Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
File: Ib-nezzXgpM-XyVURdQorfvcoOE.mft (raw, json)
Hash identifier: nzBgBuN9yKZYHRIXQmuDIFYQntlLYHUvSXliQh5DvVg=
Subject key identifier: 94:64:0F:4B:4B:3F:EA:16:72:88:69:EF:16:51:D6:C8:0B:B6:2F:94
Authority key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
Certificate issuer: /CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Certificate serial: 0199FD6AEC9DEC82D3CC6594AA277F03FBC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 17:01:06 +0000
Manifest this update: Sun 19 Oct 2025 17:01:06 +0000
Manifest next update: Mon 20 Oct 2025 17:01:06 +0000
Files and hashes: 1: 4lN9UMCt9-jT04o2voesNzfPwGs.roa (hash: t3RT/PpcRecUqHyCeVTaRV/4YmAPhY6KAKsv8Og5F9U=)
2: ACmM5xMJG5d1YVOZ4RZKGVZYg9k.roa (hash: Fvp/3zg9VXW0brdKzJ0fdm3mkA4lR5zaksqsabjZcF4=)
3: Ib-nezzXgpM-XyVURdQorfvcoOE.crl (hash: 73MaZeWXBNNuygp308c4P2ACDFPeoXi91OVhzVnDXe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:ec:9d:ec:82:d3:cc:65:94:aa:27:7f:03:fb:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Validity
Not Before: Oct 19 17:01:06 2025 GMT
Not After : Oct 20 17:01:06 2025 GMT
Subject: CN=94640f4b4b3fea16728869ef1651d6c80bb62f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:89:52:bb:2b:22:a6:41:a0:c6:1c:05:1f:70:
98:d0:7f:8b:2e:c2:01:1a:57:50:3b:34:81:29:3b:
3d:da:f2:0e:f1:d7:32:7c:ee:fe:14:c4:38:28:61:
97:db:2c:05:62:de:b0:21:4f:d1:03:e0:c2:76:a2:
d8:cb:66:c6:f6:55:02:45:f1:3c:a1:84:d4:58:c5:
94:5e:6e:81:1c:52:0c:dc:c2:63:28:63:03:ab:b9:
f8:61:67:cf:15:3f:30:fe:9f:ec:b4:10:85:ed:18:
94:8b:06:a5:b7:d7:97:de:fd:32:7d:b8:72:c5:2d:
49:51:95:ad:6e:aa:40:ef:bc:26:15:9f:e2:b1:c9:
c3:6e:7d:85:05:54:f8:fb:a2:4a:6c:4f:fe:37:31:
43:b3:94:18:0a:0f:92:09:8c:00:3f:7d:ff:29:1e:
a3:20:cc:f0:35:d3:3b:06:28:17:e4:85:2c:71:97:
31:fb:47:e7:ed:2b:e1:f6:93:70:62:5c:a0:66:b8:
e1:13:8d:8c:15:e2:cd:b7:ca:dc:29:25:2c:af:32:
29:9c:fd:7c:ed:b1:de:55:ba:bd:1b:d9:32:77:0a:
f5:db:83:86:ab:6d:83:bd:2b:e2:34:5d:07:ac:02:
e4:34:ab:a5:c0:67:30:e6:76:61:93:34:c9:b7:0a:
a7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:64:0F:4B:4B:3F:EA:16:72:88:69:EF:16:51:D6:C8:0B:B6:2F:94
X509v3 Authority Key Identifier:
keyid:21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:61:00:da:d6:1c:74:06:43:b5:cb:ff:3a:49:d1:82:49:b8:
16:0f:a4:c6:ac:f6:61:00:18:ff:18:0a:15:7b:28:35:3e:3b:
4d:42:03:15:89:e7:ec:28:48:03:79:d7:74:7e:3d:62:68:d6:
c8:b3:d3:5f:09:24:71:35:70:e1:d4:d8:9f:34:d5:b8:eb:f0:
a2:7e:d3:ce:08:6d:94:79:3f:36:39:24:ca:4c:61:bf:e8:a5:
41:ba:b6:ac:15:04:3f:f5:d2:04:71:65:c5:d2:ff:88:51:64:
47:bf:79:44:6c:4f:84:0b:04:8e:95:4d:46:94:f7:5e:19:bf:
44:8e:da:66:85:82:a6:ca:46:01:07:fe:10:e0:bc:a4:19:64:
88:1f:a7:4b:f3:26:5c:32:b7:60:91:20:46:68:b5:f4:0c:9b:
42:cb:85:27:1a:ed:45:f9:44:11:c7:f7:0c:72:9b:a6:bb:54:
c0:51:1e:6b:c7:33:fe:2e:b7:df:8e:04:16:d4:59:ea:5c:47:
d2:01:b5:cb:02:f5:87:cd:d3:c3:07:7c:48:50:56:d2:da:2b:
cb:dc:78:b6:84:3a:0d:1f:bb:87:18:8b:f5:de:30:ee:e7:bb:
1a:2f:35:24:50:65:ef:60:c7:96:e0:a2:77:a9:70:3b:26:78:
0b:7d:86:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:59:43 2025 by rpki-client