Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
File: IBjvCLVd2yDIgWpiGkWc25J7MgE.mft (raw, json)
Hash identifier: SVJ6Cv8qsExOVFNQLqvS+0grTOnlxqI2+vneHScNcDQ=
Subject key identifier: 69:CC:40:45:0B:14:37:83:BC:AC:D1:6D:14:8C:7F:F3:92:2F:8A:F0
Authority key identifier: 20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
Certificate issuer: /CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Certificate serial: 0199FDD9B499E60EA8373784F0C7D9011A41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
Manifest number: 1676
Signing time: Sun 19 Oct 2025 19:02:07 +0000
Manifest this update: Sun 19 Oct 2025 19:02:07 +0000
Manifest next update: Mon 20 Oct 2025 19:02:07 +0000
Files and hashes: 1: IBjvCLVd2yDIgWpiGkWc25J7MgE.crl (hash: d94jwodwoD+MsdG1vrxBKcxJNu3kdbvBwkT8UU7LfqE=)
2: sg6Ke3Csa6eOc_sincTW9jDFk9g.roa (hash: JJ9uMfjWarSgHm6HNb7BDGcOt4jlyu+d939+XIEHnuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:b4:99:e6:0e:a8:37:37:84:f0:c7:d9:01:1a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Validity
Not Before: Oct 19 19:02:07 2025 GMT
Not After : Oct 20 19:02:07 2025 GMT
Subject: CN=69cc40450b143783bcacd16d148c7ff3922f8af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:82:84:e3:ba:5d:f7:79:21:40:c5:c7:ec:
a8:69:03:63:5e:07:81:e7:99:76:86:67:6a:3d:ea:
47:eb:b0:49:66:39:51:e1:74:2f:b7:97:a7:21:db:
18:9e:27:a0:ef:5c:3a:e6:b1:42:be:34:1d:87:46:
7d:6c:d8:20:30:70:c7:44:37:69:94:70:47:b2:a0:
98:e5:43:3a:fd:8a:09:34:84:b6:f9:17:31:dd:cc:
05:c2:93:20:f2:1b:34:e1:ae:74:8c:41:f3:e3:dd:
b3:7c:d5:44:a9:10:0f:13:8b:99:02:97:42:31:1d:
de:2c:a9:58:c1:b1:58:92:8c:f7:ce:f2:56:a4:36:
2c:bd:40:e7:2d:3f:dd:37:62:18:ee:3f:12:11:b9:
96:ff:bf:47:27:fb:6b:7e:cd:af:36:d6:57:7e:75:
9a:38:dd:6d:73:8e:03:b7:f7:74:70:e6:93:b0:eb:
3c:78:1e:bd:76:44:3a:ac:20:05:b6:17:7a:a7:46:
f7:71:ce:30:f3:c8:08:1e:10:1f:3d:89:08:05:63:
aa:e0:5c:7b:f7:7c:04:d1:41:37:f6:81:12:73:49:
e7:f8:87:9d:cb:7f:ce:44:6e:52:a5:26:0c:64:98:
1b:48:db:f7:b0:6e:d5:59:90:9d:06:2e:bb:8d:66:
55:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CC:40:45:0B:14:37:83:BC:AC:D1:6D:14:8C:7F:F3:92:2F:8A:F0
X509v3 Authority Key Identifier:
keyid:20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:3f:e5:43:b7:f8:fc:72:ba:9e:3b:79:25:aa:04:8a:d6:3e:
ff:af:28:1f:37:86:59:1e:ed:d4:97:83:03:1d:08:1d:9a:80:
95:4b:1f:0f:2b:2a:bc:1b:c8:fa:83:ea:4b:72:e1:aa:77:90:
19:21:af:10:61:4b:08:38:37:cd:e0:23:ec:89:7f:5e:3d:46:
fb:1d:67:c2:7f:b7:c2:fa:79:bc:c2:20:1d:ed:15:3b:59:0d:
dc:26:65:16:e4:f4:f5:be:12:20:2e:39:47:20:8f:0d:8c:65:
4b:d0:e8:92:17:f5:ca:94:06:33:41:06:62:fc:6e:23:d2:42:
48:d9:e6:34:9f:7c:54:01:27:48:f1:fd:f4:c6:07:53:f2:bc:
78:af:e0:be:b5:98:c8:eb:21:fc:14:de:5d:8f:cc:08:33:3d:
b0:55:f7:10:85:3d:2d:e3:c6:aa:83:61:2c:1e:17:cb:af:76:
69:a7:a3:0f:16:62:89:9f:81:d3:8c:5f:0a:47:e0:07:e0:ba:
16:2f:97:7b:93:97:d8:b6:ea:cf:02:e0:68:0b:8f:dd:ee:5e:
c0:7a:38:e5:86:46:c3:1d:c1:00:03:e4:e5:30:85:8e:b5:58:
d1:1f:ab:15:25:ea:f2:ea:8e:04:f0:fc:9b:c0:ef:3f:2f:15:
23:ea:df:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:22:37 2025 by rpki-client