Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
File: IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft (raw, json)
Hash identifier: MXFFRJmTqr6TRQeTkMPOAyLVgAEqxGUbwIFzlU66kNA=
Subject key identifier: CB:93:18:E6:D8:E5:E2:6E:93:FC:16:DE:AA:83:2F:3A:68:D9:1B:72
Authority key identifier: 20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24
Certificate issuer: /CN=20820f796481ac0e9637c962414597b1fe227c24
Certificate serial: 019A53E3EC98C4C1AEB96DEF538DB02BBBEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
Manifest number: 0223
Signing time: Wed 05 Nov 2025 12:00:37 +0000
Manifest this update: Wed 05 Nov 2025 12:00:37 +0000
Manifest next update: Thu 06 Nov 2025 12:00:37 +0000
Files and hashes: 1: IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl (hash: XDhn2zbOmThIZGf+jDtdlT05/RsrMztDA2wqfqICSqg=)
2: _KyJrgx1hGK_hXMTclXxlPIPZn8.roa (hash: I4QZAN/FDUNiksKSSMZ5KyrS7bRdtRCczdlGK9iHX0c=)
3: iLANhbyVV3zbKcRa5e1j5ys5bQ8.roa (hash: HvIZEmUJodoCUOQJmSLlhYyGWehRd8s2eUB4GrSGatI=)
4: vXv88BHimThnafaryEHozjYrlDI.roa (hash: DV1U9+gs3m5mNc5xoVIc27oNoGuDOyBahRAnw8thlug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:ec:98:c4:c1:ae:b9:6d:ef:53:8d:b0:2b:bb:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20820f796481ac0e9637c962414597b1fe227c24
Validity
Not Before: Nov 5 12:00:37 2025 GMT
Not After : Nov 6 12:00:37 2025 GMT
Subject: CN=cb9318e6d8e5e26e93fc16deaa832f3a68d91b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:49:b1:c6:dc:e8:0a:13:e3:7d:7b:a6:a4:
6f:04:ce:e7:96:fc:24:98:9c:cf:ed:30:04:bb:97:
ff:84:f7:d3:30:68:ea:45:3d:b5:ca:8e:f8:1c:1d:
ae:ac:02:77:9e:fc:0b:19:6e:11:66:91:14:19:75:
a1:46:27:5b:0c:2b:dd:65:44:a2:ee:40:e4:0b:62:
9f:6b:a6:2c:14:8c:8a:70:50:23:34:21:14:2e:a5:
87:b1:86:bd:6b:3b:8b:7f:a0:d5:36:42:03:df:c1:
04:5b:ff:19:48:e1:a5:10:aa:fe:02:3d:f9:ab:08:
70:a5:2e:2c:43:26:fb:6d:7b:f7:38:e1:3a:a8:3c:
56:3a:d1:59:82:9a:21:03:f2:35:32:fc:19:d4:cb:
ab:5b:a2:55:d5:10:cf:e8:2c:a5:cf:2d:35:2c:68:
1c:ff:ed:31:5b:d5:2c:02:cf:a1:14:32:fb:ee:19:
39:aa:60:b7:81:6d:89:be:d7:ac:98:5e:42:d5:11:
92:52:96:24:1e:9e:4b:b3:a6:eb:fc:36:10:06:64:
2e:eb:73:2f:a1:2c:78:ec:c4:b9:74:7e:e6:c1:84:
e9:46:3b:7e:e6:7c:cd:82:20:04:7a:72:e3:08:27:
d0:6d:14:b1:2b:91:96:7a:98:ed:70:ec:7e:84:6d:
8d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:93:18:E6:D8:E5:E2:6E:93:FC:16:DE:AA:83:2F:3A:68:D9:1B:72
X509v3 Authority Key Identifier:
keyid:20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a9:b3:ce:9f:59:75:4f:27:33:7d:82:a1:72:6a:5c:6e:ae:
e1:15:de:43:1a:c0:24:cf:61:ca:28:da:7c:01:c4:50:bb:90:
06:b7:d0:ed:32:7b:14:ea:1f:a6:71:11:dc:8c:a1:db:de:7c:
4b:92:8f:88:52:f1:74:5b:56:cd:36:49:d8:9c:9e:20:a7:a2:
f2:70:dd:9d:43:b3:a4:25:c5:53:8c:68:9b:00:ae:63:98:25:
16:7c:82:42:eb:b7:87:37:66:1f:a6:ec:53:d4:cb:2c:1b:42:
14:e3:30:34:9e:f5:e6:1d:ac:b1:ad:42:57:ab:be:66:43:44:
f1:8b:76:2c:c9:66:0d:bf:35:d4:0a:88:63:76:9a:95:ff:45:
bd:b7:e5:3c:5e:f1:62:6c:8c:a8:74:d6:93:32:6d:1c:48:73:
43:3c:3a:0d:34:e9:b1:d8:47:f8:f1:97:db:5a:cd:ac:f8:ed:
d6:a1:d8:6c:70:45:36:d9:65:6f:db:f9:33:ec:0b:53:f8:79:
ab:2c:38:c5:20:36:32:80:ff:64:77:ea:90:54:19:bd:a9:41:
d8:8a:0b:21:e0:b3:81:0a:84:bf:d5:05:92:8c:df:ef:fd:57:
18:7e:f1:0f:30:0d:9d:e2:1f:a3:bd:f6:8c:14:da:a1:e8:ba:
de:f8:85:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:43:13 2025 by rpki-client