
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
File: iPNC3REnxnrxEWqx-ZfifLTIhOg.mft (raw, json)
Hash identifier: 5igcwyIY2tI/SKJbHijXKPZPaN2sf0VnkE+YOfHeK68=
Subject key identifier: 06:CD:27:4F:DA:6E:76:2C:68:B6:BE:FC:CA:58:05:E2:71:03:BD:2E
Authority key identifier: 88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
Certificate issuer: /CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Certificate serial: 0199FAA164977D53E65C8958317C5F6FE6D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 04:01:44 +0000
Manifest this update: Sun 19 Oct 2025 04:01:44 +0000
Manifest next update: Mon 20 Oct 2025 04:01:44 +0000
Files and hashes: 1: 0tVPRt7zVqUIIvmXairhGKRXv0U.roa (hash: dhSo1lkIbUUIXrPA3/k2AFZiXI7dxBUbTf590V+gQts=)
2: iPNC3REnxnrxEWqx-ZfifLTIhOg.crl (hash: 7L0UzotGtIjvsKidndLXPNFaveYMbBiQZg8SrReTNz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:64:97:7d:53:e6:5c:89:58:31:7c:5f:6f:e6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Validity
Not Before: Oct 19 04:01:44 2025 GMT
Not After : Oct 20 04:01:44 2025 GMT
Subject: CN=06cd274fda6e762c68b6befcca5805e27103bd2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:50:d4:65:b5:40:bc:3c:82:38:dd:37:94:f6:
b3:42:0b:3b:bd:01:a0:42:27:5e:a3:14:6b:84:9a:
0a:6c:c2:55:bc:c9:2e:a7:36:d4:fe:de:4f:89:ec:
8f:f7:63:d1:bc:e4:17:81:dd:71:da:1a:9b:a9:e0:
46:60:3d:9b:6c:f0:7c:1d:8f:19:ad:12:e0:39:1c:
4a:75:b7:c7:96:0b:df:ff:1c:14:5d:ba:92:ed:84:
4d:eb:9e:1f:40:90:25:af:31:cb:03:20:fb:a5:3f:
fb:14:b3:54:4d:4a:3b:6b:71:78:21:8c:e7:51:df:
c5:69:5b:6c:3c:db:c7:c9:6b:ae:fe:fe:28:32:1f:
9d:18:63:62:46:52:40:c3:81:f5:65:c8:f2:b5:19:
ac:e1:01:b6:23:cb:08:ee:17:fc:3a:42:c0:e6:ab:
ae:67:ab:07:dd:57:e5:77:c9:93:02:b6:2a:31:6c:
0f:52:46:9c:3b:1e:4c:96:b8:ba:ea:14:c7:ce:16:
c8:24:e9:fe:7f:86:4f:4d:48:f5:96:f0:ad:a8:22:
46:bf:c5:37:6f:8e:6b:95:6d:d5:21:7b:a1:ea:64:
d2:a0:b2:92:89:11:70:c7:67:84:69:4b:98:dd:f3:
9c:18:d5:9a:4f:44:eb:92:2c:af:cd:72:01:60:fa:
89:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CD:27:4F:DA:6E:76:2C:68:B6:BE:FC:CA:58:05:E2:71:03:BD:2E
X509v3 Authority Key Identifier:
keyid:88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:08:ea:9e:39:92:ed:08:75:34:7d:b5:f0:d1:bb:f9:12:72:
fc:d2:73:eb:c2:32:08:b7:00:8c:f3:f6:da:dc:7b:6c:a8:b5:
ec:90:f6:33:a1:4a:d9:de:1d:dc:df:59:a2:64:22:ed:6f:87:
34:2d:c5:61:fa:f1:16:59:2a:31:a9:32:c6:e2:ce:71:31:62:
ba:93:aa:8b:53:05:31:ae:c5:9c:a4:65:89:e4:01:87:86:2a:
74:ac:da:e1:28:3b:49:75:27:32:f0:41:9c:00:0e:fb:fa:6d:
f7:06:08:77:08:2e:f5:bb:67:2c:01:e3:ce:31:4a:11:e8:bf:
f2:80:20:74:b6:3d:0e:27:5d:49:bb:1c:c0:b1:4b:8e:0f:f3:
6b:4e:61:48:22:92:80:cc:35:a8:a1:9a:ed:0e:ad:ba:ec:63:
e2:b3:c6:fb:32:68:e2:2f:f6:4d:2c:fc:7d:25:f4:50:ed:64:
e3:3a:d7:2a:f9:1c:d7:bc:9b:ea:c8:d5:e8:d9:06:f1:ea:ac:
5d:be:5c:32:83:2f:01:fc:07:a1:6f:9c:c3:51:ff:c9:44:37:
6e:ae:66:a9:0e:96:57:64:37:99:99:5e:4a:e6:b5:bf:77:cf:
9f:49:70:e8:6a:cd:13:33:40:00:87:f8:68:eb:21:4d:3a:44:
e7:27:60:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:36 2025 by rpki-client