Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
File: iBvRQCkk7CpkTo9U5plMtKyOJKY.mft (raw, json)
Hash identifier: x6f/7QZQEhdLetXpjIN+5DqfUcs/QwxQ7jZypNiAgYA=
Subject key identifier: F4:08:29:A0:81:E1:A8:4B:FC:5A:4B:CC:DD:7F:C6:2D:52:E7:33:5A
Authority key identifier: 88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6
Certificate issuer: /CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
Certificate serial: 019A54C10D52FCA1724C1EF98BF16B60E951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
Manifest number: 0FD6
Signing time: Wed 05 Nov 2025 16:02:09 +0000
Manifest this update: Wed 05 Nov 2025 16:02:09 +0000
Manifest next update: Thu 06 Nov 2025 16:02:09 +0000
Files and hashes: 1: 7ibZVwlfZ8ueZalO2s5Z7rPx0H0.roa (hash: Umej8EQSMHbvS0Ig+vK3MM7fmk+X8RtofGrUKqtGKkc=)
2: iBvRQCkk7CpkTo9U5plMtKyOJKY.crl (hash: GuSgWc45pw/IJB8wj5GP3tSGGL49WQ6ia5JJ1NEop5Q=)
3: kb-KEA3ZQd2MnkxgOKCpwGpH7ac.roa (hash: PVNmYw7m9lOZowA6tdOLawiD6fJdAXnNIKgq+V8sW40=)
4: vqIlQ51IAOGJFiTSPtHU72fvx08.roa (hash: zUhV3nwfP0jHHq/oTFIpW9P4yGQL+wJghHGlBxSt0/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c1:0d:52:fc:a1:72:4c:1e:f9:8b:f1:6b:60:e9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
Validity
Not Before: Nov 5 16:02:09 2025 GMT
Not After : Nov 6 16:02:09 2025 GMT
Subject: CN=f40829a081e1a84bfc5a4bccdd7fc62d52e7335a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d7:8c:aa:19:0f:e6:26:eb:dd:d2:72:3a:68:
c0:cc:c0:0f:50:de:d1:d7:ae:c1:bb:94:e0:a9:c4:
87:c0:75:ef:cf:35:81:77:b9:2d:4f:58:44:d4:d5:
4b:a8:e5:c1:5e:62:d6:6a:99:99:0e:33:87:bd:db:
e6:3d:b8:3c:13:89:dd:90:38:80:0c:ed:8c:d0:54:
9b:93:6c:64:16:50:16:bb:76:4e:82:39:a3:b0:85:
9d:f0:a3:7d:13:17:21:24:a5:86:13:db:d2:f6:26:
9b:b8:c7:13:4e:f3:78:ad:51:86:02:0e:e2:da:35:
97:1a:1e:84:d2:4e:80:be:27:fe:6c:6a:85:82:35:
df:be:54:f9:07:5b:f7:be:8b:96:1f:67:3b:2f:92:
d8:22:03:92:c7:7c:c0:dc:cd:b3:e7:56:05:78:9e:
84:19:21:30:04:03:b6:94:1a:4e:e2:6e:a8:40:5e:
24:93:e3:6d:fb:40:fb:05:30:7d:65:34:bc:01:91:
76:87:48:37:f3:50:29:e6:db:0e:09:76:4d:70:a7:
35:3f:d0:e0:3a:db:73:c0:f3:53:93:b0:ff:ad:a7:
a8:4e:d0:b4:d9:34:3d:97:d8:01:54:c0:9e:17:f3:
97:79:bd:fb:fe:4f:aa:9a:d8:61:f4:be:b7:2b:23:
5e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:08:29:A0:81:E1:A8:4B:FC:5A:4B:CC:DD:7F:C6:2D:52:E7:33:5A
X509v3 Authority Key Identifier:
keyid:88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:bc:cf:da:58:2d:75:52:14:1d:18:08:f1:e2:37:c2:a6:6d:
03:5b:ff:cc:1d:1c:2f:ed:80:49:cb:9f:38:4f:73:f2:2c:0d:
1b:99:a3:25:11:46:b3:fc:c6:8f:a3:66:e3:18:55:bf:db:8a:
7f:f9:25:e4:79:a0:4e:26:1d:39:df:a1:85:66:bc:90:da:34:
8d:3d:2d:e3:16:82:de:1e:69:1f:50:bb:1f:b9:3f:8d:5d:e2:
4f:4b:b3:3d:47:59:9a:2f:cd:6f:f0:39:de:aa:8f:3b:47:2f:
cf:cb:a4:b4:19:1a:a3:77:9d:86:c3:04:cc:8f:f8:94:86:48:
89:55:06:c2:c1:1b:19:28:37:ef:fc:d2:ca:2a:cb:cf:08:2e:
0c:47:c9:7f:bc:54:e3:d1:f9:70:a0:d9:6b:e3:07:9a:1f:31:
f4:15:7b:46:6a:29:a8:6a:de:06:f4:ea:12:15:50:92:cd:bb:
90:b1:52:50:05:ac:f9:21:95:de:19:ff:2f:86:53:df:29:8a:
d6:68:d2:08:f8:7d:be:56:3d:32:47:d8:12:fa:41:7c:90:48:
b0:85:e0:e8:a3:c1:af:57:5e:de:ef:4f:4e:67:ec:7c:2b:fd:
06:ab:4a:54:1b:dd:1f:ed:7e:86:9d:a6:68:c3:2e:41:02:7c:
5f:44:96:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:27:51 2025 by rpki-client