
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
File: ij_gucYwoz4XGgpceT80C0NEaTI.mft (raw, json)
Hash identifier: Q2PiAoozmOdAUJZdawoTW31wQDUsGSiNjCaNMaB4r3c=
Subject key identifier: A8:0B:0D:27:DD:02:21:61:99:58:81:13:3F:15:AE:99:5C:9E:B9:70
Authority key identifier: 8A:3F:E0:B9:C6:30:A3:3E:17:1A:0A:5C:79:3F:34:0B:43:44:69:32
Certificate issuer: /CN=8a3fe0b9c630a33e171a0a5c793f340b43446932
Certificate serial: 0199FB0EB6FA4EB2DABBBD0DE25FBE3C13B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
Manifest number: 16BC
Signing time: Sun 19 Oct 2025 06:01:09 +0000
Manifest this update: Sun 19 Oct 2025 06:01:09 +0000
Manifest next update: Mon 20 Oct 2025 06:01:09 +0000
Files and hashes: 1: 2ttxDr4pGnjxuFL3h06WTGhjE60.roa (hash: gb8hbvNo/pcY/swamzsbRwiOgi4eH7YRN51AtOhEfsU=)
2: ij_gucYwoz4XGgpceT80C0NEaTI.crl (hash: TVGnCDC/bkXdqRcTLC6curff5o9FrQj1t5D505YaGI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:b6:fa:4e:b2:da:bb:bd:0d:e2:5f:be:3c:13:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a3fe0b9c630a33e171a0a5c793f340b43446932
Validity
Not Before: Oct 19 06:01:09 2025 GMT
Not After : Oct 20 06:01:09 2025 GMT
Subject: CN=a80b0d27dd022161995881133f15ae995c9eb970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cc:b2:7f:21:a3:93:cb:fe:04:03:3a:fe:2f:
33:48:14:4a:99:d8:27:e5:f1:a9:52:3a:8f:11:4d:
c0:c1:e3:c4:97:b4:3b:06:89:0e:12:1b:32:59:98:
88:a2:b1:f6:a0:a3:0f:f6:6a:6a:ba:cb:4e:88:72:
54:67:a6:e0:41:23:14:da:55:0e:e6:d0:2a:a0:f0:
e6:65:48:d0:b2:fe:7f:ac:ee:2b:d0:d8:56:5a:6f:
6e:89:28:f4:bc:ad:02:6a:e8:b4:eb:40:fa:f1:33:
45:6a:d3:35:0b:d8:a3:c1:a7:11:41:53:93:73:ac:
f0:08:77:97:02:a4:be:81:75:34:2f:ae:92:a8:26:
6b:93:9b:8a:c4:6a:31:90:98:1f:6f:ec:b3:10:dd:
44:59:05:79:6a:98:af:f5:d6:aa:c8:d7:e7:b9:99:
80:05:e1:f2:e3:63:60:6b:bf:d2:a8:c3:b7:3d:79:
04:d5:7f:5c:e6:73:e4:89:0a:90:8f:1b:6f:f5:bb:
42:9d:35:5e:a3:02:44:c9:34:ee:28:f5:a9:ad:12:
a3:67:97:30:ed:85:5d:96:fa:44:f7:a3:8e:31:54:
98:b1:22:52:98:4d:dd:9d:6e:61:e7:e4:3e:24:d7:
72:67:6c:7a:d0:8e:ce:59:9e:41:fe:c7:e5:9e:c2:
40:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0B:0D:27:DD:02:21:61:99:58:81:13:3F:15:AE:99:5C:9E:B9:70
X509v3 Authority Key Identifier:
keyid:8A:3F:E0:B9:C6:30:A3:3E:17:1A:0A:5C:79:3F:34:0B:43:44:69:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij_gucYwoz4XGgpceT80C0NEaTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/f39a49-59ea-4c4f-98fc-53aab42f476e/1/ij_gucYwoz4XGgpceT80C0NEaTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b5:56:fe:83:d2:67:b6:c4:0d:0d:73:d6:ef:f5:1c:47:43:
54:a8:bd:03:15:51:66:eb:8a:ac:1e:13:00:74:aa:f4:b7:fb:
51:bd:e6:98:da:42:2b:6b:fa:1c:bc:81:64:8a:70:bd:99:7a:
f2:25:ec:44:00:e8:fc:a1:cc:b9:cd:43:5d:96:b0:43:17:ed:
64:6e:0f:d3:77:f7:9a:bd:4c:ce:9c:c8:d0:4a:29:b9:31:2b:
a6:88:56:46:11:1e:70:63:fc:9a:b5:fa:2a:fb:5c:e5:f3:1b:
a5:b0:5f:aa:eb:b3:50:d2:4a:c7:cf:dd:f8:ef:d4:8b:11:2f:
00:d9:cf:bd:ff:b0:e5:f5:b7:b9:d6:c9:aa:2e:c8:d9:6e:52:
09:c5:b7:c5:a8:5a:4a:2b:1a:96:21:71:f6:9f:2d:e9:29:7e:
b9:e6:42:da:a5:7f:bb:82:8a:22:38:94:d2:93:8d:ee:06:39:
2d:81:a1:99:2e:7c:84:c3:2e:8d:71:4c:80:73:6c:33:28:6c:
6c:8f:dc:af:f8:d4:47:eb:a2:dc:0e:dd:f5:7b:24:05:d2:98:
e9:ad:d1:84:a7:98:ca:16:c6:2e:e6:81:c3:c5:17:01:3a:32:
cc:b3:13:23:8c:1d:65:78:87:c2:d0:eb:bc:6c:1b:58:18:f4:
16:01:f5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:19 2025 by rpki-client