Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
File: io0ZrTHISnSFawprPMEA5HorKqw.mft (raw, json)
Hash identifier: Oby6ovJ1jnOLpY+g5iVXOCBpaDHNFpDscN3xUaM+yuM=
Subject key identifier: 74:3E:4A:42:0B:EF:56:1F:BD:50:94:C3:29:15:2E:49:2C:28:AF:E7
Authority key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
Certificate issuer: /CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Certificate serial: 019A4D73D961C54A4721A8D01996328A280D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
Manifest number: 0B05
Signing time: Tue 04 Nov 2025 06:00:29 +0000
Manifest this update: Tue 04 Nov 2025 06:00:29 +0000
Manifest next update: Wed 05 Nov 2025 06:00:29 +0000
Files and hashes: 1: io0ZrTHISnSFawprPMEA5HorKqw.crl (hash: j7F39LCoTGMG+Aa5fzYYzbS402XdDXmdtMv/sBAWIgs=)
2: mXq5imVatjJhnnG6SsoqA-p0UNQ.roa (hash: 8CJwggTE1PoL2jvcGBTOZHCwbyGaj586VEqXhjgdUvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:d9:61:c5:4a:47:21:a8:d0:19:96:32:8a:28:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Validity
Not Before: Nov 4 06:00:29 2025 GMT
Not After : Nov 5 06:00:29 2025 GMT
Subject: CN=743e4a420bef561fbd5094c329152e492c28afe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1e:d4:6f:ea:fe:cc:9d:e0:fc:5e:b2:c6:73:
92:89:f8:c7:b7:5b:cc:18:fc:5f:bc:db:9d:5e:f8:
f8:51:46:02:56:7f:ab:2b:f6:f8:64:37:99:21:80:
75:2a:38:34:3b:eb:2e:c1:3e:70:e3:6a:ca:82:8c:
8a:e8:f3:0f:d4:b1:f2:08:c5:73:25:52:18:e6:8c:
21:46:ff:95:f9:63:22:f6:52:44:81:ff:59:36:df:
a6:de:41:d5:4b:b3:e7:37:9f:6b:96:96:bc:a5:13:
4f:71:47:bf:7c:b5:f6:e1:70:20:b2:97:ba:6f:29:
2e:4e:b9:60:7b:5a:e2:34:71:4f:c2:8a:f4:17:e3:
46:d4:1c:d6:67:31:d9:f8:91:4c:03:46:db:06:2a:
c3:cb:7b:52:1b:00:63:90:21:9a:3a:5b:ea:df:a7:
d3:16:4e:7c:09:01:db:85:3b:a1:b0:bd:54:02:db:
35:12:ae:1f:fc:86:04:d2:23:87:b0:fc:71:9e:e7:
ce:16:ad:61:e9:06:c6:9c:6b:2f:fd:ff:c0:0f:d4:
ca:09:d8:3b:a7:f7:95:d9:8f:eb:e4:78:34:aa:03:
15:a9:d2:db:51:7f:d7:9b:3d:92:18:ab:6b:6f:9d:
41:68:5e:4b:ce:71:a9:10:a2:d2:00:a2:cc:1e:d2:
94:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3E:4A:42:0B:EF:56:1F:BD:50:94:C3:29:15:2E:49:2C:28:AF:E7
X509v3 Authority Key Identifier:
keyid:8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:52:e7:81:75:99:19:d6:22:fd:7f:fe:b3:67:4e:18:25:63:
eb:2e:fd:41:83:57:c0:04:7f:9f:52:72:40:1d:07:9c:e4:ef:
6f:c1:35:7b:da:4d:98:72:fa:44:5a:6c:d4:da:01:d0:d8:e9:
5c:c6:43:21:ca:fa:69:da:d5:a1:a3:41:5a:49:e0:90:04:57:
5b:df:be:a6:1d:a0:58:e7:4b:c6:4c:52:c3:ea:ab:36:2c:00:
13:b6:11:30:81:f3:c6:23:7a:e2:4e:96:1e:3c:95:57:b9:77:
df:57:1f:47:3d:00:07:fa:8b:29:e1:0d:0c:23:10:d8:6c:84:
21:05:e1:6e:3d:03:87:40:33:4e:45:6e:95:a7:db:a6:0c:79:
f4:56:12:f8:8f:43:52:ea:c6:5d:3b:a3:8a:e5:0f:25:1e:e1:
94:0f:19:ae:20:16:5e:02:f9:b6:4a:c9:f0:8d:4e:3d:bb:18:
19:60:60:85:ce:83:ab:9d:d6:36:ee:5c:60:7a:23:5f:f9:0d:
bd:8a:8a:6f:47:08:54:d8:a0:e7:50:3c:18:23:0f:29:19:f1:
c1:08:34:a7:4f:7b:92:2f:16:01:b1:a6:d0:e2:c3:1b:9d:ec:
24:a0:49:cb:00:c9:9c:79:9a:89:93:fb:3f:d4:00:48:25:24:
72:c4:fa:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:25 2025 by rpki-client