Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
File: IAxw024BOwfk5tjsPqTuQTtKqpg.mft (raw, json)
Hash identifier: WPB4Q/j+nLqPfOjS12wkAXpJdR8d2ud/2xzk/drXgWc=
Subject key identifier: 3D:9A:D7:78:3D:17:C8:BC:94:B0:C7:A5:3E:EE:9C:85:77:87:43:AA
Authority key identifier: 20:0C:70:D3:6E:01:3B:07:E4:E6:D8:EC:3E:A4:EE:41:3B:4A:AA:98
Certificate issuer: /CN=200c70d36e013b07e4e6d8ec3ea4ee413b4aaa98
Certificate serial: 0199FC8FC0D6C2056B66E494E84B1B701D3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 13:01:43 +0000
Manifest this update: Sun 19 Oct 2025 13:01:43 +0000
Manifest next update: Mon 20 Oct 2025 13:01:43 +0000
Files and hashes: 1: IAxw024BOwfk5tjsPqTuQTtKqpg.crl (hash: miI3CNomPQn5dc7OWfb0syntnELYbxWnSBANBOeOafU=)
2: xInhnEQ1Wnjyaeg0NstEg1xaXmc.roa (hash: v0sQzu+7Kta5k4gVJi492esLH7WHwA4RWeUkfyAHe34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:c0:d6:c2:05:6b:66:e4:94:e8:4b:1b:70:1d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200c70d36e013b07e4e6d8ec3ea4ee413b4aaa98
Validity
Not Before: Oct 19 13:01:43 2025 GMT
Not After : Oct 20 13:01:43 2025 GMT
Subject: CN=3d9ad7783d17c8bc94b0c7a53eee9c85778743aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:49:46:05:4c:2b:bf:37:22:0d:0b:58:f5:10:
48:41:79:cb:84:54:06:6e:68:0e:a4:e1:9a:b5:1c:
12:68:df:49:ec:23:80:fd:58:73:b1:8d:4a:86:a9:
b8:c2:a6:71:f4:5d:ff:e9:c4:7a:3e:da:0c:65:4d:
51:bb:b6:5f:71:97:8f:72:48:68:f0:4c:3d:43:6f:
07:ac:5a:a7:1a:f7:53:ad:63:16:0c:33:29:7c:ef:
07:01:07:81:26:91:de:7a:69:17:e5:85:86:53:94:
b5:33:3f:38:c4:5b:c9:fb:b6:63:53:ce:1a:c1:15:
d4:5b:26:8f:26:cf:0d:d8:44:24:b2:96:90:94:04:
38:33:d4:26:3a:d0:e7:ac:73:7e:11:c4:35:fc:46:
92:f6:2b:f6:02:44:0d:17:d0:f9:e3:b9:04:ae:2c:
dd:cf:80:f8:7d:6c:9e:03:81:5a:dd:70:e2:0a:8b:
bb:d6:fa:7c:95:2e:b7:b7:51:f4:39:34:66:c1:bf:
42:49:49:68:dc:72:98:5c:e0:d2:ee:bf:16:5b:d3:
45:e3:ac:43:57:9b:71:4c:84:f2:1c:cb:d4:00:fe:
76:21:3e:64:57:ab:11:97:56:24:28:90:7e:8f:ab:
3b:e4:c4:b6:4f:fa:68:83:75:e3:5c:83:8d:f5:d1:
e0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9A:D7:78:3D:17:C8:BC:94:B0:C7:A5:3E:EE:9C:85:77:87:43:AA
X509v3 Authority Key Identifier:
keyid:20:0C:70:D3:6E:01:3B:07:E4:E6:D8:EC:3E:A4:EE:41:3B:4A:AA:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:dc:75:07:67:f9:0d:d1:9e:d2:d7:eb:f8:1f:5f:c8:67:20:
80:da:31:11:6e:1e:dc:c2:bf:06:4d:72:1c:ba:82:f8:52:11:
9d:ec:84:10:4b:48:3a:6b:20:06:f4:0a:fc:05:c3:f8:2c:31:
58:b3:50:25:a0:45:85:44:38:66:0b:72:b3:13:c0:33:08:8f:
be:9d:84:7d:ab:06:51:f9:9d:45:a1:1e:0f:84:b4:12:40:28:
d5:7e:f3:11:73:fb:73:6a:1e:da:d0:5a:46:5b:c3:b7:f6:39:
a1:5f:a4:f2:da:3b:b8:56:bc:cd:98:65:91:77:a5:44:bf:31:
98:95:07:a0:fd:24:ed:29:75:dd:e5:c3:37:a9:1f:c2:b8:51:
11:0f:f2:8b:4f:ec:28:ec:e6:45:ff:89:e7:84:83:2a:c6:67:
ad:0c:50:df:dc:80:a4:39:7f:08:4e:54:da:25:0b:8d:06:09:
3a:20:b8:c4:0b:c3:4d:2f:23:96:b4:6a:96:5f:0a:8f:16:ee:
9c:59:b2:9b:fc:a0:79:dd:bd:68:09:23:36:e4:01:21:4f:05:
f8:eb:a2:05:7b:d4:03:be:55:18:4c:da:b0:46:5f:0d:05:12:
2a:00:79:ae:54:1c:e8:0e:18:68:8c:93:6c:db:47:92:20:af:
97:20:c6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:57 2025 by rpki-client