Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.mft
File: IYOyVqIVtNb-JhfRJitji_p9bUA.mft (raw, json)
Hash identifier: p4F48g/p9VVZfKXBDMuqPpZsnmUWLGSTC2oEfQKSH0A=
Subject key identifier: 87:95:D9:CF:3D:9F:06:C2:C4:C3:43:2B:AB:3E:34:3E:C0:9C:E4:91
Authority key identifier: 21:83:B2:56:A2:15:B4:D6:FE:26:17:D1:26:2B:63:8B:FA:7D:6D:40
Certificate issuer: /CN=2183b256a215b4d6fe2617d1262b638bfa7d6d40
Certificate serial: 0199FC214DFEBE4867AEB2779C2D0DD3D8CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYOyVqIVtNb-JhfRJitji_p9bUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.mft
Manifest number: CE
Signing time: Sun 19 Oct 2025 11:01:05 +0000
Manifest this update: Sun 19 Oct 2025 11:01:05 +0000
Manifest next update: Mon 20 Oct 2025 11:01:05 +0000
Files and hashes: 1: 44WqLxBoNN2QK30ATokBgtKLkeI.roa (hash: r1vcmWXJ0IlZk5aHbff1XD3Hg2Mieqe53U03waIk5x4=)
2: IYOyVqIVtNb-JhfRJitji_p9bUA.crl (hash: 8J58xDpvPgMlmy1VKax2/lYtgNdw4bz9NmIA8TARxkI=)
3: RQGn1IVlE_4Qq709uXK_6OsLiXk.roa (hash: P0lwWTGt3C2Kl+U7DDbrCt9t+ME/jcoeCzRbUtSo834=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYOyVqIVtNb-JhfRJitji_p9bUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:4d:fe:be:48:67:ae:b2:77:9c:2d:0d:d3:d8:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2183b256a215b4d6fe2617d1262b638bfa7d6d40
Validity
Not Before: Oct 19 11:01:05 2025 GMT
Not After : Oct 20 11:01:05 2025 GMT
Subject: CN=8795d9cf3d9f06c2c4c3432bab3e343ec09ce491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6b:a6:ee:7e:68:f5:50:1e:0b:93:32:f0:60:
5c:ad:3f:b3:5b:2e:e4:21:24:f0:50:34:76:82:2f:
ed:8b:b2:00:83:af:25:79:50:15:c5:63:f7:a3:25:
10:30:86:7b:91:9e:11:62:5a:c3:74:b4:ae:de:91:
90:15:13:42:c4:5a:6d:97:27:99:8e:ae:12:f8:39:
4c:c4:05:d5:3d:b2:7c:18:2e:7d:94:7c:03:26:dc:
ab:c9:38:a8:48:01:60:8c:b6:9e:39:24:7e:43:19:
47:1e:dd:4c:48:2a:72:6c:d3:0c:17:c1:56:97:77:
ef:79:d4:06:32:72:aa:d3:d2:a3:9d:b6:49:1f:54:
1d:84:a6:1c:ba:ee:aa:42:fb:d3:4a:35:5c:a3:60:
93:1f:b8:5f:89:9e:64:d1:f6:ae:a4:f0:40:11:0a:
11:6a:d4:0d:7d:92:50:03:a5:4f:be:c2:24:60:9d:
a2:dc:80:17:15:71:8e:63:8f:e2:d6:8b:aa:22:1f:
cc:41:d1:36:34:11:1a:f4:83:eb:1a:8d:3e:a4:2a:
c7:fe:fa:89:6c:ad:00:78:32:0e:e7:c0:b3:3a:1f:
25:4b:8c:56:7b:77:e5:da:2d:df:38:d9:96:ee:5f:
d0:40:81:00:d0:3e:d0:f4:3b:01:e6:7f:f3:c1:27:
8f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:95:D9:CF:3D:9F:06:C2:C4:C3:43:2B:AB:3E:34:3E:C0:9C:E4:91
X509v3 Authority Key Identifier:
keyid:21:83:B2:56:A2:15:B4:D6:FE:26:17:D1:26:2B:63:8B:FA:7D:6D:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYOyVqIVtNb-JhfRJitji_p9bUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:47:41:65:41:bf:75:28:ab:46:11:88:99:0d:02:7c:9c:55:
1d:a5:d0:52:19:10:54:8e:3f:ed:16:d4:95:c3:89:b7:03:51:
e3:f0:47:95:81:13:e2:a4:e9:f6:b5:1a:94:eb:01:dd:ef:57:
39:c3:4e:83:c4:5f:ec:d3:1f:c2:f6:ed:8a:e1:fe:a1:85:b3:
47:fd:89:9f:d9:2a:d7:a1:60:7f:56:89:13:6f:c7:95:23:09:
37:5d:ce:06:71:e4:e2:91:90:6a:7e:78:3a:d1:9f:68:11:02:
57:cc:d0:a4:0a:21:40:13:4b:93:4a:61:3e:88:32:9f:02:50:
7d:39:bd:db:9f:ae:1b:d4:27:33:da:30:c7:e9:b9:f4:33:4c:
dd:05:4b:c4:94:06:77:df:ec:ab:58:9e:b8:3c:a5:9f:78:d9:
ff:bb:57:d2:68:7b:a6:b5:3c:9c:92:9e:06:51:fe:91:ab:c0:
8a:3f:93:75:55:1c:98:4e:9e:3f:39:88:58:6d:20:0e:d6:28:
3e:32:96:a2:d1:ef:01:59:65:db:ae:72:c7:b7:c8:34:9f:f0:
04:5a:0b:5e:d2:59:16:ad:a2:4b:db:6b:a3:4b:03:84:41:16:
70:bf:53:c7:fa:7d:59:2f:ad:ad:9c:9c:8c:0d:f0:78:ac:59:
f1:cd:21:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:57:18 2025 by rpki-client