Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
File: IjCHszf3R2yNYwSusIzuBX9L9pE.mft (raw, json)
Hash identifier: a/XyGeTjmC1vRzS+0cDBZvjQCMX99csLBlUo40baqsc=
Subject key identifier: FF:A4:67:3C:DC:1C:08:F6:6F:54:46:50:D6:47:3A:D5:A1:B0:95:AD
Authority key identifier: 22:30:87:B3:37:F7:47:6C:8D:63:04:AE:B0:8C:EE:05:7F:4B:F6:91
Certificate issuer: /CN=223087b337f7476c8d6304aeb08cee057f4bf691
Certificate serial: 0199FCC68B2E64206A90A97C2EA1B98A253F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
Manifest number: 0198
Signing time: Sun 19 Oct 2025 14:01:34 +0000
Manifest this update: Sun 19 Oct 2025 14:01:34 +0000
Manifest next update: Mon 20 Oct 2025 14:01:34 +0000
Files and hashes: 1: Da7F_pVCBMO9Pya93Jt3tHR6Oco.roa (hash: UlhnFczuqpWrkcvlwjEVQtMKK1bvCGUHj/RuLRvxfcM=)
2: IjCHszf3R2yNYwSusIzuBX9L9pE.crl (hash: JLP0kG3gPoC2fFraSQOZnM1H7LMs1WSEkbj4U1BSivg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:8b:2e:64:20:6a:90:a9:7c:2e:a1:b9:8a:25:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=223087b337f7476c8d6304aeb08cee057f4bf691
Validity
Not Before: Oct 19 14:01:34 2025 GMT
Not After : Oct 20 14:01:34 2025 GMT
Subject: CN=ffa4673cdc1c08f66f544650d6473ad5a1b095ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fe:3e:83:fb:a5:6c:f2:ea:12:21:36:cc:8f:
de:a7:46:9f:4e:57:50:44:ce:87:8e:eb:6e:f3:4d:
7f:7e:76:ee:8c:42:da:b7:73:9f:71:7b:13:b5:ec:
22:e4:e2:c2:7d:87:6d:89:82:68:09:2a:16:27:b8:
5b:78:36:91:a6:86:f2:2e:07:8f:32:1a:2a:b3:80:
da:4c:47:de:bb:5b:e6:ca:2a:22:34:67:c3:b3:ac:
94:ab:be:bf:55:a9:ec:b8:c2:ca:2c:21:23:19:89:
6f:f6:c6:8a:82:03:9d:9b:f9:17:cd:4d:40:a6:26:
3f:5a:13:94:02:52:c0:c4:ed:a6:41:ff:80:b2:d6:
aa:53:e6:f0:c8:4d:5d:71:fe:85:c5:5f:26:88:95:
ea:8a:8f:db:41:0b:57:34:82:ff:60:65:38:51:0d:
a2:da:a6:eb:a1:5f:39:d3:6c:cc:5e:f0:3c:7d:a5:
63:0e:e1:4e:9a:65:eb:44:dc:87:53:be:72:81:c9:
c8:87:55:0f:2d:8f:d2:5d:c3:24:b2:ff:86:54:b6:
6a:fa:dd:48:8f:96:7e:8a:21:fd:6f:f6:e7:76:67:
85:70:d6:d0:e1:95:78:9b:32:95:71:eb:d5:b2:92:
bf:00:da:97:1a:5e:3c:31:61:e4:f3:23:5c:fd:f3:
6e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A4:67:3C:DC:1C:08:F6:6F:54:46:50:D6:47:3A:D5:A1:B0:95:AD
X509v3 Authority Key Identifier:
keyid:22:30:87:B3:37:F7:47:6C:8D:63:04:AE:B0:8C:EE:05:7F:4B:F6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d2:de:a0:29:2c:99:31:7d:ec:77:80:89:28:91:e6:32:b2:
09:01:4f:ab:22:2c:5d:47:3b:82:66:49:9c:03:ca:2c:17:ed:
b2:1c:be:5b:e4:f0:aa:af:c7:ff:6c:66:ca:12:f5:07:33:0d:
0e:2e:70:d8:49:a3:16:43:27:4c:eb:07:4f:21:73:ab:7c:5b:
af:69:11:71:7d:05:73:01:a4:51:22:bd:ce:42:57:7d:e1:64:
9e:34:6a:07:33:47:5c:d0:21:79:fa:f3:14:bf:9f:21:f5:36:
78:6a:04:2f:dd:70:4a:dd:fb:bb:d6:0e:49:e2:f0:da:0d:2d:
95:dd:5a:9b:32:8d:6c:ab:66:79:73:a5:23:8c:a2:2b:37:85:
b1:78:cb:ff:3f:90:f3:3c:f7:fd:da:6a:83:9c:41:13:4d:93:
84:f0:38:68:2f:d5:10:ed:07:fd:80:2d:a6:a5:56:34:19:f0:
6a:69:f0:44:e5:1b:be:cd:e8:d8:85:93:4c:e2:9e:5b:cf:77:
ef:cc:f1:21:00:0f:12:59:07:0a:ec:2b:7c:f1:e1:b6:d2:c9:
51:e7:6e:9e:30:3f:05:7e:8c:87:35:1a:76:cb:51:e0:13:ba:
79:02:8c:a9:25:5d:f9:b6:39:7c:ae:98:24:2f:90:10:d7:46:
23:23:9d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:49 2025 by rpki-client