Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
File: Iu6yQvsK-qA32cr1YExlh-QN47U.mft (raw, json)
Hash identifier: 0xAqoq7+xxYhyxaHVTTLQfFEavwMrp+6eQWRlOGRO9M=
Subject key identifier: B8:11:05:A6:BF:1A:AD:46:36:13:AD:BA:68:2B:AC:F9:34:75:2F:1E
Authority key identifier: 22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
Certificate issuer: /CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Certificate serial: 019A503DC0549022474F2F093F1A30B88C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
Manifest number: 1198
Signing time: Tue 04 Nov 2025 19:00:15 +0000
Manifest this update: Tue 04 Nov 2025 19:00:15 +0000
Manifest next update: Wed 05 Nov 2025 19:00:15 +0000
Files and hashes: 1: Iu6yQvsK-qA32cr1YExlh-QN47U.crl (hash: q/ghvzoyKM68YJWXOEombE47Qv6cQAK0hddWyX/gCXY=)
2: ff-qexzHEUD1WgOGjo1dcXlM5zw.roa (hash: okd5E/DUi3wr0dkKGYnxuoMgYENizBl6tX2uR1KatU4=)
3: o-JKFkGOw7b9iS81cGqL_sPqhTE.roa (hash: LeiOclwc6FMh1dAwDJxgRxawRJ1HHtp5FtwQRdIanPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:c0:54:90:22:47:4f:2f:09:3f:1a:30:b8:8c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Validity
Not Before: Nov 4 19:00:15 2025 GMT
Not After : Nov 5 19:00:15 2025 GMT
Subject: CN=b81105a6bf1aad463613adba682bacf934752f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5f:d3:09:f5:24:81:1d:9d:07:39:ca:31:b9:
ec:8b:89:41:0c:90:21:86:64:b3:e6:21:79:b2:f2:
7e:84:e8:79:62:42:13:3d:64:a1:4c:31:b4:2d:25:
0e:cc:db:ce:b1:ff:f0:ad:29:b1:1e:77:02:f5:6e:
b3:7a:9c:42:32:ea:4e:b4:9c:28:a4:da:da:0c:0c:
3e:5e:63:97:4c:78:27:7e:a8:0a:c4:ff:4e:b2:8b:
10:8d:4d:40:fd:96:c4:fe:ab:d1:aa:f2:bb:9c:b3:
d2:de:64:55:0c:ef:e8:73:15:94:14:17:09:56:8a:
80:c2:84:26:9e:ae:17:a2:27:52:3a:d1:47:04:aa:
ac:13:8c:2a:4b:8e:5c:a0:a7:81:84:ab:bc:57:2b:
88:1c:cb:5f:ab:1d:df:60:08:23:dc:0d:c2:65:d9:
72:fd:c1:57:7d:15:06:d2:42:93:fa:d9:88:dd:39:
c0:dc:6a:56:73:00:e8:98:46:a0:c6:39:3f:11:b6:
1e:96:65:5f:70:a4:80:c8:1f:6a:b2:bb:96:10:7e:
f4:03:32:36:3d:78:9a:b1:74:98:dc:8f:74:42:08:
34:51:07:ac:23:ec:f5:a8:82:c1:78:ea:a8:e8:b1:
c5:af:5d:1c:6f:7e:35:cb:3c:e4:99:fc:cd:bb:d0:
8d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:11:05:A6:BF:1A:AD:46:36:13:AD:BA:68:2B:AC:F9:34:75:2F:1E
X509v3 Authority Key Identifier:
keyid:22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:af:6d:ef:b8:18:9d:d3:71:21:15:b1:c3:8d:c6:1c:ed:1f:
91:db:85:05:5b:21:4e:81:c7:74:93:d2:18:f1:bc:e0:b2:b7:
4e:58:80:a7:c1:10:38:a7:9c:ae:08:a9:25:05:44:96:06:a2:
5d:54:36:2e:67:55:8b:48:ed:17:f5:8a:d0:7a:c8:8a:62:10:
e5:55:61:1d:9c:06:82:a8:a6:c8:db:52:04:a0:eb:f4:4a:b6:
d0:d2:3c:1b:c3:a1:97:3d:41:fb:8b:58:96:66:b3:70:62:f5:
b8:b2:9f:8b:17:2c:34:b7:ba:aa:a2:45:e6:04:24:e5:fc:e9:
b8:56:af:28:83:c2:58:ac:9e:be:ab:d2:ec:8e:14:07:4d:d1:
cd:6b:4e:7f:7a:14:ef:7b:7f:39:c5:ae:71:b5:4b:8e:6d:84:
fb:78:d7:e5:69:75:83:58:a4:97:51:21:10:74:98:db:d5:4d:
5f:7f:05:d1:4d:95:c1:b2:e5:6c:71:47:80:6d:d6:e4:1f:0c:
9f:13:b0:16:77:bb:c1:fc:95:1f:66:98:a0:ee:c8:b9:da:c4:
26:ec:e3:f1:f5:12:ee:37:58:ae:b7:6c:d1:bf:f8:5f:d7:8e:
66:8d:d5:ca:33:f2:a1:27:cc:eb:80:29:b8:25:54:3c:2d:74:
0a:10:58:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:52 2025 by rpki-client