Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
File: IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft (raw, json)
Hash identifier: 5NdkWMOPNqHuqkaGl8z/Ct6FPhO30+7narN5yhl39HI=
Subject key identifier: 73:A5:AD:A5:41:B9:89:3E:90:FA:CF:74:E4:F4:14:23:61:39:68:F7
Authority key identifier: 20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24
Certificate issuer: /CN=20820f796481ac0e9637c962414597b1fe227c24
Certificate serial: 019A51F5967A7F469668BAECDF5826384E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
Manifest number: 0222
Signing time: Wed 05 Nov 2025 03:00:40 +0000
Manifest this update: Wed 05 Nov 2025 03:00:40 +0000
Manifest next update: Thu 06 Nov 2025 03:00:40 +0000
Files and hashes: 1: IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl (hash: lD8BCGIki65lXVui5XW2qdZ8OEpdp+CXVylI/ckkXtY=)
2: _KyJrgx1hGK_hXMTclXxlPIPZn8.roa (hash: I4QZAN/FDUNiksKSSMZ5KyrS7bRdtRCczdlGK9iHX0c=)
3: iLANhbyVV3zbKcRa5e1j5ys5bQ8.roa (hash: HvIZEmUJodoCUOQJmSLlhYyGWehRd8s2eUB4GrSGatI=)
4: vXv88BHimThnafaryEHozjYrlDI.roa (hash: DV1U9+gs3m5mNc5xoVIc27oNoGuDOyBahRAnw8thlug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:96:7a:7f:46:96:68:ba:ec:df:58:26:38:4e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20820f796481ac0e9637c962414597b1fe227c24
Validity
Not Before: Nov 5 03:00:40 2025 GMT
Not After : Nov 6 03:00:40 2025 GMT
Subject: CN=73a5ada541b9893e90facf74e4f41423613968f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1a:12:c2:b1:36:f3:0a:cc:37:02:af:31:b5:
2b:94:73:41:45:6c:31:14:b6:e0:00:0d:c4:45:1b:
ad:3f:1b:4b:bf:35:f7:5e:66:8f:1c:68:ad:05:40:
43:ea:fe:8e:96:7d:bf:61:66:ca:10:27:46:aa:8f:
a1:c6:a7:99:43:c0:62:4c:2a:4c:c8:fe:3e:86:a0:
81:90:42:cb:29:68:02:26:7e:81:d2:1d:9a:2e:43:
5f:f2:7b:43:ed:68:5a:5c:b0:d8:08:80:4b:82:d0:
b3:bf:db:d4:06:c7:84:0f:57:7e:68:9b:59:83:74:
ea:69:40:cf:83:a7:35:a4:85:bb:16:f8:b5:84:95:
7b:2a:51:7a:a8:59:60:0d:59:30:d9:7c:e2:42:d6:
bb:2a:27:9b:f0:50:92:7f:24:c3:df:dd:16:c8:29:
a9:4c:83:bf:8a:b9:ca:28:7a:03:53:de:d9:f3:ff:
e7:c4:cd:df:01:74:9f:86:c9:82:3f:ea:7b:15:ca:
ba:d3:ef:f5:95:85:c5:53:7c:a3:07:df:f9:40:6d:
44:b8:0e:1a:43:73:63:55:0c:9b:5b:a8:99:04:e0:
c6:96:14:dd:f3:54:a4:ae:43:31:9c:f9:24:5f:10:
f2:03:b8:47:4f:e0:80:a8:e7:4b:c2:39:af:8a:0d:
7f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A5:AD:A5:41:B9:89:3E:90:FA:CF:74:E4:F4:14:23:61:39:68:F7
X509v3 Authority Key Identifier:
keyid:20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b8:26:37:cf:42:e3:c4:38:4c:66:0b:a0:98:e3:6d:ae:80:
59:44:bf:58:c4:b6:c0:5f:44:11:4f:12:f9:1e:17:5a:6d:29:
31:50:71:93:ae:09:ce:9f:c1:02:77:22:c5:c5:8f:19:f1:f0:
a8:4d:60:8b:fc:3f:b1:87:88:9f:be:2b:f2:9e:5b:c6:40:59:
86:29:9b:b5:fe:b9:89:27:c8:dd:67:1b:fc:b4:73:4d:a3:83:
b0:0b:ef:07:26:01:2a:db:75:eb:36:a4:44:8c:8a:bb:92:59:
3a:d0:14:91:21:77:7e:bf:83:5b:3d:53:bd:7a:5c:61:b4:6a:
74:51:3b:c5:80:3f:17:ce:88:9f:af:b3:42:11:7e:cc:eb:64:
c1:aa:d9:6b:1c:ce:fb:05:44:ea:a1:fc:eb:0b:6d:64:b1:d5:
e2:bb:15:ec:48:f3:0c:2d:ee:34:33:d3:09:bd:26:75:7e:bf:
d5:e0:8b:59:b4:6d:88:37:3d:5d:8d:98:fe:67:75:96:64:40:
fb:95:c0:0c:a1:e1:45:5f:da:e9:4c:a8:6b:d2:31:03:7c:36:
0d:c7:2c:1d:8d:b3:63:66:94:26:78:e0:99:02:70:1c:1d:47:
3e:7d:01:ab:e0:12:ff:4e:4a:39:ed:2c:c3:ee:01:07:82:df:
33:3c:de:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:26:07 2025 by rpki-client