Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.mft
File: iBLpJPysuGLPO2T1bnZ7wybyf8o.mft (raw, json)
Hash identifier: PCCQlocLE/2Ibc0YO6bwngpW5vdTcU8Z2vbc7LZ2UXg=
Subject key identifier: 91:38:11:95:EC:46:E5:81:6D:C5:3B:09:94:1B:65:3A:BE:18:79:FC
Authority key identifier: 88:12:E9:24:FC:AC:B8:62:CF:3B:64:F5:6E:76:7B:C3:26:F2:7F:CA
Certificate issuer: /CN=8812e924fcacb862cf3b64f56e767bc326f27fca
Certificate serial: 0199FD3467CBA578045332FAFA0D4EA8776C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBLpJPysuGLPO2T1bnZ7wybyf8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 16:01:34 +0000
Manifest this update: Sun 19 Oct 2025 16:01:34 +0000
Manifest next update: Mon 20 Oct 2025 16:01:34 +0000
Files and hashes: 1: QKCpBgruuyz3i6ikVFdg6qQ3F0Y.roa (hash: G88p/gWLQ6tFindRbDEI4oT0jR5gYy6dY2FWfseB5AQ=)
2: iBLpJPysuGLPO2T1bnZ7wybyf8o.crl (hash: uhdRRWolyYYxpEv5XksMcyc3fxwAS5cyVZKSRW6eYPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBLpJPysuGLPO2T1bnZ7wybyf8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:67:cb:a5:78:04:53:32:fa:fa:0d:4e:a8:77:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8812e924fcacb862cf3b64f56e767bc326f27fca
Validity
Not Before: Oct 19 16:01:34 2025 GMT
Not After : Oct 20 16:01:34 2025 GMT
Subject: CN=91381195ec46e5816dc53b09941b653abe1879fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:68:5a:45:06:67:f1:f1:13:c5:5b:40:cf:a9:
bf:36:38:90:2a:58:c9:c5:d5:1e:d9:fe:9d:c5:74:
43:1b:68:f5:3d:d2:26:34:ff:8e:49:30:1c:e5:52:
c5:79:b8:e9:9e:ed:9c:86:6f:a7:e4:83:75:7d:e8:
16:ff:c2:33:b0:d9:33:d8:c2:ab:13:67:a9:65:f5:
39:57:0d:7f:04:7e:f5:45:9e:af:fb:3b:3d:db:59:
45:15:4a:b5:4a:a8:61:65:c2:cb:8f:f2:23:98:d5:
4a:88:54:3b:b8:1b:8f:f6:8e:14:90:c2:4d:5e:90:
da:bf:48:d5:6a:48:e5:20:a3:05:c4:14:83:02:05:
68:f6:5f:35:ee:9e:eb:ad:20:31:2e:3a:fa:4b:34:
3c:0f:90:5d:a3:9e:5d:09:ba:02:fe:c6:cb:ac:da:
5f:54:1a:b6:c5:dd:f9:82:16:3a:41:a5:0e:84:ae:
a6:07:29:b3:1b:4a:2f:14:26:d1:34:52:2a:1e:3c:
89:0d:0d:d8:33:28:f7:ce:ac:9d:47:cc:bb:69:d9:
67:60:4a:6d:01:0e:eb:f3:9b:6d:73:b4:55:79:dd:
56:fd:11:4d:1e:ce:5f:81:44:b8:49:86:03:b1:d9:
1d:9a:01:11:d9:28:08:69:6b:f1:ee:40:c6:ff:72:
00:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:38:11:95:EC:46:E5:81:6D:C5:3B:09:94:1B:65:3A:BE:18:79:FC
X509v3 Authority Key Identifier:
keyid:88:12:E9:24:FC:AC:B8:62:CF:3B:64:F5:6E:76:7B:C3:26:F2:7F:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBLpJPysuGLPO2T1bnZ7wybyf8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c5:11:40:62:32:05:6c:2d:4a:ab:32:22:ac:2a:15:b1:36:
aa:e5:fc:84:45:b5:e6:94:17:b6:97:78:25:7d:a6:69:89:fb:
79:cc:22:70:2a:ef:38:ff:d2:28:34:f0:7e:c7:5c:32:dc:21:
fd:c6:25:3c:ac:d5:c5:28:5d:14:f1:94:01:33:ff:b8:65:33:
43:ab:ac:94:d8:f7:2e:6d:cd:de:d8:d0:50:22:71:03:43:d1:
7c:c7:cd:0e:68:bd:e6:62:9d:76:c6:3f:19:33:4a:ef:4d:1f:
a4:c2:ca:26:e7:f9:7c:e4:37:ad:a8:c4:ad:3e:b1:68:83:e1:
bf:ed:11:b1:bb:18:f7:eb:21:09:e3:5e:ba:e5:36:1c:6a:b2:
05:60:54:88:63:7a:0a:ff:7b:5f:d6:93:6a:a3:4d:fc:c5:37:
6b:0c:7c:2e:05:2d:03:85:c5:59:bc:d3:0e:53:cc:18:a4:36:
b3:a5:3e:1e:ef:39:6d:19:d4:9c:e2:8c:c5:ca:62:e0:4a:7d:
4a:ce:f0:b3:db:cb:c4:14:93:8d:18:a1:07:5d:45:ef:00:0b:
31:62:60:d3:9e:88:00:48:25:49:ad:d4:65:b9:d2:d6:00:54:
54:a0:0b:e1:de:03:34:0e:c3:4f:0a:a5:cf:74:2a:4a:a4:0c:
30:f1:c5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:38 2025 by rpki-client