Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
File: IraiXy90GRvp6gypwZFf50XPV8g.mft (raw, json)
Hash identifier: rqpwhTvQvPpNzLgSEisNkLibc6Up7XwjMuJzx/0nh7g=
Subject key identifier: A1:B7:73:14:92:16:CC:53:E9:C0:F5:51:BD:16:30:4D:32:8A:3E:D0
Authority key identifier: 22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
Certificate issuer: /CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Certificate serial: 019A522C4EB7ACDC35496FF31F95F321C6FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
Manifest number: 16A1
Signing time: Wed 05 Nov 2025 04:00:26 +0000
Manifest this update: Wed 05 Nov 2025 04:00:26 +0000
Manifest next update: Thu 06 Nov 2025 04:00:26 +0000
Files and hashes: 1: IraiXy90GRvp6gypwZFf50XPV8g.crl (hash: TmMUuBZip6awIfwCAfeYToPMyy7sPp58HRskz3NZbos=)
2: MOp992QACjCU4CSR_4wEvEmDi9g.roa (hash: dTmvXI6qyvbgdeeHz07O4lgdS1FEoKVIkXmdx9O7lnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:4e:b7:ac:dc:35:49:6f:f3:1f:95:f3:21:c6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Validity
Not Before: Nov 5 04:00:26 2025 GMT
Not After : Nov 6 04:00:26 2025 GMT
Subject: CN=a1b773149216cc53e9c0f551bd16304d328a3ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ed:56:48:92:ed:60:f2:5e:ef:4b:01:8e:04:
9a:04:ff:7b:93:bf:b3:c3:48:62:bc:3b:46:fb:b4:
45:fa:9f:e0:14:3a:df:e4:65:15:aa:e5:98:ff:85:
46:14:23:ca:9c:14:ff:90:40:ce:b0:ad:19:5d:7b:
5c:cc:e9:19:a5:f7:c0:04:00:4d:5e:44:d1:bf:32:
49:78:2f:23:aa:f8:39:2b:cc:a2:fd:36:0a:f9:d2:
29:7a:49:64:e7:64:30:5e:06:1a:5c:be:00:26:9a:
18:6e:e8:ec:39:7e:0e:d6:c8:f2:b8:6f:3d:26:5d:
fb:d2:2f:cc:9d:ec:42:5b:2c:86:82:7e:77:ad:27:
7f:88:9a:1c:d6:be:da:3b:b8:fb:71:d2:0a:ad:79:
d8:f4:45:e2:10:eb:88:81:93:4e:b4:81:3a:a1:12:
96:f5:4d:b6:a0:d2:e1:9e:ba:8f:ee:ac:4c:a5:41:
02:59:9e:dc:27:38:86:cd:f6:1b:91:88:43:71:fd:
66:87:c8:ca:40:4a:a6:64:6a:cf:0b:f1:3c:91:43:
8c:46:e6:ff:a5:24:0d:42:8d:44:64:41:ba:aa:48:
d9:f7:47:78:5f:ee:03:21:e0:a6:1e:cb:62:b4:97:
9e:55:81:5f:cd:16:d2:60:fe:cb:8d:b2:ed:eb:ef:
4f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B7:73:14:92:16:CC:53:E9:C0:F5:51:BD:16:30:4D:32:8A:3E:D0
X509v3 Authority Key Identifier:
keyid:22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:90:e4:57:f7:8e:1c:21:bb:59:7a:18:1f:62:b6:b1:ed:84:
f2:19:0c:74:81:61:05:4a:9e:b8:bd:8f:33:78:3f:3c:9f:e2:
25:94:90:61:e1:fb:10:1a:e2:7b:4d:ad:5b:d7:dd:e4:35:6e:
b6:0b:18:47:42:05:9e:fb:ac:bc:45:c7:33:d6:d9:d3:a6:0e:
24:03:6b:19:1c:a3:00:93:7f:a8:75:9b:b5:e6:c8:bd:02:00:
fa:53:6e:74:5b:eb:1c:fd:32:18:96:aa:52:62:6f:6e:9a:3e:
eb:11:2d:96:00:c1:a1:de:ed:63:69:79:0c:c5:4b:f6:37:bd:
ba:93:a4:fe:12:25:6c:16:2b:83:a3:86:37:c5:13:5b:63:2e:
eb:43:6b:5c:8b:04:51:5a:70:52:c2:52:d3:38:4e:1e:24:34:
71:5d:47:cc:bf:de:ad:a5:b4:f7:81:c5:e0:ab:3f:2b:60:24:
13:8c:b9:1b:7c:dd:17:d9:29:92:f8:6a:2c:9b:18:aa:76:3c:
4e:06:2f:f8:8c:3d:6b:97:1c:50:aa:54:dd:74:bf:f0:87:1f:
7c:33:95:df:7e:7b:63:41:ec:9d:9e:8f:d3:e7:03:44:4a:48:
d2:45:07:6c:7d:3d:b2:c0:97:1c:3c:80:d8:39:86:85:d6:51:
5f:c4:03:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:35:32 2025 by rpki-client