Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
File: I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft (raw, json)
Hash identifier: 4N3SZtLGAtOYSlHYi8aP/J9eluNY/u1n8H4WbYnqiqs=
Subject key identifier: CE:26:0C:0C:85:B4:00:FA:64:37:77:AC:F1:72:5B:CC:8E:7C:A9:AC
Authority key identifier: 23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
Certificate issuer: /CN=238857660dc7fa60846f765b94cb69576255adb6
Certificate serial: 0199FC58B03C31B5BB18D7C436A982CCFBCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 12:01:34 +0000
Manifest this update: Sun 19 Oct 2025 12:01:34 +0000
Manifest next update: Mon 20 Oct 2025 12:01:34 +0000
Files and hashes: 1: I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl (hash: 3EUOEu5H2ekHSWom9ssjIz3Q1j4HAvYHAKm1fiejsEs=)
2: XHfhEGwfsHA5Cy6rVzKyCX0VS7I.roa (hash: r0CY6B9tn8PTb3kJeN+vQ/cBCfQUrTHL37aoDlJepRA=)
3: tcPEvHuX8bqS2YKyM4C5K4tHwxk.roa (hash: rKNoYxngd5L4bRt06ua2/XaA1SqXHMSPI/cKc0JvWoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:b0:3c:31:b5:bb:18:d7:c4:36:a9:82:cc:fb:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238857660dc7fa60846f765b94cb69576255adb6
Validity
Not Before: Oct 19 12:01:34 2025 GMT
Not After : Oct 20 12:01:34 2025 GMT
Subject: CN=ce260c0c85b400fa643777acf1725bcc8e7ca9ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:50:09:3e:19:85:8f:80:0b:af:21:19:87:77:
0e:b6:86:ae:37:fb:08:9b:1c:48:d6:b2:c9:6b:68:
fe:bb:c0:c5:9e:b4:2f:85:ed:ae:aa:16:0c:40:90:
c2:80:38:11:55:04:9b:d3:d7:da:62:1f:9f:a8:11:
ba:23:a9:65:01:5c:f4:6d:1c:e8:87:90:72:d5:78:
2b:43:6b:5c:de:af:0e:27:80:c1:e5:6b:32:4a:bf:
b5:68:0c:d6:a1:6a:15:04:11:4f:c9:40:ef:44:71:
19:a8:e8:6a:6e:c1:fe:ae:49:57:bb:66:2d:2f:b8:
5d:6d:14:a9:6c:6c:e1:bc:fc:37:34:c7:e6:87:6b:
8d:a9:e2:d9:18:38:89:2c:97:dd:6a:33:74:3c:5c:
38:1c:f4:db:88:0f:6e:5e:2b:63:bd:f7:ac:26:f9:
c2:f0:94:a6:35:64:4e:74:9f:ae:85:15:5b:53:8b:
32:36:77:81:10:b2:47:72:01:e7:74:0a:be:99:65:
3c:09:90:a6:89:03:73:db:ac:d0:05:f0:dc:d5:2e:
55:9b:3b:40:bc:c5:31:a9:e4:ee:ac:7d:e7:6a:58:
3e:2b:5c:fd:8f:e8:62:cd:fc:9b:36:83:fa:20:84:
4c:bd:e5:df:39:a8:52:06:3d:39:30:e1:c6:cb:f3:
81:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:26:0C:0C:85:B4:00:FA:64:37:77:AC:F1:72:5B:CC:8E:7C:A9:AC
X509v3 Authority Key Identifier:
keyid:23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:50:88:a6:39:44:fe:51:69:6e:98:d2:6e:a4:78:45:77:9d:
b5:fe:70:3b:23:9f:91:ac:e0:ac:f6:6b:6e:04:db:4c:64:23:
d7:ff:d1:87:c9:d9:7d:6b:6c:bc:65:70:2b:d4:fc:5b:9e:b5:
24:85:c6:0f:b0:62:5a:1b:9d:0e:e0:90:d8:76:53:a6:d4:21:
65:e7:00:68:05:e6:70:39:7a:0d:4a:4c:91:d8:b6:93:71:ea:
a6:65:8a:c7:8d:45:0c:a6:93:bc:1b:90:f7:6a:8a:14:55:f5:
14:7f:7f:f5:dc:e5:5b:7d:ca:e3:6c:d8:4f:b7:ba:07:7d:34:
b4:8a:a9:a0:77:7c:32:c7:f6:c5:da:56:4f:d0:39:4b:ba:9d:
6f:89:ae:cd:58:cb:81:69:d4:ab:5e:1c:3f:d0:09:e7:e2:39:
ad:74:65:ae:d6:fa:95:03:32:63:44:0f:bb:d4:3a:26:a4:ec:
56:f4:a9:45:ec:a3:e5:9a:dc:4e:ca:09:72:0d:8c:a1:35:7e:
36:94:5f:4b:b8:8f:7c:a2:05:67:c8:e5:e0:4f:9c:d6:62:07:
08:37:5a:bc:d5:d5:fa:fb:4d:d3:df:a8:56:e4:59:0f:6c:bc:
b6:5a:49:54:69:f0:cf:fe:fc:1a:df:63:4e:35:e3:51:e3:40:
65:a3:c9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:54 2025 by rpki-client