
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
File: I2YsmpgK11hGUKuqNUW56pHT414.mft (raw, json)
Hash identifier: irEQTlfVTqL+fNU0glD9+Qbgz+lp4qokgpYIb9BH/RU=
Subject key identifier: CA:E4:8E:B9:BE:C3:B5:BA:E1:83:DD:8B:15:F3:15:57:E7:E8:EC:02
Authority key identifier: 23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
Certificate issuer: /CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Certificate serial: 0199FBB36EBA299C1A5AE2998D080DF52D26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 09:01:04 +0000
Manifest this update: Sun 19 Oct 2025 09:01:04 +0000
Manifest next update: Mon 20 Oct 2025 09:01:04 +0000
Files and hashes: 1: C3a8w3EA0yZf6c0xKrOAJTxFR18.roa (hash: LNpEHJw7nSfysWTvnjy399UaYBj+VVtM2qrA/gSp1Ss=)
2: I2YsmpgK11hGUKuqNUW56pHT414.crl (hash: BA+qhOG5UsVS3cwBd8aL5ObaARZqh94WBBih7mVwLsw=)
3: SVlLEhHqyoa8VmAwyeAz-eO7tmk.roa (hash: 3GqZDoa/8luHJb3c9fM/8sF9/CWphehWtTWgxsoVdy8=)
4: m-Ncfpuw9lyFAGvhN6SO1U82ZPI.roa (hash: /M7ImEM1ZD0v5nu/Nb9bLOvnyebMcwld8IBc6QoNAjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:6e:ba:29:9c:1a:5a:e2:99:8d:08:0d:f5:2d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Validity
Not Before: Oct 19 09:01:04 2025 GMT
Not After : Oct 20 09:01:04 2025 GMT
Subject: CN=cae48eb9bec3b5bae183dd8b15f31557e7e8ec02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:01:04:b3:26:09:64:72:01:89:a6:88:f6:27:
6f:53:f8:2e:98:0f:2f:6f:bf:28:35:11:ba:18:bb:
fb:6c:b6:bc:88:92:56:de:53:d1:c3:6d:e3:d7:b0:
a4:68:c8:76:38:d9:25:57:eb:45:10:b9:0c:f5:c5:
fc:49:bc:71:6c:6c:7e:7b:4e:d5:f8:95:4b:a7:9a:
d4:0c:fc:3c:af:c1:61:77:fc:63:a0:be:63:37:66:
54:1c:71:69:c9:73:4c:2b:c5:a9:c4:1d:08:f1:72:
e2:a4:8d:f8:e2:aa:7c:c3:2e:e5:77:6e:64:1c:49:
6e:9b:b0:ed:6f:f7:bd:48:65:63:ee:ce:c2:a1:c8:
e0:85:69:01:e7:b8:ef:8e:c9:e3:2a:67:d5:8d:56:
aa:3e:d0:d4:29:35:57:b8:98:6c:9b:56:d5:f3:7d:
6b:d7:13:fd:30:fc:97:51:65:14:56:55:07:45:bc:
aa:68:84:b3:e3:97:e4:a1:22:db:e8:af:c3:7b:3d:
c5:fd:80:85:7b:77:cb:79:de:87:10:e7:ac:be:81:
f6:07:9f:78:60:b7:ee:91:a2:30:2b:70:f9:a7:23:
37:c5:8d:ae:2a:e7:9f:6c:3c:f1:d5:ec:a2:cd:6d:
63:97:66:a7:56:dd:b3:65:7a:2a:6f:fb:4d:3f:ee:
45:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E4:8E:B9:BE:C3:B5:BA:E1:83:DD:8B:15:F3:15:57:E7:E8:EC:02
X509v3 Authority Key Identifier:
keyid:23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:64:6d:f9:a8:ce:a5:f3:95:92:17:0b:1a:18:ac:54:dd:dc:
96:60:d9:dd:06:ec:a6:76:7d:8e:e5:fe:5d:69:93:95:1f:89:
9a:a5:6e:9f:9e:62:05:fa:62:41:dc:72:4b:9d:3a:4d:f6:c0:
96:ec:48:22:56:65:e6:ac:6b:c2:5d:f1:92:d0:1b:73:1e:24:
6d:53:32:66:3e:41:3c:c7:ae:ab:ad:2e:06:99:fb:e2:da:8f:
2a:1d:ef:86:cd:c1:b1:3d:de:34:03:90:ea:88:73:3b:41:62:
84:f6:ef:78:07:46:10:f5:2b:dd:61:8f:63:e1:27:25:8f:23:
e3:65:b5:df:18:97:7e:8b:00:94:62:8c:d0:cf:49:7c:7b:9e:
1a:14:a7:4f:81:41:7b:f1:6e:1e:cd:7a:d9:ca:07:e4:1d:3a:
31:ad:51:6e:66:b3:6a:94:6d:c6:f0:89:1b:78:13:89:61:40:
8c:9b:77:1a:c8:f5:5b:98:b9:70:d2:42:26:06:78:0f:e2:3e:
36:47:1a:16:2b:1f:f1:2b:af:3b:86:e1:ff:45:c2:31:62:16:
0c:19:1e:87:12:9d:bc:76:80:b2:d2:54:91:20:51:c4:12:a9:
24:a6:b8:17:64:55:44:01:bf:79:47:88:8d:f3:bc:35:d8:cc:
c4:06:03:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:03 2025 by rpki-client