Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
File: i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft (raw, json)
Hash identifier: xfW73NY0e7GWZeTRYpfvyInD4ek0iKSjaSDS3v82lOM=
Subject key identifier: 0F:32:35:EF:03:64:12:B7:32:CC:76:37:A8:23:50:6A:5C:BE:3F:2A
Authority key identifier: 8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
Certificate issuer: /CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Certificate serial: 0199FDD8CD993FEC9627970F75A5AF08D837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 19:01:07 +0000
Manifest this update: Sun 19 Oct 2025 19:01:07 +0000
Manifest next update: Mon 20 Oct 2025 19:01:07 +0000
Files and hashes: 1: FE1p8xqk22ZLL8TtVpBgIJ5HCYk.roa (hash: EEjSbBj9sFsFeIYvGJ66Mb2B5f9wjNh8P6NHIHv03o4=)
2: Nj_g5XagzgChnaGJmyAjIxliPxQ.roa (hash: 2T2yAo36kvnreO/zfmG7HDMPjTZHcC33NYqG6yteeqQ=)
3: i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl (hash: Ju77AEhy1+ZjvmxJ341hK36jbT11QU5gNmQbG20ThCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:cd:99:3f:ec:96:27:97:0f:75:a5:af:08:d8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Validity
Not Before: Oct 19 19:01:07 2025 GMT
Not After : Oct 20 19:01:07 2025 GMT
Subject: CN=0f3235ef036412b732cc7637a823506a5cbe3f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:96:e9:59:e8:65:ff:0a:ff:60:5e:69:3e:
8a:d2:c2:0f:64:c5:83:fc:f5:6e:21:50:94:a2:cb:
69:81:3c:e2:66:21:67:aa:73:81:2c:f7:d0:26:47:
57:df:32:d6:9e:b7:6f:f1:a8:50:f4:09:43:4f:7e:
29:da:42:31:c0:18:8f:22:4b:9e:05:18:4f:5f:72:
46:6f:95:6a:41:ff:be:25:e3:42:38:2d:36:d0:cc:
f2:73:b5:c2:42:ea:5b:01:68:14:99:75:e9:8c:0b:
6a:cd:b3:b4:be:ce:c2:3e:91:39:65:98:d2:16:cd:
e8:5f:27:5a:f8:01:3d:10:43:e3:26:36:21:40:18:
c4:01:15:79:b4:4d:14:50:2e:79:22:95:30:5e:4d:
80:58:29:fd:4c:6c:50:ad:7f:28:72:3b:22:d8:57:
21:1b:bb:17:c4:d4:91:49:5d:a7:4a:f0:1f:fe:a0:
c9:a0:3a:38:b7:52:6f:fd:96:a2:b4:2f:1d:a6:d8:
4f:46:c5:bc:f1:f7:d7:19:60:95:f7:69:b0:77:7e:
df:4b:d6:5c:88:42:ff:77:bf:58:fa:73:4b:49:47:
7b:47:38:5c:17:b7:26:fb:a5:a9:92:89:6d:1f:a5:
f9:3c:50:19:50:93:9f:50:03:0a:fa:d5:6b:ee:b0:
ce:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:32:35:EF:03:64:12:B7:32:CC:76:37:A8:23:50:6A:5C:BE:3F:2A
X509v3 Authority Key Identifier:
keyid:8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:01:ee:3c:c5:2c:c0:41:7b:7e:42:6d:20:ea:08:5e:b3:90:
b5:c7:ae:e6:1c:ae:44:60:58:c2:91:92:dd:78:cd:92:48:43:
38:1a:a2:e8:4b:b0:97:7f:c7:2c:d2:c3:96:4c:a2:e0:d2:fe:
be:8b:78:46:c9:4c:61:bd:48:39:8e:b4:e3:37:38:27:e7:48:
2d:1d:12:a1:d8:9d:cf:1f:d0:6b:e4:f6:a9:19:d4:92:0a:14:
a1:e5:95:1e:f2:75:60:4f:c4:fb:ab:77:db:eb:f2:d7:76:83:
89:71:11:63:fc:5b:ef:71:18:a7:9d:7d:06:43:c4:c1:d3:53:
a9:c0:4d:a0:7b:17:dd:51:c6:b4:34:24:9f:19:d4:a7:63:8d:
6c:83:04:9b:9d:f1:38:39:e5:d4:05:0a:49:6c:d9:d4:44:28:
b0:54:90:6c:8c:d9:15:6d:0e:4d:24:80:b9:78:1c:f7:65:5d:
bd:33:cc:04:66:1c:53:44:75:10:46:40:11:25:5b:a3:71:37:
1c:4a:14:2f:0e:b0:17:08:f0:43:9a:a3:30:5c:81:a5:5c:5f:
b4:97:9a:09:e2:31:d7:67:5e:c8:fe:ca:92:60:13:1f:09:cc:
1e:1e:81:ec:2a:22:67:d6:9a:4a:e2:ce:d8:36:a9:c7:61:87:
19:12:03:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:39:57 2025 by rpki-client