4d:43:cf:52:3c:16:91:
2b:03:ea:ef:e0:c0:37:55:d9:a8:c4:97:f6:83:5c:
a1:e2:8d:9d:60:9f:fd:24:28:26:c3:e3:3a:94:84:
05:54:59:49:43:9d:12:d9:62:6f:10:93:b6:32:e0:
5f:c0:92:9c:15:cb:1a:76:03:2c:7f:32:f7:86:fd:
ad:c0:50:15:7d:c7:52:07:92:c0:12:cc:f0:d4:0f:
f2:cf:ae:33:89:86:80:dd:d9:04:3b:72:d0:8c:0a:
49:74:14:7e:ca:31:9f:56:7f:8f:22:97:92:39:77:
37:10:15:94:d4:67:a6:84:54:27:4d:70:13:c5:54:
28:e8:98:6b:ae:5a:ae:8a:05:b5:0c:8d:4d:8c:c8:
d3:a0:00:b6:87:c2:ca:d5:76:91:1a:5a:f2:58:00:
a5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4D:C4:B6:66:E5:35:2B:D5:40:DE:1E:E1:6A:94:EB:BB:CC:6E:04
X509v3 Authority Key Identifier:
keyid:20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:38:23:40:70:1b:be:2b:e9:fd:4c:38:90:87:aa:41:73:5b:
a6:e7:44:db:fb:2b:72:6a:97:8c:e1:3f:5a:21:00:dd:66:75:
87:a1:20:24:39:ce:77:c1:fb:d4:71:5d:08:7e:4e:98:a7:f5:
30:e0:be:78:46:fd:69:81:17:fa:33:6f:4a:dd:ac:46:1f:a5:
d6:c4:c3:c0:84:1e:26:fc:98:f2:94:05:2f:b1:8f:11:f2:59:
0b:75:8b:26:1c:26:02:a0:59:20:6f:81:9e:fb:7d:cf:75:c0:
cd:42:22:71:0b:e0:11:82:fe:62:7c:67:d1:81:94:83:18:07:
3d:67:fa:1b:93:a5:e6:32:98:8e:f7:5e:10:22:ab:ed:72:87:
9f:c0:0b:07:e4:73:eb:45:c2:2c:a3:56:26:ff:82:88:80:70:
7f:a1:8b:14:ea:e4:5c:8f:a9:59:9d:fb:16:fc:40:2a:f9:c5:
fe:45:8a:7b:2f:ad:40:6a:e4:62:9f:fa:1e:10:37:98:ed:7b:
6d:b2:d2:e3:07:4a:dc:7b:14:c6:69:e2:18:df:a3:86:89:54:
fd:51:85:3f:3c:fd:88:cd:97:b7:81:66:8b:1f:3b:92:fe:77:
02:a8:f2:32:6b:a8:fd:79:9f:f9:ac:75:9e:45:7a:46:fa:f3:
39:8a:85:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:28 2025 by rpki-client