Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
File: IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft (raw, json)
Hash identifier: c4IhpZHLdVp7ot1Ec8Mfrud0cSa4ZQ2fD10C34Rk4/A=
Subject key identifier: 5B:3D:85:F5:83:5D:61:BE:0F:21:2E:9E:3A:63:B8:5B:1C:86:98:F1
Authority key identifier: 21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
Certificate issuer: /CN=215a409d27b9a69346324004694da11beae02dbb
Certificate serial: 0199FC8F91F3A015D5DDB41468C56A4AD215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
Manifest number: 0FB8
Signing time: Sun 19 Oct 2025 13:01:31 +0000
Manifest this update: Sun 19 Oct 2025 13:01:31 +0000
Manifest next update: Mon 20 Oct 2025 13:01:31 +0000
Files and hashes: 1: 5Nxb95AjDYyihX948d4SpKIggZQ.roa (hash: LXnf6zKJW6C6S9ESb5TMXAjwJki5kjy7RI6/DxC0q14=)
2: IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl (hash: tmFTZD4Cxnqic1PJONklVWK8vcaJWE2ZYusbmWpp4wo=)
3: g00WlqoayNMboio4aQJxi5oYUAs.roa (hash: Hyc0gnAg44yWXRt2jBl8ZFxFJUhWTRX2EA3Xr0Vxj/g=)
4: lZSfaFLQsnTkwdvn0B3rZGkqRuA.roa (hash: QyBiQ/S33Pxg+43BukzMj/PPueurFOtFulFm03RWAS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:91:f3:a0:15:d5:dd:b4:14:68:c5:6a:4a:d2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215a409d27b9a69346324004694da11beae02dbb
Validity
Not Before: Oct 19 13:01:31 2025 GMT
Not After : Oct 20 13:01:31 2025 GMT
Subject: CN=5b3d85f5835d61be0f212e9e3a63b85b1c8698f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d3:40:e9:8e:02:81:ac:37:25:7d:ad:ba:02:
3a:2d:69:8d:ea:01:5b:81:db:e5:16:ce:b6:e7:5a:
d1:e6:eb:f2:30:43:e8:27:2b:20:1a:5a:5d:07:27:
17:62:13:91:0f:55:1e:15:9a:b7:bd:b5:d2:17:4e:
19:1a:c1:5b:ba:2c:32:e1:ca:43:dd:c6:b8:7f:e7:
e6:b9:6d:eb:f4:47:77:30:ee:09:fc:b8:36:69:a4:
eb:8f:3a:0b:42:68:e5:a4:e1:df:44:59:4e:58:74:
34:76:b9:5d:41:35:dc:64:66:7a:73:0b:f1:98:42:
8d:31:60:c8:9e:20:a6:14:4a:53:c7:14:ac:a9:3e:
d3:41:b8:8e:9c:ef:93:b3:91:7e:fb:9e:0a:8b:f4:
e2:83:77:0c:7d:35:33:ab:92:33:ba:46:38:5d:ff:
24:4d:a4:0c:bd:08:fa:50:bd:18:24:c2:a4:50:c6:
94:49:9a:94:38:4a:1c:a9:75:a4:d4:c9:f2:5b:e8:
ca:ad:8b:9f:36:0d:ed:3a:04:e4:31:65:46:4a:e2:
d7:23:4d:8c:7b:bf:ea:06:e0:56:cd:03:59:7f:b6:
33:74:cf:0e:69:67:7e:19:41:ff:5a:2a:26:c1:32:
8c:3f:57:fa:e9:33:3b:d9:a1:96:55:89:d5:ec:89:
0c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3D:85:F5:83:5D:61:BE:0F:21:2E:9E:3A:63:B8:5B:1C:86:98:F1
X509v3 Authority Key Identifier:
keyid:21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:20:30:ac:d3:6b:82:e2:3d:c8:ca:cc:96:02:aa:44:66:97:
8c:b7:31:82:4b:62:be:f6:d5:a3:b8:62:b6:d0:bf:cb:e3:45:
0a:03:07:cf:8c:f5:89:78:b2:a0:d0:88:8c:41:67:3c:29:c5:
c5:6e:71:74:af:31:15:c0:2f:ff:de:a4:f8:82:f1:10:af:0e:
e9:57:0d:dc:1f:f6:03:17:de:82:e1:e7:b6:08:ae:fa:29:49:
a7:a9:3f:4f:56:97:c8:7c:65:e9:85:cd:07:d6:0c:9d:e5:16:
6a:12:57:18:49:77:f5:62:62:09:62:d5:51:77:ac:96:11:27:
ae:2e:ac:d6:18:eb:e2:a7:b0:ee:e0:ce:4d:70:51:96:8b:f5:
9f:64:8e:1e:dc:70:6d:fe:ee:a5:94:0b:c0:58:da:dd:d7:b8:
4a:75:26:6b:3a:54:24:cb:00:47:31:d6:8a:60:5d:76:ef:89:
08:6e:05:74:ff:a9:04:04:2c:6c:af:ac:31:4b:2c:81:4b:aa:
ff:46:30:46:bb:9c:bf:16:f7:8c:cc:91:d3:4b:1b:de:8b:25:
5d:53:48:d1:e9:53:45:8e:32:0f:fd:fa:ff:06:73:13:4a:c2:
1e:3b:0f:0e:cf:d3:1d:fa:c6:29:c0:86:e4:60:12:7e:65:0d:
47:7c:c4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:39 2025 by rpki-client