Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft
File: IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft (raw, json)
Hash identifier: T56Yfjz2yOyovCKXZiAapS64iks4ri/LiHAAJ+eLXFk=
Subject key identifier: 7E:CB:92:26:CC:B6:61:A5:CD:08:6A:E9:3C:40:51:AA:07:30:2B:10
Authority key identifier: 23:16:2B:BF:02:46:CD:A2:28:0A:29:34:32:AE:6F:0B:D6:82:61:31
Certificate issuer: /CN=23162bbf0246cda2280a293432ae6f0bd6826131
Certificate serial: 0199FF59AB328F3EF9094E58BD83D427D436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft
Manifest number: 09A7
Signing time: Mon 20 Oct 2025 02:01:30 +0000
Manifest this update: Mon 20 Oct 2025 02:01:30 +0000
Manifest next update: Tue 21 Oct 2025 02:01:30 +0000
Files and hashes: 1: IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl (hash: w0PNhwdhZD1vkzCSiA0OH3+XNZdOoGAIVk2JHV6uA5A=)
2: _Ya9SawdjIbplJ2DDMKFuiItpWw.roa (hash: D98XW56rnTmNC9SFO3Lu162y4j8aooITvkhCs2VUjc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:ab:32:8f:3e:f9:09:4e:58:bd:83:d4:27:d4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23162bbf0246cda2280a293432ae6f0bd6826131
Validity
Not Before: Oct 20 02:01:30 2025 GMT
Not After : Oct 21 02:01:30 2025 GMT
Subject: CN=7ecb9226ccb661a5cd086ae93c4051aa07302b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:16:21:f2:43:3a:4c:07:a2:05:22:0b:0a:46:
a0:e9:1c:ee:1c:ef:56:39:84:ba:b7:d0:b1:64:70:
c0:a4:5d:37:fb:47:09:83:7a:f7:24:74:9b:f4:97:
5e:7f:bd:f1:68:32:42:06:d2:2d:86:24:66:01:f8:
11:54:f4:e0:a6:4a:0c:45:84:f1:61:57:d6:6a:28:
ab:61:f6:3f:58:27:05:59:eb:07:05:08:f6:8c:49:
df:17:57:bb:f5:2c:87:11:44:a6:6b:e6:63:23:a4:
de:72:7f:1c:a2:ac:b5:04:99:2f:aa:8b:d2:8a:8d:
e0:e4:b5:57:a9:83:b9:d8:d9:25:39:33:7b:c1:1f:
e1:7c:af:d9:9b:6d:14:5e:41:dd:83:2f:50:3e:5f:
88:af:62:ae:39:33:25:5f:f5:77:8c:7a:1b:99:64:
5b:ae:04:b7:40:ed:87:1e:46:0b:e4:be:b5:48:af:
18:12:e0:51:e7:45:91:44:95:15:79:a5:fd:1e:f4:
d1:d1:0b:8c:60:3c:89:6b:d1:ac:01:62:04:b1:f8:
4a:6c:58:f7:73:56:a1:27:28:f2:1e:12:78:ed:d6:
da:ca:a4:0a:32:39:f0:ab:b5:d5:74:90:32:0b:5a:
10:b6:85:7b:ff:8f:12:36:04:d0:fb:bf:fc:96:bd:
ab:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CB:92:26:CC:B6:61:A5:CD:08:6A:E9:3C:40:51:AA:07:30:2B:10
X509v3 Authority Key Identifier:
keyid:23:16:2B:BF:02:46:CD:A2:28:0A:29:34:32:AE:6F:0B:D6:82:61:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a0:1a:f9:3c:31:4c:76:0d:0e:c1:3b:ce:a0:85:b2:5a:28:
be:6f:73:fd:39:c6:4f:ce:aa:92:86:e8:1c:e2:39:92:e8:f0:
87:af:e5:c5:9c:72:e0:45:98:fc:66:29:0b:fb:19:4f:58:95:
ae:df:d4:dd:a9:90:a7:9f:e0:62:8d:73:b9:98:ff:89:07:70:
8d:e9:80:27:6f:de:81:b4:00:d4:79:53:bd:c2:93:73:db:96:
d6:33:29:b3:dc:c8:3c:1a:e6:c0:24:d3:6c:5d:86:bf:3f:83:
5a:fa:22:59:4d:e5:e1:13:2a:e2:9a:40:00:a0:c2:81:e4:45:
19:ad:86:b3:70:1e:21:cc:6a:7b:90:74:86:04:d2:fa:12:03:
20:09:f0:6d:bf:eb:ec:3c:1a:cb:c1:dd:2e:14:28:36:f6:85:
af:06:5c:f5:b7:76:0a:68:16:ae:d3:cc:cb:f7:fd:75:34:ec:
50:5c:11:c5:f6:a7:f2:59:0c:d6:ec:4f:1f:74:7d:88:0b:43:
4c:fa:0a:5e:33:74:f3:a5:4b:48:54:a4:3d:28:0b:49:6a:e9:
ac:49:53:84:fa:dd:a8:b1:27:9c:5b:13:67:a4:b3:43:88:44:
0b:94:63:49:47:1d:a6:1e:a8:b8:27:7c:f1:5f:21:82:20:03:
e9:cc:0c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:07:57 2025 by rpki-client