
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
File: IjbtX1Yj7et5EKzTHV9u6B5csX4.mft (raw, json)
Hash identifier: QMyDDVluM2asu7Au2Ucu4lt457bSWUPdc8yf+jBxm3I=
Subject key identifier: B1:20:73:94:98:DB:0A:97:B0:BD:BB:47:07:4A:7C:36:B2:31:00:D2
Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
Certificate issuer: /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Certificate serial: 0199FB7C6E2642BA1C6830CE688910DDECB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
Manifest number: 0EC8
Signing time: Sun 19 Oct 2025 08:00:59 +0000
Manifest this update: Sun 19 Oct 2025 08:00:59 +0000
Manifest next update: Mon 20 Oct 2025 08:00:59 +0000
Files and hashes: 1: 2aoaMcLeoHsRYMrDwR7GYBYfV38.roa (hash: jssRFClKzuPy7Bnng6eFWBTeCatBaCf3VHUaJ2d4iI0=)
2: DY_YBD7dUEwRu5f1VApN2Xto06Y.roa (hash: kRig8nqc2JDYyWblKNLJUeoM3OkrL2nvfEXQMIcNjPI=)
3: IjbtX1Yj7et5EKzTHV9u6B5csX4.crl (hash: 3wbHjZbkBEwQ7e6P8wXtfT0v5FKRIPI33jlWr1WRGPM=)
4: oxqh0Vlunc9_jJzsSDgtivZ6iaI.roa (hash: O+sbnF0yUj4wLiTH2KtiKCTxn2FjAX1wiARhxbkhBM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:6e:26:42:ba:1c:68:30:ce:68:89:10:dd:ec:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Validity
Not Before: Oct 19 08:00:59 2025 GMT
Not After : Oct 20 08:00:59 2025 GMT
Subject: CN=b120739498db0a97b0bdbb47074a7c36b23100d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:61:93:57:0a:2e:e4:d5:f3:38:e2:fc:94:bb:
bb:b9:69:0a:8e:ba:fe:63:8a:f8:fc:42:a0:53:ce:
e3:88:b0:de:9e:7b:26:51:cb:62:54:e0:57:d7:3c:
6b:7a:77:58:18:54:c8:15:f3:f3:fc:02:0a:e9:7a:
82:0a:91:97:79:70:20:45:00:44:70:bf:0b:4f:f0:
a1:eb:60:44:c1:f8:d6:0c:c8:c5:21:81:27:d4:ff:
fe:63:86:f2:9a:4d:b3:e9:f4:21:2d:61:00:28:7d:
6c:d6:68:87:7d:84:09:2a:66:76:ba:0a:e1:02:fd:
3e:59:f0:82:8b:5e:25:01:c7:be:26:b0:7f:65:b5:
c8:92:88:9b:35:e3:55:d9:70:17:0f:c0:94:69:e5:
46:bf:df:8a:aa:d6:74:58:1f:e7:2c:04:d2:6b:9f:
04:fb:37:2a:ea:9f:41:63:94:d3:25:07:d9:e6:36:
f0:a7:28:6b:b9:75:a2:92:30:b4:ce:f7:07:23:a9:
12:1b:c7:18:46:59:16:b5:b8:b8:4d:db:3a:9d:a0:
06:b4:cb:8f:32:66:2c:5d:fc:c0:78:d6:da:20:4b:
ca:65:6d:7e:43:97:0f:cf:88:39:bf:aa:21:d9:ea:
63:f2:b7:c6:a0:73:7a:bb:a9:ac:ef:c4:8a:e7:ca:
2f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:20:73:94:98:DB:0A:97:B0:BD:BB:47:07:4A:7C:36:B2:31:00:D2
X509v3 Authority Key Identifier:
keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:4c:e0:77:df:ac:dd:21:b2:a7:8f:fb:99:3d:f8:24:2d:32:
d4:4d:8d:d1:71:30:83:65:78:47:0e:9a:38:c5:56:23:8b:06:
3a:65:39:5c:1f:f6:b4:81:f6:53:60:5f:50:f0:e4:58:0b:e8:
d2:a5:95:81:81:63:22:6c:90:e7:fd:c4:80:f4:ce:b6:c4:79:
43:3f:d3:56:8e:3a:58:c6:26:82:04:d5:81:17:88:68:aa:36:
44:00:5a:d1:6b:ce:33:6c:68:f8:8a:68:22:c0:c5:b3:4d:3b:
df:79:37:4a:ee:5d:6d:4d:63:10:69:27:b5:c0:e9:db:33:8c:
0f:b6:ec:c3:f1:a4:cf:a0:1c:fb:bb:af:a4:67:44:e7:a5:bd:
76:b0:99:1b:6e:0a:00:13:53:42:9b:dd:f1:b7:7e:c8:ec:6c:
39:5f:e8:cd:ab:fc:a9:35:89:51:b9:02:47:e5:ca:db:c3:39:
e3:e8:b4:f0:c4:e7:2d:fc:57:3d:cd:87:83:e2:d6:25:7a:cc:
62:76:84:03:47:fc:18:37:fc:4b:2c:ee:f1:d8:0c:2c:1e:3a:
7f:77:57:0c:82:96:a5:b2:4b:74:71:02:be:d8:63:ea:86:91:
02:d7:c1:de:5c:5b:5d:15:af:ad:8a:3b:82:69:0a:e7:d5:dc:
9e:0c:14:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:18 2025 by rpki-client