
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
File: ijJOTOdpObTbV9XTUMKtAHtZgOE.mft (raw, json)
Hash identifier: 4wwSjSmbCYnW7zYXUCzRa0tiV1v+bmWNR2H/ypvwh24=
Subject key identifier: BF:D0:DF:98:2B:F2:9A:05:CB:B7:B7:7C:9A:D3:F0:EA:9A:C5:87:B1
Authority key identifier: 8A:32:4E:4C:E7:69:39:B4:DB:57:D5:D3:50:C2:AD:00:7B:59:80:E1
Certificate issuer: /CN=8a324e4ce76939b4db57d5d350c2ad007b5980e1
Certificate serial: 0199FAA0D422A9137F5ED8C1DD74FC3028F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
Manifest number: 1117
Signing time: Sun 19 Oct 2025 04:01:07 +0000
Manifest this update: Sun 19 Oct 2025 04:01:07 +0000
Manifest next update: Mon 20 Oct 2025 04:01:07 +0000
Files and hashes: 1: SK-KQGjpFxAKGGZG9gSs78w75A0.roa (hash: /f4qVORCandIpf7G2G6ex0CoHR+bR91wiJ0+KeMblkM=)
2: ijJOTOdpObTbV9XTUMKtAHtZgOE.crl (hash: 61TcqRES7vzBjPaSS+nnSbYq3sLMuhInmtBgS6/2coQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a0:d4:22:a9:13:7f:5e:d8:c1:dd:74:fc:30:28:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a324e4ce76939b4db57d5d350c2ad007b5980e1
Validity
Not Before: Oct 19 04:01:07 2025 GMT
Not After : Oct 20 04:01:07 2025 GMT
Subject: CN=bfd0df982bf29a05cbb7b77c9ad3f0ea9ac587b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:46:70:5d:85:81:8f:b0:9b:fd:25:6d:91:cc:
be:15:76:bc:69:f7:d4:b8:af:f0:20:2b:da:70:66:
0a:a8:44:a8:11:52:49:2c:50:14:e6:6f:df:68:3b:
c5:4a:25:4d:68:42:72:87:10:cb:d9:d9:9d:69:db:
c3:26:c5:79:92:7e:e0:11:8a:b8:81:d6:53:77:ca:
02:b5:18:ec:db:f3:10:e8:cc:c3:ce:60:ef:2a:98:
56:6f:a7:17:c6:77:54:eb:c2:2a:45:3b:92:3f:60:
e5:03:ac:42:95:26:7f:01:3d:18:2c:aa:b1:12:de:
a7:af:7c:0a:62:6f:20:a9:72:a4:60:e7:d7:28:38:
08:d4:f6:3e:9f:ba:26:d7:33:f6:ba:af:41:58:cb:
d8:fd:15:33:33:fe:cf:8c:d5:93:bb:10:2e:a9:bd:
73:58:36:34:00:da:69:8a:f6:8b:ee:d9:62:25:52:
56:26:97:13:7c:88:62:c2:3e:05:f7:ea:4b:b5:b9:
00:0b:e4:1a:e0:3a:33:49:ee:ab:3f:02:ef:6e:95:
0f:21:b5:6e:bc:43:da:2c:8c:c3:1d:e8:44:a7:b9:
78:00:93:5f:89:0c:2f:62:ae:d1:ce:27:62:21:23:
f5:30:c8:e2:f4:87:93:bb:86:43:6a:d1:5f:b0:fd:
ef:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D0:DF:98:2B:F2:9A:05:CB:B7:B7:7C:9A:D3:F0:EA:9A:C5:87:B1
X509v3 Authority Key Identifier:
keyid:8A:32:4E:4C:E7:69:39:B4:DB:57:D5:D3:50:C2:AD:00:7B:59:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d3:bd:25:85:91:e7:4f:e4:11:69:1c:71:4a:cb:80:b1:32:
10:c6:e4:7a:61:8d:d2:c6:c4:f9:47:8c:9c:94:27:a6:12:23:
ed:f2:f5:ed:03:de:ea:b4:9f:2f:bc:cc:b9:31:a5:33:fa:32:
c9:7d:9d:16:a5:47:f7:3b:63:d4:18:ac:ba:5f:ad:ab:ad:0c:
a6:81:4e:84:e0:82:19:84:cd:2b:3e:d6:9f:9d:2b:c4:a5:0b:
6d:34:a4:fc:f9:3d:33:f4:aa:c0:6a:0e:a7:95:ff:bf:9d:16:
ff:0b:db:08:ae:d7:18:81:97:9d:a3:93:58:fa:d1:7e:48:86:
65:1d:90:42:ef:84:8e:37:b4:12:ad:ce:fc:5f:ca:e9:b9:4a:
6a:57:7b:f3:92:da:a4:52:54:15:a5:6a:d0:e8:9f:20:4f:df:
b2:88:46:45:53:c6:0b:77:77:23:60:55:94:69:88:98:0f:64:
40:b1:73:a0:04:7c:d3:78:da:8c:1c:56:c0:dd:c1:7e:b9:14:
bb:68:32:e4:84:eb:4b:6b:50:8a:fa:56:86:6d:2d:ff:38:54:
f6:11:71:1f:16:45:84:58:90:52:bd:58:35:6f:64:14:ea:79:
f5:e4:5e:7b:25:2e:1c:1e:e9:df:86:e5:80:c2:c2:98:62:ab:
bc:75:aa:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:34 2025 by rpki-client