Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
File: IxG6LbhgGYJqsQLhnyyoogkxaFI.mft (raw, json)
Hash identifier: 1J0xK7uRJ8ejyw2SbKck1QjYiOOPpuyCW73xFsVfoSI=
Subject key identifier: C4:AD:A8:8B:0F:28:CB:C7:15:25:9B:B4:45:69:D8:25:DC:E8:92:81
Authority key identifier: 23:11:BA:2D:B8:60:19:82:6A:B1:02:E1:9F:2C:A8:A2:09:31:68:52
Certificate issuer: /CN=2311ba2db86019826ab102e19f2ca8a209316852
Certificate serial: 0199FD34175E5DE8B5E0CE83BE92CE6D84B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
Manifest number: 01E0
Signing time: Sun 19 Oct 2025 16:01:13 +0000
Manifest this update: Sun 19 Oct 2025 16:01:13 +0000
Manifest next update: Mon 20 Oct 2025 16:01:13 +0000
Files and hashes: 1: IxG6LbhgGYJqsQLhnyyoogkxaFI.crl (hash: ld64QIcoDDxiccZjQ8yG7QjvEAxuMjKAGwcJTIfRa1A=)
2: VEacVgiUB2mSTjU4m54DaN-4dWE.roa (hash: 4yBoFANUnzxzanObGvRjvvX/EIqsjlCUPMYRv3xQRSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:17:5e:5d:e8:b5:e0:ce:83:be:92:ce:6d:84:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2311ba2db86019826ab102e19f2ca8a209316852
Validity
Not Before: Oct 19 16:01:13 2025 GMT
Not After : Oct 20 16:01:13 2025 GMT
Subject: CN=c4ada88b0f28cbc715259bb44569d825dce89281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:52:75:2e:7f:ee:38:4b:11:b0:a1:ed:64:39:
24:c2:4a:47:c7:99:f8:91:81:0b:5a:54:d8:4e:1f:
90:ed:7d:7a:e0:cb:22:b5:94:ed:ce:1b:d1:03:53:
d8:be:43:ae:ac:e3:8f:c4:d6:47:ba:a3:a7:4b:45:
87:9b:49:61:73:90:cd:2c:95:10:ba:ac:70:f7:17:
d3:7f:ca:10:76:b9:fb:ae:3c:a9:b5:a7:6e:c9:53:
3b:0d:7d:9a:15:c6:e9:9c:a4:ad:2c:d4:87:d4:b4:
49:b0:bc:a5:db:75:c5:60:7d:bd:dc:ac:3b:6e:f7:
f6:9e:c5:c1:c4:ef:ca:21:7e:07:f3:1a:81:79:5f:
d8:e8:3f:76:ff:72:79:43:ac:89:dd:f5:a1:58:69:
8b:06:fc:79:1d:3b:77:0c:1d:12:aa:88:be:fb:96:
91:bb:d9:9d:ef:6c:2d:37:3e:49:39:7f:4a:1b:7d:
b5:96:53:a7:97:2b:0f:7d:0d:d9:88:54:46:7b:0a:
a2:35:12:26:f8:1e:d5:1c:63:38:72:44:c4:fa:53:
c2:61:c1:90:59:1c:6c:4b:a2:d4:c8:2d:81:c6:60:
2b:99:08:0e:3a:ca:c7:3b:51:f1:de:27:09:90:3f:
4e:95:42:77:1f:30:f4:00:7b:8a:15:13:18:4b:3e:
d4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AD:A8:8B:0F:28:CB:C7:15:25:9B:B4:45:69:D8:25:DC:E8:92:81
X509v3 Authority Key Identifier:
keyid:23:11:BA:2D:B8:60:19:82:6A:B1:02:E1:9F:2C:A8:A2:09:31:68:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:3a:d6:15:72:a0:d9:4a:a7:6d:b1:ba:69:85:13:b9:44:27:
b9:55:3f:11:d6:52:6a:dc:1b:0a:c3:b7:e1:70:73:3b:a7:a7:
66:eb:2a:7b:99:d1:5b:4f:2d:04:7d:b2:12:5a:7d:00:05:40:
e5:1f:fb:10:eb:18:7c:e2:38:a2:cb:c1:3b:03:c2:72:bf:c7:
43:5a:a9:79:70:f2:19:8a:84:d9:94:ee:48:82:1a:01:d7:79:
f0:35:53:4b:cb:15:b5:98:0b:58:0a:43:0e:a5:c5:71:66:1a:
be:44:9f:b5:f3:b7:a8:3e:d0:b5:a9:1f:43:37:5b:44:7f:57:
9a:d2:ae:38:19:94:38:27:d4:bf:99:46:17:a8:9b:2d:d5:33:
5e:69:91:92:87:e4:e3:6b:95:a9:11:de:d6:43:84:eb:3b:9a:
3b:41:1d:eb:b5:58:4a:5f:c7:6e:9b:21:2a:5a:e9:2c:60:4e:
0a:a7:d1:28:60:da:64:e5:52:e3:49:b0:e0:5f:2e:38:55:01:
a4:aa:f2:65:f2:cc:7d:c8:78:f6:7d:8c:2c:5b:b9:d5:d1:f0:
65:fb:3e:20:42:26:8f:90:13:74:09:9d:bb:9d:53:fa:08:e3:
50:63:c8:f0:c3:56:ec:b5:ba:1b:c8:16:90:d9:d9:7b:51:d4:
ce:9a:71:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:39 2025 by rpki-client