Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
File: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft (raw, json)
Hash identifier: vWvXqzvVF/oG6zaY/zac2hz3S6fO3j9JARXThfsn/DU=
Subject key identifier: 6C:80:DD:F2:85:E1:DE:45:BB:99:F6:D5:F1:16:AA:7C:BA:C2:54:48
Authority key identifier: 22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
Certificate issuer: /CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Certificate serial: 0199FD33EF990877EF2AE4D7C9C62306832A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 16:01:03 +0000
Manifest this update: Sun 19 Oct 2025 16:01:03 +0000
Manifest next update: Mon 20 Oct 2025 16:01:03 +0000
Files and hashes: 1: DE9IUhyQDVKAZFd3LetU9Q2xs6k.roa (hash: 4yKIJoSmqEpGXf1pIollJ7FnnZ1pkmaGTlVLtjz3pSc=)
2: H8-4BKw4Tio0v7fBDDkOvu0xYf0.roa (hash: KAd/cINuj3Zmkb8yZBl9rfV147mzpewaBmWKPtSwHrI=)
3: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl (hash: zuAh5C8dCYvJhvU2mD0jfLKj+ZSDLbHv7Fr2A1iJQNY=)
4: j_UhRom1_CjoZ8ktPpSsCzemlX0.roa (hash: p3RE9tXJ28D2EkcXNDeylKcBqqXVLJJQRP9qM16ttXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:ef:99:08:77:ef:2a:e4:d7:c9:c6:23:06:83:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Validity
Not Before: Oct 19 16:01:03 2025 GMT
Not After : Oct 20 16:01:03 2025 GMT
Subject: CN=6c80ddf285e1de45bb99f6d5f116aa7cbac25448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1c:c8:dd:41:53:4e:90:92:70:38:21:aa:88:
4f:d1:60:0a:b9:3c:8c:14:13:74:2c:de:1c:5f:ec:
25:3c:b5:1d:ee:53:aa:be:54:44:b5:ec:fa:85:9a:
9f:15:e4:91:f8:a8:14:58:a7:72:4d:fa:2e:4c:71:
f6:66:18:36:2e:c8:54:2c:52:a4:cf:9b:93:fd:0f:
cc:74:08:12:69:14:4e:3f:c3:f8:98:82:14:0b:78:
5f:85:b4:98:3e:2f:5b:0a:a5:bb:d5:27:60:19:6b:
e7:31:0d:02:39:9d:51:54:7b:6f:eb:51:1a:28:7d:
06:48:67:d4:b6:7e:3e:ef:d0:7c:c8:05:85:60:13:
0e:dd:22:fa:96:27:b7:ed:9e:53:6e:3f:a9:01:1d:
4d:4c:31:ea:ce:4c:35:f8:6c:46:70:ce:00:22:76:
57:b3:4e:ce:e3:da:b4:48:d3:53:88:72:65:77:35:
a0:39:b0:9a:77:96:50:29:50:f4:4c:97:03:81:b5:
00:f6:86:f9:ae:cb:47:05:c6:76:22:4c:c3:fb:5c:
e2:28:2a:e2:51:bc:4f:b6:3c:1a:d5:2c:fa:d3:5d:
da:91:d8:e8:9f:a0:d0:48:ad:84:4f:32:32:6a:7d:
38:4b:4a:63:d7:92:b0:c4:50:0e:c6:4d:f1:9c:6c:
0b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:80:DD:F2:85:E1:DE:45:BB:99:F6:D5:F1:16:AA:7C:BA:C2:54:48
X509v3 Authority Key Identifier:
keyid:22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e3:80:cd:4b:56:15:76:32:22:d7:52:a7:aa:77:11:ec:bd:
7f:52:c7:4e:e9:a5:e9:c0:a3:40:58:bd:10:8f:21:47:22:4d:
39:08:36:78:56:50:ae:0d:96:3f:7b:18:2d:5c:1a:b1:ec:26:
57:f7:2f:47:34:4b:41:f2:51:a2:4c:32:0b:c5:73:95:46:f7:
9b:29:0f:f7:e7:d8:04:98:1c:b5:a7:45:59:c2:b3:90:da:5e:
0b:28:bf:47:25:e4:c4:59:ca:34:8e:7e:9b:d6:81:9d:40:d3:
75:50:b6:d7:ab:6a:7d:92:d9:18:f2:05:08:d5:2a:c2:ae:e2:
eb:98:59:bf:e4:fa:15:d2:d4:48:b9:f8:1f:06:89:4e:46:c0:
09:40:6e:30:87:c2:c7:3a:92:39:46:89:ae:31:bf:9c:78:cb:
4a:0e:d9:cb:da:13:4c:ce:7f:5a:49:9b:4c:1a:c0:4c:93:28:
e6:42:0c:c3:db:8d:f4:f0:98:6f:69:a1:b7:54:56:56:cc:8a:
92:d6:18:8f:81:a6:32:23:b6:b9:4b:60:a0:8c:fc:00:4d:92:
c2:ac:8d:82:25:23:03:f4:e9:c8:bc:63:21:3b:4c:ba:44:75:
64:e0:d1:ca:12:b1:37:29:0f:cf:0f:d0:05:7c:f1:93:3d:5a:
a3:78:a3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:32:54 2025 by rpki-client