Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
File: I50GV-qu8Ja-yUsR9NadDT7QTOY.mft (raw, json)
Hash identifier: pVLmxGRnPNXnr3/eeDpzqj9hy30gpfkub8nkqjCmkpQ=
Subject key identifier: F2:DD:2A:FA:79:81:A3:51:F5:05:15:6C:27:50:13:2E:0E:38:A1:F7
Authority key identifier: 23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6
Certificate issuer: /CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6
Certificate serial: 0199FAA0CFF0B3F7EF580659143E4F0E12C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
Manifest number: 1426
Signing time: Sun 19 Oct 2025 04:01:06 +0000
Manifest this update: Sun 19 Oct 2025 04:01:06 +0000
Manifest next update: Mon 20 Oct 2025 04:01:06 +0000
Files and hashes: 1: FciKzBJuJmXxMHbhg7vtxvJaFpg.roa (hash: LJXoq9acQBnheF7twxm9ozyA/I0gm87jr1W8PivL0eA=)
2: I50GV-qu8Ja-yUsR9NadDT7QTOY.crl (hash: gMqSnkvOLA/J5lcGVXXmiKigMoCLek/U6pgQEzp7NS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a0:cf:f0:b3:f7:ef:58:06:59:14:3e:4f:0e:12:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6
Validity
Not Before: Oct 19 04:01:06 2025 GMT
Not After : Oct 20 04:01:06 2025 GMT
Subject: CN=f2dd2afa7981a351f505156c2750132e0e38a1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:92:02:ef:ee:99:bb:60:49:56:a5:c8:ec:
7e:27:e6:d4:fc:48:2b:4e:ac:6d:de:b0:99:cc:14:
2e:41:48:f4:17:04:9e:b7:b7:64:cf:4a:dc:f6:a9:
38:b0:ef:fe:eb:7b:7e:20:e3:58:f5:af:fc:01:06:
f5:c3:c2:19:ad:cc:2c:50:b1:cc:ce:68:eb:3a:e7:
16:48:3e:35:2f:1e:d5:96:dc:a8:7b:c5:57:a0:93:
4e:fc:18:3a:77:d1:4e:f5:c0:29:e2:52:8b:7e:9a:
77:62:f4:ad:91:2d:1d:df:0e:f7:01:a8:97:e4:06:
83:7e:68:81:5c:aa:c0:39:dc:11:f2:55:3b:dd:cf:
e7:2f:d7:a2:81:6e:5b:e2:5c:ab:26:5a:22:63:53:
15:03:7f:f6:6d:7a:47:d1:50:20:78:08:c7:2f:91:
51:f9:36:20:8b:e1:45:b5:cb:1f:dc:7d:6c:e4:c7:
32:29:e6:44:81:b0:ee:45:03:9f:bb:52:12:d8:8d:
cc:08:a0:6c:39:cd:ea:c7:df:64:e8:8b:49:7e:9d:
48:bd:cf:9c:57:e9:d5:23:4c:19:6c:40:32:1a:f4:
27:7c:ee:d7:9e:17:6e:eb:5a:27:61:04:cb:94:0b:
43:e1:aa:f4:53:8c:5b:6d:85:43:1b:0f:ad:6c:5e:
ca:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DD:2A:FA:79:81:A3:51:F5:05:15:6C:27:50:13:2E:0E:38:A1:F7
X509v3 Authority Key Identifier:
keyid:23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f8:a6:55:90:67:42:11:d9:38:fc:05:ec:82:ea:2c:06:18:
ce:85:8e:7a:ca:96:39:39:17:07:41:9d:80:8a:11:eb:11:e5:
94:35:90:ed:a5:f7:42:c8:00:51:a4:de:4a:70:7d:62:13:c9:
fb:cb:0b:5f:2c:14:d4:79:e7:70:1f:5f:3b:16:ac:ab:f8:a4:
2f:0a:98:f0:65:ae:6f:e2:b0:99:1c:1d:9e:2d:46:7c:78:05:
72:b0:65:97:27:45:9d:48:f9:cc:f7:5e:c3:99:eb:9f:b8:1c:
ca:32:ce:a9:f3:ca:cc:11:97:9e:22:64:0e:4f:24:a1:e1:51:
bd:5c:cb:39:1a:ea:f1:b3:62:f6:7b:30:67:a0:00:0e:4e:b1:
cb:6c:06:e2:70:cc:20:c5:f9:57:4a:6f:2b:10:14:a0:af:00:
74:e7:95:03:e1:08:e7:a2:19:36:91:49:ab:e9:88:f0:10:84:
72:ff:48:58:8e:3c:d8:47:c1:41:d7:45:4f:36:8f:b2:36:1c:
71:a4:22:3f:50:c0:87:e2:65:c8:d9:f8:5e:f7:28:39:a1:eb:
45:22:c4:96:74:93:d7:06:0d:03:fd:a7:78:07:8e:b3:5e:10:
d7:96:ca:9f:eb:72:93:8a:30:14:4e:3e:ad:ae:36:13:d4:a5:
43:0a:72:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:54 2025 by rpki-client