Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
File: IjayuK-mA20sjoMXc2-qpy2AxPI.mft (raw, json)
Hash identifier: dtr7eQJjqASy+hi12MI25fowwKMS0mjHNDBAwWXq+Xo=
Subject key identifier: E9:49:95:5F:51:FE:D4:2A:6A:4B:24:21:A3:8D:96:C8:B7:52:3E:63
Authority key identifier: 22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
Certificate issuer: /CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Certificate serial: 019A00DA557506BCB6BE2FFAF9A9B9206F14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 09:01:39 +0000
Manifest this update: Mon 20 Oct 2025 09:01:39 +0000
Manifest next update: Tue 21 Oct 2025 09:01:39 +0000
Files and hashes: 1: IjayuK-mA20sjoMXc2-qpy2AxPI.crl (hash: Syicd9dWe4MVOyNbTT8ko7Cti6NKwsiBg4xpGqh2n/E=)
2: b2NrS79baNCWt7CG0X8Vv_sUMl8.roa (hash: Q1DMA/fao+0mavfnJZ9O2x4iQmJQmqUT84da1WRhc7E=)
3: spimqMKhC9PB1IAAapTxgzK4qRM.roa (hash: Uoz42yC9AHKp3g+1i18MCMkNcCBemOpgqQDvUXFhvIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:55:75:06:bc:b6:be:2f:fa:f9:a9:b9:20:6f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Validity
Not Before: Oct 20 09:01:39 2025 GMT
Not After : Oct 21 09:01:39 2025 GMT
Subject: CN=e949955f51fed42a6a4b2421a38d96c8b7523e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9c:a3:aa:4c:10:d2:75:3e:dc:01:d1:dc:cc:
08:0b:26:d2:8b:4a:3f:a3:11:5f:64:a3:69:ff:ad:
59:b1:12:85:31:5f:71:5c:ee:6e:dc:b0:ed:af:46:
e0:91:ef:10:2b:5a:a4:e8:aa:ed:e3:ff:3f:7d:df:
a0:89:d3:46:29:23:52:19:18:65:63:95:48:2b:72:
53:db:44:27:3c:7e:65:e1:3f:e1:b9:8a:c0:46:fa:
ef:d6:10:f1:1c:b1:08:af:f9:ba:6c:f3:2b:dd:d5:
94:72:a9:c9:b0:a6:fa:1d:ab:a9:10:25:ff:2d:57:
4a:34:5a:03:93:0c:55:e9:09:51:ad:f5:ce:b7:d6:
4a:fc:64:d3:d8:c7:f2:4a:27:b7:79:b9:e5:f4:6c:
a6:62:9d:e6:9c:50:c8:bd:81:a7:73:5a:7b:1b:11:
ec:26:6b:71:b8:75:67:0b:2b:ae:7f:2c:31:03:c5:
7a:29:97:18:e5:38:df:62:19:cb:1a:77:35:88:00:
54:ec:12:32:8a:e3:4b:bf:6e:4d:f2:f8:39:f1:3e:
cf:8f:d3:34:81:58:fb:df:16:93:43:2f:d8:57:83:
b6:bd:89:0a:31:d4:33:25:e2:76:0b:2c:bc:91:1b:
01:b0:18:df:31:d4:88:b7:c5:19:49:2e:75:4f:0c:
f2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:49:95:5F:51:FE:D4:2A:6A:4B:24:21:A3:8D:96:C8:B7:52:3E:63
X509v3 Authority Key Identifier:
keyid:22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4e:c8:d7:05:89:8d:27:a5:05:56:9c:27:95:ac:bf:48:fe:
3e:75:c4:fc:bc:e0:87:0f:c7:bd:c3:3e:f5:6c:c6:1c:5c:21:
0e:a1:f6:de:0c:93:db:22:67:e2:f6:ba:18:36:69:52:95:1b:
df:1e:32:ba:9d:20:53:e1:25:94:44:1d:b4:1d:39:02:57:e1:
57:79:4a:ce:2b:e6:fe:9f:ed:52:f8:34:bf:3d:71:2c:d6:93:
21:ad:e7:15:98:02:55:99:c1:f1:81:68:a1:c1:cb:03:86:92:
e5:46:e6:d9:ab:07:26:31:cc:95:23:00:c4:c8:b0:3f:9d:7a:
4f:85:ce:9c:ee:09:89:54:0a:99:8d:72:99:33:80:1c:05:aa:
37:ff:3b:6f:f8:b2:65:0f:33:0b:e7:85:19:69:3b:fb:66:49:
e3:4c:fb:7c:4c:81:c9:1a:b3:05:cb:05:85:02:0e:c4:13:24:
76:93:22:54:e8:e2:55:c8:61:df:c1:ce:a7:81:03:f8:2c:76:
42:80:bf:68:ac:a8:c7:4d:b3:1f:f3:d3:e2:46:41:a5:81:64:
1b:49:c3:fc:5d:80:41:aa:b9:6e:75:a1:76:75:60:04:1e:de:
97:7a:ed:ea:16:ee:e4:cf:69:c6:f4:5f:e6:dc:33:d7:ea:5a:
46:41:0a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:08:42 2025 by rpki-client