Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
File: IY2n_1dueNwjTrdMvwcwdsH368k.mft (raw, json)
Hash identifier: MTEk7GM5GVxtkjdsML1YYwEAP7UKHxFc8KOdhrpgdfo=
Subject key identifier: D2:B3:11:FD:63:4B:E9:07:D4:C8:89:9A:08:BE:6F:6C:A8:F8:3A:E3
Authority key identifier: 21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9
Certificate issuer: /CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9
Certificate serial: 0199FFFE51A563C7C3A4BB48C19397510D50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
Manifest number: 1307
Signing time: Mon 20 Oct 2025 05:01:21 +0000
Manifest this update: Mon 20 Oct 2025 05:01:21 +0000
Manifest next update: Tue 21 Oct 2025 05:01:21 +0000
Files and hashes: 1: IY2n_1dueNwjTrdMvwcwdsH368k.crl (hash: 8kjK1Gak3p+7qcvBPBeLGWzY/ZYsLCdFg7ou5iIPATQ=)
2: vHFL3NqT62c-dvNoqZM6UY1Qkso.roa (hash: a6jTEveih8CJwQfmE458rXUCSvGrU0Bb9osIwlUUdEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:51:a5:63:c7:c3:a4:bb:48:c1:93:97:51:0d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9
Validity
Not Before: Oct 20 05:01:21 2025 GMT
Not After : Oct 21 05:01:21 2025 GMT
Subject: CN=d2b311fd634be907d4c8899a08be6f6ca8f83ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5c:47:33:b3:1f:c9:a8:ce:13:cd:3d:c7:30:
fc:1f:55:92:14:26:44:df:a2:21:9e:20:19:3f:d6:
67:56:ca:2d:03:c8:cb:fa:d1:41:c0:fd:54:e3:55:
4b:c5:ea:16:df:51:f9:73:e4:dc:53:1f:b4:b2:fb:
cb:e6:33:61:09:d2:a2:0f:17:04:b0:ba:28:d6:ec:
fd:ed:56:39:89:39:93:f2:4f:d8:6a:77:4a:10:c3:
ec:36:a3:de:85:35:a0:12:4f:11:f0:7a:ef:77:c7:
9c:6a:64:3f:94:5d:78:fd:66:a9:48:2b:16:9a:61:
8a:9a:7f:c1:e2:61:79:e5:38:4d:cf:ba:be:c0:8d:
1e:8c:f3:59:7b:a4:af:c2:63:f0:2f:7a:eb:5e:ac:
8c:ae:5f:f9:6b:a3:d2:20:e4:88:91:de:a2:ad:f5:
6f:8d:a1:2e:0b:27:d8:4c:60:88:30:d0:47:a7:5e:
18:32:dd:fa:00:d7:c2:d0:3f:26:e0:e5:68:bc:4b:
3b:ff:71:14:02:e6:a8:ec:9b:3c:21:06:f1:65:9c:
0f:8c:a3:39:43:fc:4c:b6:32:55:72:eb:36:9d:18:
9e:11:e8:3e:db:c0:f7:cd:3c:94:2a:10:54:fc:99:
30:3a:6e:d4:06:0f:05:db:eb:6b:71:3d:ef:04:67:
13:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B3:11:FD:63:4B:E9:07:D4:C8:89:9A:08:BE:6F:6C:A8:F8:3A:E3
X509v3 Authority Key Identifier:
keyid:21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:3b:10:f5:3c:6b:e5:67:fb:91:59:6b:a8:ac:12:7b:bf:ed:
0a:4b:1d:a1:d8:56:a8:e8:ff:03:3d:3d:2c:f9:46:86:ef:0e:
34:02:73:bf:cf:d8:b9:16:3a:78:d4:e7:2f:b5:2b:1a:14:ba:
59:a8:0b:a2:e8:f4:2c:7e:2e:10:1a:60:59:16:ce:fe:ba:47:
73:ec:f3:40:8f:4e:37:0c:14:2b:50:50:39:44:df:8f:ab:4c:
37:09:8b:df:b5:dd:e2:9e:28:03:08:63:ec:36:82:26:ac:f2:
12:17:e3:7e:e5:10:9a:dd:70:c6:55:22:bd:18:8c:ce:dc:ab:
dd:cb:6d:36:94:37:c7:fa:2e:f7:3c:ee:ea:17:6a:08:fb:62:
eb:51:93:02:22:92:bb:e7:7d:ca:71:d5:52:67:fa:2a:38:33:
0e:e6:93:0a:43:d0:60:9d:b4:a5:79:68:12:09:7e:21:af:14:
77:49:47:7d:01:a8:5b:96:8f:2b:e6:6d:fa:45:08:cb:d6:84:
c0:aa:37:c4:51:a7:9f:ec:a4:a3:6c:13:23:9c:b0:ad:d1:94:
2e:75:b0:0f:f2:ea:3f:08:d2:8a:87:57:99:7e:25:95:20:28:
c0:91:de:8d:8b:56:ce:a3:21:58:09:df:70:c0:a3:1b:56:4e:
b9:db:cb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:33:18 2025 by rpki-client