Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
File: IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft (raw, json)
Hash identifier: Gu4d3/C47DiVR3tQJPnL7zPNL9fwP8v+mz41NZgXAPk=
Subject key identifier: 98:F2:CE:DC:73:75:BD:24:F5:4A:91:4F:D4:B6:AA:F7:38:7C:C9:DC
Authority key identifier: 20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
Certificate issuer: /CN=209faf93524bb80774ffce9341f495a8fb318f10
Certificate serial: 0199FB0EBBE3C0078E93A20F23FB24CEA5E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
Manifest number: CB
Signing time: Sun 19 Oct 2025 06:01:10 +0000
Manifest this update: Sun 19 Oct 2025 06:01:10 +0000
Manifest next update: Mon 20 Oct 2025 06:01:10 +0000
Files and hashes: 1: 6q7TVMacTBaYR4P4ix3oetf6VRE.roa (hash: uLRq0asuqIHTiwS92wqc71gnPUUH1B7QJ0+2fDVufHI=)
2: IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl (hash: fWLbh/s4KP2spvFSgp3+/gzgeWGLDyO2Z6yfxjLsbhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:bb:e3:c0:07:8e:93:a2:0f:23:fb:24:ce:a5:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209faf93524bb80774ffce9341f495a8fb318f10
Validity
Not Before: Oct 19 06:01:10 2025 GMT
Not After : Oct 20 06:01:10 2025 GMT
Subject: CN=98f2cedc7375bd24f54a914fd4b6aaf7387cc9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c6:02:44:cd:9d:02:05:e2:27:48:fb:30:3a:
59:66:60:b7:7c:d1:46:f7:7e:2f:e7:ef:f6:02:af:
91:18:f7:52:4a:db:c9:ef:8d:3c:5b:5d:39:23:ae:
0b:16:19:3b:21:bb:01:d8:9b:45:cf:37:56:a1:96:
e8:c4:ad:d8:00:cd:e7:59:00:2e:8a:63:6e:7f:c1:
80:23:b1:19:f3:6e:d2:46:da:06:9d:be:db:bc:74:
2a:68:d9:e5:55:45:47:8e:db:6f:07:d8:c1:b8:77:
07:7d:13:01:b2:59:cc:8d:1f:86:80:48:f9:0a:11:
2e:f3:26:98:6c:91:09:24:c6:db:08:6d:a7:d9:20:
ee:9c:42:27:45:7b:2e:6e:d6:7f:e7:69:e7:f8:2e:
34:ca:a8:69:cc:3f:ba:9d:5a:fa:f3:95:6d:f4:aa:
2d:9b:2a:6d:5b:5e:c3:71:75:73:8c:07:81:b3:70:
7d:96:20:49:69:a1:46:fe:97:3a:fd:b2:78:26:0f:
ce:6d:a4:48:38:11:a7:5b:d9:82:c5:b9:c3:f7:77:
e8:8d:ac:d5:03:53:2b:2d:f9:36:34:8e:47:bc:9d:
6f:db:fe:47:96:7d:d6:f0:a0:a3:05:16:b2:f9:4e:
1e:25:26:eb:9f:b1:70:e1:04:91:53:ba:24:4d:16:
15:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F2:CE:DC:73:75:BD:24:F5:4A:91:4F:D4:B6:AA:F7:38:7C:C9:DC
X509v3 Authority Key Identifier:
keyid:20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:4a:5b:83:89:14:90:d2:8a:85:cf:91:61:94:89:87:7d:e9:
f4:04:54:86:88:06:cd:8a:dc:7d:59:79:1b:45:a2:7b:86:65:
10:a2:63:81:26:f3:32:cf:5a:da:79:10:31:0f:46:13:73:15:
b2:0e:b4:74:48:4e:2f:a1:69:0b:c5:d5:15:ef:33:fe:69:0f:
3b:d3:2b:f2:e4:93:87:29:15:85:bb:8b:70:f7:1c:9e:90:d9:
4f:88:81:cb:36:a0:72:99:0f:22:c1:9a:7a:fc:2d:ec:35:8c:
ef:57:9a:e6:cd:7f:88:f7:40:8a:ca:23:11:0b:e8:d4:85:de:
c5:37:3d:74:ac:ba:f3:c2:77:e5:6c:59:49:46:00:8e:1d:78:
ba:d8:97:5a:e7:33:90:50:df:e9:26:4d:35:58:f2:f4:f8:be:
8f:69:40:ca:27:4f:55:4e:97:99:e0:d9:14:00:5c:d2:54:91:
ed:8d:a9:0a:96:2a:9f:89:f4:02:d7:fc:be:c8:4c:22:32:95:
4f:11:90:5c:97:81:a7:df:e4:a0:b9:8d:b0:07:31:a5:4c:ee:
3b:17:b8:59:d4:85:1a:e5:89:a4:07:08:5d:24:e0:0f:2b:01:
34:bc:14:9a:a2:4a:1c:3b:65:40:41:31:3d:65:2d:e0:ed:47:
eb:2a:f1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:50 2025 by rpki-client