Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
File: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft (raw, json)
Hash identifier: FJgc0RKr0qHvi+wPqmoJVES8Uotce44diIY8I3n05a0=
Subject key identifier: 45:16:FF:60:0E:3A:E6:6B:05:3E:4B:F4:46:0A:BB:42:8D:8F:BC:0A
Authority key identifier: 23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
Certificate issuer: /CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Certificate serial: 019A51F540E829A13361179FCAF4982BB406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
Manifest number: 0C8A
Signing time: Wed 05 Nov 2025 03:00:18 +0000
Manifest this update: Wed 05 Nov 2025 03:00:18 +0000
Manifest next update: Thu 06 Nov 2025 03:00:18 +0000
Files and hashes: 1: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl (hash: ZKeqdFFxvAWsHdLFrxmc2PejMFreiHS+KIbhjJ3ySaw=)
2: LCSxsz-FQ4GzwZw8Odnzg4_wz4s.roa (hash: cOtRnPje7E9WAoJFvY2RM5FM1p4R+PS2ZqyaTPw4hic=)
3: WWsWrGhHJPhxsXXJtUhA3vzECwE.roa (hash: LLPjYgAmQluoQLBe3s0wxjIyXNJ82uAq8ra1WEAoLDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:40:e8:29:a1:33:61:17:9f:ca:f4:98:2b:b4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Validity
Not Before: Nov 5 03:00:18 2025 GMT
Not After : Nov 6 03:00:18 2025 GMT
Subject: CN=4516ff600e3ae66b053e4bf4460abb428d8fbc0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:f2:c9:1e:9d:14:25:7a:a6:76:c0:ac:01:
6f:57:e7:c4:51:f5:55:01:65:ad:44:fc:a6:97:96:
5f:5d:ea:5b:3c:b0:2b:5f:49:11:2a:14:31:7e:6f:
c6:40:10:aa:f6:b7:e7:96:df:9a:d2:38:e8:3a:c8:
76:6a:aa:18:a8:9d:67:b9:a7:9e:9c:c8:7a:7b:73:
32:e2:d7:e4:71:74:cc:31:ec:b9:c8:8b:a5:32:c2:
54:de:b8:d5:1d:fa:4a:0f:52:72:85:10:98:df:cf:
65:70:9d:18:7f:f8:ab:9e:67:2a:bf:a8:a9:92:cf:
c8:1e:02:c6:59:86:1c:1d:95:34:47:39:81:9a:a8:
26:c7:3e:20:ff:bc:05:39:9c:f1:34:d0:02:78:72:
d1:28:cf:3a:63:4a:2f:d2:e1:f0:f1:8d:8c:c8:99:
85:4a:54:a9:ad:b7:6c:22:7b:c2:1e:53:43:fb:f8:
36:48:97:76:49:d4:26:2c:2c:d2:c8:6d:88:d8:97:
4b:16:1f:13:a8:e4:34:e7:09:57:33:93:be:8f:fc:
bb:65:9d:bb:14:0e:dc:34:e9:9e:80:ad:d6:f3:34:
5c:67:1a:42:09:fb:a7:93:9e:a6:6a:65:a1:99:66:
92:d1:c9:9d:0f:84:0c:0c:d8:bc:ad:11:00:f7:13:
ab:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:16:FF:60:0E:3A:E6:6B:05:3E:4B:F4:46:0A:BB:42:8D:8F:BC:0A
X509v3 Authority Key Identifier:
keyid:23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:6c:b8:1d:3d:ca:2c:a2:56:db:ec:6a:fc:6a:1b:ac:26:b6:
d0:22:97:81:7c:c8:8f:e7:61:55:57:d0:90:02:f2:10:f8:a1:
4f:fe:88:77:51:fb:60:3f:ee:84:24:4a:e2:44:e8:56:f6:04:
a1:08:e3:dd:91:2d:81:f8:99:89:86:4e:f0:96:6b:d2:19:f1:
e0:30:4e:63:94:3f:12:9b:fc:cb:2d:2b:ea:6f:05:84:ed:5a:
db:44:d3:13:40:57:58:28:44:6c:6e:fa:7a:8d:09:7c:d8:d0:
18:5b:67:af:10:33:0d:9e:74:b5:d7:ea:94:12:eb:4b:01:50:
0e:fa:33:c8:c9:66:bf:8e:9d:44:e1:18:20:bc:05:c5:86:43:
3b:cb:8e:9d:67:e0:c9:6f:d7:bc:d1:33:9d:81:53:38:ea:c6:
e8:da:37:ea:01:f7:a2:18:cc:94:76:9f:69:ac:a4:31:24:39:
f8:a9:8d:87:94:db:95:16:e9:bf:13:ac:41:61:8b:34:64:e2:
07:48:54:7e:75:2a:12:38:51:8e:f3:a4:53:a8:df:80:f8:a2:
d2:f7:53:36:dc:b4:f9:c7:ad:25:fa:f3:18:ab:86:31:d3:3d:
4b:d6:e3:ae:d1:be:98:d8:60:0b:29:09:e9:e0:2b:52:5b:af:
73:37:54:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:12:58 2025 by rpki-client