Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
File: iVVHgNslskPAotNhl5sTCn8Txg0.mft (raw, json)
Hash identifier: ioemwQGaro7ivrDinzN7Ymk1qOWmXh7n0GG2QzlJisY=
Subject key identifier: A0:2A:6E:00:12:F4:5A:37:47:A6:69:08:DC:2F:0C:BC:5A:0B:08:C7
Authority key identifier: 89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
Certificate issuer: /CN=89554780db25b243c0a2d361979b130a7f13c60d
Certificate serial: 019A5187BF28263DB5031C8107ADDA20AD08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
Manifest number: 0C37
Signing time: Wed 05 Nov 2025 01:00:41 +0000
Manifest this update: Wed 05 Nov 2025 01:00:41 +0000
Manifest next update: Thu 06 Nov 2025 01:00:41 +0000
Files and hashes: 1: Io8_rALEkRmJyvwQSYZoU_nTQg0.roa (hash: IdvBLL1znSmthNlumpub/fXZwL7C6UNAlVvYWPg9Tzc=)
2: fp-LIMQ80k5YBVtTaX91n-J89eo.roa (hash: ItqEQhJ82EwpqjGgmH+0CXCKGMVgFNbNle1pM5dmqlE=)
3: iVVHgNslskPAotNhl5sTCn8Txg0.crl (hash: VyAUtUU2y0V9tB+xytRjqmmfCVCfG6tI5Jr/RHxv+/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:bf:28:26:3d:b5:03:1c:81:07:ad:da:20:ad:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89554780db25b243c0a2d361979b130a7f13c60d
Validity
Not Before: Nov 5 01:00:41 2025 GMT
Not After : Nov 6 01:00:41 2025 GMT
Subject: CN=a02a6e0012f45a3747a66908dc2f0cbc5a0b08c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:87:b9:82:43:95:7c:d1:3d:61:86:45:69:c1:
b1:f6:94:23:3a:32:ca:cc:54:8b:92:24:08:b0:b1:
b8:0f:d2:51:bc:76:06:60:6c:91:c4:f0:5c:4d:87:
fa:71:34:5c:26:23:bc:b7:ba:38:77:db:a0:8c:30:
23:fa:ed:43:6b:ec:1d:7e:a1:00:f8:7e:d4:20:8e:
55:a1:71:9c:8f:6e:64:f7:07:9f:ca:87:4a:84:00:
dd:65:54:8a:3a:0a:28:a5:36:17:6b:ff:67:85:21:
e6:1f:c4:09:ba:24:6d:0a:2a:d6:8c:97:f8:c0:ac:
b1:f2:b2:c2:b4:bf:00:df:5c:f5:ca:5f:4c:41:44:
56:c9:44:bb:97:05:03:c6:a1:bf:0f:bd:33:bc:10:
27:7c:b6:e0:90:dd:36:15:03:48:e3:37:fc:6c:e2:
e3:5a:0d:65:de:83:97:c0:1a:02:d6:0a:fd:b1:aa:
4f:e5:38:4b:8e:b9:67:88:23:e0:bd:24:1d:df:70:
9b:b6:f8:65:c5:96:28:f7:9e:e8:37:a6:2e:51:0e:
43:9d:4e:3f:b9:a5:1b:8d:58:7d:73:53:5c:bb:48:
b4:8a:13:d9:c5:d6:9e:0a:77:23:3f:b4:37:96:c0:
96:e9:26:96:85:bf:e2:c8:07:92:39:1d:08:d9:ec:
56:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2A:6E:00:12:F4:5A:37:47:A6:69:08:DC:2F:0C:BC:5A:0B:08:C7
X509v3 Authority Key Identifier:
keyid:89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:40:d9:34:66:0a:75:4d:57:03:90:0a:09:e9:00:fe:10:4a:
92:95:17:0e:b4:a2:20:8e:d7:53:29:60:c9:11:b0:bc:ce:bf:
2e:6e:61:21:c5:cb:9d:5e:26:cc:2a:82:b7:c5:cd:59:71:ae:
f5:31:21:64:24:6e:68:8d:b1:a8:82:5e:55:f0:4c:1a:7e:de:
ab:7e:ef:4a:8b:7f:48:65:b1:90:4e:bc:6b:80:df:95:4d:51:
3e:a2:bd:3c:d8:78:d2:4b:39:7b:1a:6d:ba:0d:d6:9b:5a:5c:
36:d9:51:6f:ee:ea:a0:76:cb:55:c4:2b:3c:81:5c:28:7b:29:
f3:53:cd:be:a5:c8:46:39:56:47:97:20:58:43:fd:a0:ac:ff:
14:60:67:ba:7d:e7:4b:ed:00:99:86:66:5c:1d:40:46:47:75:
83:8a:31:10:f9:ea:29:7b:fa:fd:08:24:7a:6a:df:df:d9:dd:
a8:fe:e8:d9:e8:72:41:ef:16:fd:26:65:ec:c7:03:88:4d:d6:
be:a6:52:52:83:ac:04:1d:fc:e6:f4:6a:c7:46:ff:b5:86:8c:
84:8f:dc:d4:42:47:d1:eb:52:82:77:0e:91:36:03:6c:d3:77:
1a:f7:95:a5:09:e7:41:6b:08:81:96:33:96:7b:19:4f:48:0d:
9a:ef:66:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:39:48 2025 by rpki-client