Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
File: IPX_B2cEUj_2vogrh-76gHsYiqk.mft (raw, json)
Hash identifier: lI+SufB3wHJqZKe3X37nCgUjHLbY2sIwg+5ju120HxY=
Subject key identifier: A4:35:05:FC:2E:37:A1:1F:0D:BA:AE:BF:1B:80:12:00:5D:35:6C:47
Authority key identifier: 20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9
Certificate issuer: /CN=20f5ff076704523ff6be882b87eefa807b188aa9
Certificate serial: 0199FB459036CA36A2F1DE0F0F6242B0D82D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 07:01:04 +0000
Manifest this update: Sun 19 Oct 2025 07:01:04 +0000
Manifest next update: Mon 20 Oct 2025 07:01:04 +0000
Files and hashes: 1: GNNeHZyvG9VKvKXPSj2VAqX1Q4o.roa (hash: l5teIcaNt4zv8uIriCA79rj79r37yRmFeLrH41aNJJA=)
2: IPX_B2cEUj_2vogrh-76gHsYiqk.crl (hash: h97V2CD2jsdvrH78Tp+DgCR3gnUycqWwzzJUssaiLi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:90:36:ca:36:a2:f1:de:0f:0f:62:42:b0:d8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f5ff076704523ff6be882b87eefa807b188aa9
Validity
Not Before: Oct 19 07:01:04 2025 GMT
Not After : Oct 20 07:01:04 2025 GMT
Subject: CN=a43505fc2e37a11f0dbaaebf1b8012005d356c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ba:2b:e1:46:c7:fa:7d:e2:e1:99:fc:ed:b2:
76:6d:73:b6:2c:2a:88:ea:20:b6:1d:4b:66:6b:7b:
d6:a0:a4:aa:65:e5:3a:7d:03:6d:c4:6b:09:f1:8b:
f9:15:ed:14:9f:f8:4a:29:32:fc:81:a5:51:3f:4a:
8c:bf:59:af:6b:56:c4:31:aa:0c:0c:d6:2a:fe:72:
53:09:e3:fa:db:f6:78:eb:59:ee:1a:d8:9e:01:b6:
30:71:df:ac:87:b5:59:e0:89:74:35:6b:12:d2:93:
93:a5:4a:94:4c:c0:3f:21:a2:10:ac:92:d1:1f:5b:
29:ef:9a:63:cb:95:24:e5:c2:0e:6a:0d:ab:99:41:
2d:99:d5:44:5b:f3:42:5b:b6:84:59:2d:00:97:97:
95:6c:3c:f3:27:e8:02:d2:de:5c:9b:c8:e9:21:b3:
86:d7:05:55:bb:a9:e7:9a:51:f0:b0:6b:f8:77:30:
d2:70:88:46:38:f1:07:41:b1:9d:d3:b6:4b:16:7c:
4e:e1:b3:34:1d:5c:23:14:c0:6e:14:7c:93:53:b6:
c3:c0:6e:64:38:f6:6b:12:e4:9f:48:9a:d8:f4:ec:
ae:bd:69:e4:b5:39:c1:68:f0:ca:06:89:6f:e8:c2:
f8:b1:85:99:33:7c:d0:cd:99:16:dc:93:0a:87:cd:
b0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:35:05:FC:2E:37:A1:1F:0D:BA:AE:BF:1B:80:12:00:5D:35:6C:47
X509v3 Authority Key Identifier:
keyid:20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d5:de:b7:ba:19:35:ab:8b:0a:ad:3d:75:e2:be:b2:97:9b:
bd:fb:53:b4:bf:0a:66:16:f3:a4:6c:ea:19:2f:4d:29:b5:77:
60:f3:95:e8:f1:a9:2d:e0:e7:ce:6e:74:07:ac:23:ee:cf:5a:
13:05:21:30:0a:4f:2f:6c:3c:f9:59:9a:a4:f7:5e:4e:86:3b:
f7:2d:23:d3:4a:f2:ac:fe:25:90:3d:b1:10:f4:54:44:47:de:
b4:06:38:9d:bb:d8:ea:51:4c:a6:8b:60:3d:32:f1:82:77:c0:
07:a8:75:d2:af:fd:02:51:59:af:a5:ef:0d:91:45:18:9e:3b:
01:44:3b:a0:99:c0:49:bf:c2:64:ee:a4:64:63:85:c3:14:21:
06:a0:e5:ff:a1:1d:70:d9:28:da:29:f5:c9:8c:83:74:36:1e:
e0:a3:06:d4:47:db:f5:8c:4b:0c:64:99:97:75:96:14:b2:37:
f2:a9:17:80:2b:d5:3f:11:cb:e6:c5:d3:c5:df:a2:32:17:47:
1e:0d:de:4e:9f:de:75:49:6e:91:6f:6a:72:6d:62:69:50:17:
ae:01:91:cd:2f:ff:10:6b:cf:1b:de:dd:eb:49:a6:dd:1a:09:
f7:c1:14:bb:d8:28:c1:fc:e7:b8:52:33:8d:c2:12:92:b4:94:
13:13:91:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:19 2025 by rpki-client