Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft
File: Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft (raw, json)
Hash identifier: tPjH3Rquwjg9rEhoO/jSWJvhl9fMFrb0vtc0RVNRiOc=
Subject key identifier: F6:F4:66:3E:29:91:72:FA:C5:57:5C:21:3F:C0:8B:1B:39:E9:10:87
Authority key identifier: 22:FD:1B:59:D5:CA:AF:75:06:BC:0D:5C:34:F3:0C:21:59:B0:43:98
Certificate issuer: /CN=22fd1b59d5caaf7506bc0d5c34f30c2159b04398
Certificate serial: 019A003545250249DF557DE4711033E33A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft
Manifest number: 0DCE
Signing time: Mon 20 Oct 2025 06:01:22 +0000
Manifest this update: Mon 20 Oct 2025 06:01:22 +0000
Manifest next update: Tue 21 Oct 2025 06:01:22 +0000
Files and hashes: 1: 5h9N95WR6G3ZttKnfAaRL_2XfKs.roa (hash: Wu3zPxSXCsayNSHW7YvNoHAYtN3gQjTl9ho9qfJB69k=)
2: Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.crl (hash: Ey3hAJYSwcYTNyyB3WzDB31/KwulyqYqizFDwb58rNw=)
3: mWDbGVVpCQ84rC7Zv5fGnlAS0IM.roa (hash: p+WC5acLc9Vp8ZBrdZrqWpaCEJthWpQv4NHUQY+p8+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:45:25:02:49:df:55:7d:e4:71:10:33:e3:3a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22fd1b59d5caaf7506bc0d5c34f30c2159b04398
Validity
Not Before: Oct 20 06:01:22 2025 GMT
Not After : Oct 21 06:01:22 2025 GMT
Subject: CN=f6f4663e299172fac5575c213fc08b1b39e91087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:24:19:6a:5c:c5:df:b2:41:02:85:38:cd:dd:
63:b7:b8:6a:9d:84:b5:49:dc:58:35:da:9d:04:1d:
ad:36:d1:fc:90:b0:1c:00:2d:7c:1d:b2:ba:5a:99:
44:e4:33:1c:b7:0f:86:cd:bc:0f:20:32:dc:99:f5:
b4:e5:f1:5f:b5:a2:1f:02:57:a1:8b:50:03:ef:e5:
18:7d:e9:6e:8d:4b:ae:55:a3:d6:9b:91:59:78:2e:
e1:30:be:a4:07:ae:fb:f1:a5:dc:86:5d:1b:be:36:
e6:a1:ed:85:36:91:f9:9c:b4:93:9b:f9:24:96:03:
9d:29:49:f7:4d:55:a8:f1:08:3c:c2:e7:2d:6a:ec:
d3:d4:64:80:ab:dc:62:7d:a4:f2:71:63:53:39:7b:
2f:42:fb:d9:e6:d6:4e:b9:73:be:3b:ae:fc:fa:1e:
8e:0d:30:5c:bc:64:80:10:a4:af:f7:b4:b0:04:4f:
74:c1:bd:58:29:bb:5e:9b:cf:1b:2d:81:d5:6b:27:
22:e3:ef:f0:69:6a:e8:f7:df:b7:50:0e:bc:65:36:
77:9b:e2:15:03:9b:f4:fa:63:b2:81:9c:d2:c7:ba:
8d:b6:12:49:63:d5:76:ad:f2:4b:6e:96:d2:a7:c0:
19:9c:70:fc:97:d0:59:d1:3c:b3:22:f4:93:b9:6b:
da:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F4:66:3E:29:91:72:FA:C5:57:5C:21:3F:C0:8B:1B:39:E9:10:87
X509v3 Authority Key Identifier:
keyid:22:FD:1B:59:D5:CA:AF:75:06:BC:0D:5C:34:F3:0C:21:59:B0:43:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:68:1b:f4:69:ca:20:ae:b9:2c:2d:e1:5e:aa:e1:44:4c:5b:
52:f3:52:18:d0:19:e5:1f:f3:e3:79:b6:3e:c3:46:f3:39:02:
85:3b:1f:cf:c0:7a:ab:0f:1a:b9:99:c6:0d:c5:11:08:5c:63:
fd:db:6c:5f:5c:e1:8a:a9:2e:6f:0d:c7:27:ac:cc:98:97:85:
3d:96:9a:30:13:2f:38:46:0a:4f:13:5a:06:96:71:ee:ce:55:
b9:bc:46:61:c5:39:6c:53:47:c3:80:ba:af:b9:14:d7:dd:c6:
5e:90:f0:d2:e8:44:2e:78:d1:e4:48:ae:26:d7:8d:97:3d:27:
57:93:4b:dd:b8:3d:89:3d:af:83:9c:2f:0d:0e:1a:01:50:1b:
63:93:d7:67:e6:eb:17:7d:da:52:fd:4e:fe:15:cf:5c:6f:32:
90:84:55:0a:2a:49:0b:f4:57:61:1a:8f:2a:36:60:16:bb:fc:
6a:df:8a:b5:00:e6:1b:fa:39:49:8d:3e:0e:15:0f:30:c8:20:
6b:f8:fe:55:01:ed:30:16:d7:ba:f0:96:a7:6b:5b:32:e2:ea:
c9:68:3c:66:cc:e8:dd:a7:39:8c:90:fb:64:6f:b3:6d:3a:d2:
37:46:90:d9:83:fc:c3:e5:f5:2f:23:10:28:a6:4e:2c:5a:0d:
09:05:7d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:07:30 2025 by rpki-client