Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
File: iBvRQCkk7CpkTo9U5plMtKyOJKY.mft (raw, json)
Hash identifier: UwzwPJQ3TJSgXCPF/yZ8PgDWRBCGVwxnGsgAdOyBom4=
Subject key identifier: 00:0A:4D:E4:A3:1E:9B:28:09:2D:1F:D3:D0:AD:AF:E0:C3:0B:6C:CF
Authority key identifier: 88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6
Certificate issuer: /CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
Certificate serial: 019A52D2484573ED5F9E9221BD0CF6CDAD73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
Manifest number: 0FD5
Signing time: Wed 05 Nov 2025 07:01:43 +0000
Manifest this update: Wed 05 Nov 2025 07:01:43 +0000
Manifest next update: Thu 06 Nov 2025 07:01:43 +0000
Files and hashes: 1: 7ibZVwlfZ8ueZalO2s5Z7rPx0H0.roa (hash: Umej8EQSMHbvS0Ig+vK3MM7fmk+X8RtofGrUKqtGKkc=)
2: iBvRQCkk7CpkTo9U5plMtKyOJKY.crl (hash: Haai2hPeDEskxJ8SkivepKAA565jqrlQRmlfpHhCPB4=)
3: kb-KEA3ZQd2MnkxgOKCpwGpH7ac.roa (hash: PVNmYw7m9lOZowA6tdOLawiD6fJdAXnNIKgq+V8sW40=)
4: vqIlQ51IAOGJFiTSPtHU72fvx08.roa (hash: zUhV3nwfP0jHHq/oTFIpW9P4yGQL+wJghHGlBxSt0/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:48:45:73:ed:5f:9e:92:21:bd:0c:f6:cd:ad:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
Validity
Not Before: Nov 5 07:01:43 2025 GMT
Not After : Nov 6 07:01:43 2025 GMT
Subject: CN=000a4de4a31e9b28092d1fd3d0adafe0c30b6ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fb:85:5b:94:89:97:e0:4b:b1:50:35:9d:05:
f3:5f:9f:fe:78:7e:d2:2e:c7:67:fd:03:02:90:6c:
c9:ec:6c:8d:f6:77:9b:0f:8e:cf:17:79:a8:46:d7:
c0:27:cb:8a:1e:1c:2e:a8:08:ba:79:81:27:af:42:
19:70:4f:bc:23:7d:2f:57:46:57:0f:6b:2e:52:e4:
f1:d8:18:ad:b4:33:ea:43:ba:d1:35:08:52:b0:00:
58:ec:90:d1:39:1f:7c:c0:d8:72:59:1b:42:88:65:
83:f9:6c:66:0c:7e:9f:bd:ab:55:1d:c3:24:24:22:
1d:c7:17:f7:3a:1d:e0:1a:d6:f2:95:a4:a2:4f:c4:
bd:9a:2d:6a:7f:a0:4f:10:71:b2:8f:30:23:26:e8:
89:cc:4a:07:2c:fc:d6:23:9e:24:a8:aa:af:c3:af:
2d:ff:e1:0e:7d:79:70:fe:8c:90:6f:67:5d:40:b5:
0b:9a:cf:d7:d2:fd:a0:91:f4:07:d8:20:db:7b:fd:
39:d5:4f:a7:57:0e:ce:56:e6:c8:c4:71:df:41:be:
c8:e9:53:cd:62:4c:cb:ba:30:87:f6:9b:b4:e4:f8:
2c:9e:53:b6:8c:6c:61:da:fb:0a:02:e3:7e:db:4c:
fd:c5:54:f6:83:c3:60:8b:5f:77:04:f3:95:22:a4:
e4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0A:4D:E4:A3:1E:9B:28:09:2D:1F:D3:D0:AD:AF:E0:C3:0B:6C:CF
X509v3 Authority Key Identifier:
keyid:88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:5c:46:9a:9b:92:2e:12:29:61:e2:e2:48:d7:8f:7b:99:df:
e8:ee:d5:47:23:55:91:e9:4a:83:66:97:df:1b:81:79:81:ac:
98:4b:9e:66:08:43:5d:c8:95:be:fe:89:ca:e1:9b:76:f1:fc:
25:d6:59:5c:6a:50:f7:16:a0:d7:00:e0:cd:91:0c:f8:f1:6f:
d8:09:6b:e4:68:85:2f:fe:ea:7e:bd:79:cb:fb:97:24:d8:c6:
0b:a7:2c:d0:06:34:26:36:96:58:82:80:7b:ae:ab:c5:16:cf:
1d:41:3c:4c:1a:e1:9b:1b:ac:a6:f7:45:91:7d:4b:c7:88:9c:
cd:1a:3f:01:00:da:9d:c2:1c:8e:aa:c9:e9:7d:16:f5:5c:6c:
30:e4:89:69:4f:14:6f:6a:dd:75:67:aa:b8:96:e5:58:a1:1d:
2c:96:44:6e:38:ad:c3:f7:e3:ab:40:1c:27:3e:42:61:17:39:
c2:99:51:da:81:99:e4:13:8d:cf:df:81:0e:35:01:07:84:35:
59:e6:16:bd:5b:e2:55:2e:50:ea:6e:87:5b:c0:1e:dd:85:61:
58:ef:36:b3:81:87:06:be:5a:c4:83:d6:81:4b:e4:bd:50:62:
17:35:86:9e:05:60:c4:a3:5c:9a:12:08:67:e5:05:25:f7:00:
3b:74:0a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:55:31 2025 by rpki-client