Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
File: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft (raw, json)
Hash identifier: NlfYrZwIvNZNXxna+4yEy0Xdm3WUNE6gy2ibmpKj1PA=
Subject key identifier: A5:66:5B:AE:FB:92:00:A7:3A:DF:4A:64:D6:5F:65:A9:CB:12:3B:D0
Authority key identifier: 23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
Certificate issuer: /CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Certificate serial: 019A5006E6AEF9840F5DF50DCE3574B94D8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
Manifest number: 0C89
Signing time: Tue 04 Nov 2025 18:00:20 +0000
Manifest this update: Tue 04 Nov 2025 18:00:20 +0000
Manifest next update: Wed 05 Nov 2025 18:00:20 +0000
Files and hashes: 1: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl (hash: 7PFFSy0PXphCdElWuCvrzBi+xkMLYsbQPmKres2MY8A=)
2: LCSxsz-FQ4GzwZw8Odnzg4_wz4s.roa (hash: cOtRnPje7E9WAoJFvY2RM5FM1p4R+PS2ZqyaTPw4hic=)
3: WWsWrGhHJPhxsXXJtUhA3vzECwE.roa (hash: LLPjYgAmQluoQLBe3s0wxjIyXNJ82uAq8ra1WEAoLDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:e6:ae:f9:84:0f:5d:f5:0d:ce:35:74:b9:4d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Validity
Not Before: Nov 4 18:00:20 2025 GMT
Not After : Nov 5 18:00:20 2025 GMT
Subject: CN=a5665baefb9200a73adf4a64d65f65a9cb123bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3c:a8:96:78:8e:74:c5:aa:bc:15:72:d3:20:
9e:74:67:a7:76:11:d2:80:07:17:97:3d:1d:04:1a:
b8:15:b2:a3:3d:22:a5:e7:c2:4a:91:d8:c7:57:0c:
38:89:50:fe:de:0c:55:da:67:01:c1:00:00:32:3b:
51:0c:f1:f5:1f:9c:7f:05:a6:fe:fd:22:57:6e:13:
46:07:8f:bb:61:27:bb:b4:a8:49:e2:e2:37:d4:7a:
eb:61:0b:8d:c0:53:37:03:04:a8:09:ef:d1:6f:23:
1a:0c:71:c2:c1:db:30:23:ad:13:8c:e5:90:dd:2d:
94:9f:cd:32:c3:fc:9e:50:c5:10:5a:0e:5e:d2:52:
5e:3b:14:17:39:db:0b:d4:72:9a:b9:a3:ec:75:e8:
0f:88:99:fb:94:76:87:f9:a2:05:40:ca:f8:16:93:
85:67:e3:1f:da:94:e5:58:5e:c2:62:5e:0a:de:04:
84:64:5a:b1:fa:32:45:bc:d3:27:ca:52:0f:4f:41:
8e:77:62:98:e8:b0:bc:ac:fe:50:69:7e:6a:56:3c:
4b:51:ec:c8:4d:d7:f7:ee:a8:dc:5e:21:69:72:36:
86:d3:85:58:86:2d:57:13:37:f9:a6:ec:5f:f8:f0:
0d:62:53:6d:60:71:62:00:04:5d:97:16:58:04:7a:
d6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:66:5B:AE:FB:92:00:A7:3A:DF:4A:64:D6:5F:65:A9:CB:12:3B:D0
X509v3 Authority Key Identifier:
keyid:23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3f:e0:a9:de:fe:0d:91:50:3d:c5:83:9c:00:98:8e:47:b1:
71:9b:12:ae:f5:69:73:d1:37:ac:1b:e0:37:33:75:60:1e:27:
30:66:00:20:1a:45:78:64:25:8e:0a:5d:cf:01:84:d3:f6:07:
89:71:56:91:a3:a5:3e:89:43:05:08:04:1d:0b:3c:57:74:cf:
74:86:f6:dd:60:1e:9b:4c:13:0a:f6:2e:08:ac:c4:f6:09:ca:
46:8b:be:a8:92:5a:07:13:7c:2e:ea:43:20:62:fb:85:70:05:
66:6b:c5:21:15:63:b9:ca:00:6c:f5:61:b0:6a:e1:6b:06:ab:
47:f8:35:49:35:fd:e9:6e:bf:0f:b3:33:13:91:47:d3:7d:0e:
04:da:58:1f:54:35:b4:64:58:77:9e:5d:3b:d2:a8:6d:f3:04:
ee:a8:9b:7e:37:3e:80:6f:07:84:a4:ff:05:ce:64:58:f0:b3:
f6:49:fb:d8:be:57:c4:03:0f:4e:c9:68:c9:5a:82:3d:51:ec:
f4:02:b8:69:6f:df:3b:4a:be:a4:c0:36:91:5f:ed:1e:8b:4e:
7b:9a:22:40:2b:1d:db:1c:c3:e8:e7:d3:4f:fd:94:5b:c0:c0:
83:84:fb:31:ee:99:70:c5:45:7c:3a:c1:02:d1:83:ff:b2:d3:
6b:16:4b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:50:55 2025 by rpki-client