Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
File: iYh94B2LHL1Qt126yRM59mF6TYo.mft (raw, json)
Hash identifier: ZcXIMJulnwVvdSa50gIyBdQFFpurvQJaXIcUcLVOXwI=
Subject key identifier: 43:4B:E8:B0:B5:F2:72:C7:16:9C:AE:02:D1:95:45:28:A9:6B:D0:2A
Authority key identifier: 89:88:7D:E0:1D:8B:1C:BD:50:B7:5D:BA:C9:13:39:F6:61:7A:4D:8A
Certificate issuer: /CN=89887de01d8b1cbd50b75dbac91339f6617a4d8a
Certificate serial: 019A4F622FBB126BAFE93D66E7BFCD4CAA86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
Manifest number: 15E3
Signing time: Tue 04 Nov 2025 15:00:25 +0000
Manifest this update: Tue 04 Nov 2025 15:00:25 +0000
Manifest next update: Wed 05 Nov 2025 15:00:25 +0000
Files and hashes: 1: iYh94B2LHL1Qt126yRM59mF6TYo.crl (hash: GzPnRr/YlvbsfDur4149VsjlZjwlXfVHbwQjMAqCIEU=)
2: jAe0olQrTlqlwekCa7zU__XvOnI.roa (hash: lpxqZITJHJnTC06LkfUlinyvWGfnxykj2N1zFv1cD0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:2f:bb:12:6b:af:e9:3d:66:e7:bf:cd:4c:aa:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89887de01d8b1cbd50b75dbac91339f6617a4d8a
Validity
Not Before: Nov 4 15:00:25 2025 GMT
Not After : Nov 5 15:00:25 2025 GMT
Subject: CN=434be8b0b5f272c7169cae02d1954528a96bd02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e2:5c:72:fc:f9:f3:52:24:34:ba:94:03:10:
78:e4:c3:f4:ce:2a:89:6a:f0:fc:df:1d:16:b9:a7:
5d:8a:85:ff:4c:90:64:fd:7b:f7:ce:e3:aa:15:53:
55:b0:48:15:a1:c4:30:7d:a7:53:76:63:12:be:ed:
3e:68:34:5d:2a:56:f9:22:8f:a6:97:8f:1f:42:4a:
b6:ef:a6:62:16:c1:4a:bd:aa:fe:91:57:34:8c:12:
68:db:b2:13:d4:70:35:c5:92:a3:30:97:98:40:83:
74:d0:87:bc:81:e2:41:2f:7e:07:60:94:ea:25:83:
c0:9c:e3:0e:d5:02:e5:7d:33:97:da:48:2a:74:e7:
41:42:b4:ca:19:7e:31:2b:1a:84:dc:89:08:d3:ff:
f7:c8:9c:b7:ec:68:f7:90:70:14:07:7f:7e:2f:89:
2d:64:a2:e5:2e:14:be:b0:71:01:a6:41:c9:ad:7d:
b6:48:ab:c3:6d:dc:02:41:5f:e9:9d:d2:01:b5:5a:
3d:97:e9:cf:86:2a:38:cc:08:6c:d4:db:d0:32:46:
c0:21:d9:93:5a:eb:bb:87:a2:0c:50:bd:d5:87:75:
97:ae:0d:f8:40:1d:94:64:ee:db:82:7f:ed:c8:84:
18:ff:70:8f:34:db:ec:28:40:a2:e5:4a:6c:bb:62:
47:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4B:E8:B0:B5:F2:72:C7:16:9C:AE:02:D1:95:45:28:A9:6B:D0:2A
X509v3 Authority Key Identifier:
keyid:89:88:7D:E0:1D:8B:1C:BD:50:B7:5D:BA:C9:13:39:F6:61:7A:4D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2c:1d:64:87:cc:ca:1f:9b:52:1b:85:a9:89:0a:8f:c3:20:
7e:9e:39:42:85:40:f7:33:85:89:30:22:e8:43:6d:75:3f:95:
66:83:f1:63:c5:db:23:6d:42:ed:f9:65:25:60:aa:b1:51:c7:
fd:10:cb:b8:cc:05:8b:a2:a8:36:f0:2e:c6:6d:3d:2a:99:d5:
80:4f:f9:ab:52:eb:eb:3f:7c:ea:18:0d:db:01:56:80:f9:bc:
b2:7f:4f:d5:6b:eb:6f:94:73:65:56:54:5a:0e:79:8a:58:ae:
31:60:ef:3f:dc:47:86:da:85:fe:9e:3c:0f:10:2d:89:ec:b3:
03:03:1c:f6:8b:42:2a:15:6f:16:e5:80:b5:b2:f8:be:33:bb:
d2:e4:7c:e9:43:e3:42:2b:e3:c3:7d:14:49:12:f0:af:49:db:
d7:c1:f7:27:a9:45:d9:d8:64:29:5c:f6:43:5d:39:85:22:e6:
b6:8f:6f:e9:74:f5:88:db:c7:34:73:6e:80:22:10:25:8c:9a:
ab:f6:7b:51:77:59:1d:25:09:74:90:5a:e2:39:c5:a1:fd:83:
65:9a:01:9c:9f:f3:15:f9:e7:42:36:76:10:a4:41:f4:e2:66:
44:85:27:1c:32:6a:c2:46:aa:78:54:98:6d:d7:ea:94:5d:b8:
d9:3f:fd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:48:22 2025 by rpki-client