Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
File: IoNxG9erE9o9EfJbtXpPSDwfmaw.mft (raw, json)
Hash identifier: DZhR1Pp7JLM7MsQxFG9PFV1AhuvRnEgrzrbaXx9dSJY=
Subject key identifier: A4:02:18:71:10:BB:06:50:4F:3F:E4:6A:07:C6:E7:F7:0D:F3:7B:04
Authority key identifier: 22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
Certificate issuer: /CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Certificate serial: 0199FC216EF3475AF7E04175A316BA276C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:13 +0000
Manifest this update: Sun 19 Oct 2025 11:01:13 +0000
Manifest next update: Mon 20 Oct 2025 11:01:13 +0000
Files and hashes: 1: IoNxG9erE9o9EfJbtXpPSDwfmaw.crl (hash: 1q79ojVQy80ZKLBdw7vcN6adq50Tow+YZryl9G880ro=)
2: UsxT3pcVojJYP9Cu4db5XHBOA_A.roa (hash: IuC4o8xqUNTxh+TkbcEBFveFUP/SyyaXqWJ5U0z84Vw=)
3: uCJs3VfOd9XlMzz8RlxYwm6JR8g.roa (hash: aQ8GGeLzceXoLXJ/X0KURkE7J4DP5Ck+ioxtdgiJTwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:6e:f3:47:5a:f7:e0:41:75:a3:16:ba:27:6c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Validity
Not Before: Oct 19 11:01:13 2025 GMT
Not After : Oct 20 11:01:13 2025 GMT
Subject: CN=a402187110bb06504f3fe46a07c6e7f70df37b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c4:ab:8f:a7:03:72:f8:25:af:eb:20:3c:0a:
23:29:b0:63:e8:e5:24:e3:58:f7:5f:f4:8b:fd:cb:
fa:7c:a8:42:e9:c9:c1:98:32:c4:ff:25:cb:dd:8b:
8b:96:4a:90:a1:94:33:22:a1:2b:cb:04:de:40:11:
b4:ba:a4:f3:c6:80:52:bb:20:b4:3d:8d:cb:a4:f0:
e1:d3:e3:43:5d:25:90:c2:36:f9:75:b1:5a:52:07:
2f:80:13:9b:05:a0:c0:6c:f7:8d:77:4b:bc:b3:22:
3d:0e:95:b7:f1:35:a9:95:9a:d6:fc:04:9a:7a:d4:
06:ed:76:f8:5e:c6:31:28:88:ce:d8:90:b6:35:b9:
f7:df:8f:9a:9a:0f:35:a4:2f:72:02:88:1e:1c:02:
25:5c:f8:fc:4c:58:b4:cd:29:29:79:e4:ca:88:b2:
b5:74:38:20:08:1c:75:47:59:97:8d:5d:d4:5b:7d:
75:32:f8:66:e5:a8:9b:52:b0:34:63:b9:63:71:84:
3b:1f:ed:4c:50:e4:51:04:4d:14:f0:ea:06:5c:d4:
0f:d0:01:b5:fd:fb:7e:e5:76:a8:3b:3a:e3:3c:d2:
48:06:87:31:ad:3f:5d:43:6c:96:6a:4d:e6:92:c1:
17:02:7f:eb:15:16:6a:6b:af:05:17:95:e6:ac:c8:
c5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:02:18:71:10:BB:06:50:4F:3F:E4:6A:07:C6:E7:F7:0D:F3:7B:04
X509v3 Authority Key Identifier:
keyid:22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e3:5c:1c:f0:e4:00:52:0d:29:40:5f:90:de:cf:96:1f:c3:
b2:bb:01:61:c3:22:46:ff:81:7a:17:32:6f:6b:b9:db:ad:e9:
16:f2:27:ba:4e:99:1f:a3:a6:c2:e3:e8:8a:5d:bf:a9:12:04:
2b:de:06:e1:b4:5e:d4:35:f7:7e:ff:c1:38:21:9e:bb:2a:4a:
f8:20:96:61:96:04:92:f1:43:3f:20:6c:1a:0c:37:b3:26:e4:
08:25:4c:d8:e5:6b:be:7e:1c:8c:8d:4d:e4:f9:cf:cf:55:d5:
ba:0f:26:34:02:a5:86:05:e1:99:cf:48:de:5c:dd:c6:81:c8:
a8:18:d8:94:1b:e8:ad:12:df:56:2c:60:7d:e4:78:c5:d8:dd:
13:92:88:32:d8:37:16:25:de:34:f7:be:d4:06:38:b3:ee:17:
c0:e3:35:1f:c5:e2:c9:07:cd:59:bf:40:ec:ce:03:af:1b:75:
b4:4a:b0:3f:f5:55:66:36:3c:5f:70:75:3d:f7:fa:a4:de:c0:
cf:0c:d2:56:e2:63:78:14:bd:41:b6:8a:92:de:11:ff:d8:2b:
a2:44:d0:40:93:5c:42:6f:7a:3a:6b:b9:7e:24:09:ff:c8:55:
2b:cd:5c:a5:f1:1f:68:89:5f:50:c1:bf:9b:1a:ef:b6:f5:9f:
49:04:68:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:38 2025 by rpki-client