Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft
File: IHeZAnMp8iaCdkVzryEV2pWp9r8.mft (raw, json)
Hash identifier: WKGb+QkrpN3VPewUa5md9NVA3ffi2RXMpYKhXSO4OhI=
Subject key identifier: B9:8B:07:99:2E:EA:AB:0C:07:F9:0B:61:36:0D:1B:8C:F7:AB:25:92
Authority key identifier: 20:77:99:02:73:29:F2:26:82:76:45:73:AF:21:15:DA:95:A9:F6:BF
Certificate issuer: /CN=207799027329f22682764573af2115da95a9f6bf
Certificate serial: 0199FBEC0B72A66D10995EB4DB3355A93BA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHeZAnMp8iaCdkVzryEV2pWp9r8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft
Manifest number: 0FE1
Signing time: Sun 19 Oct 2025 10:02:54 +0000
Manifest this update: Sun 19 Oct 2025 10:02:54 +0000
Manifest next update: Mon 20 Oct 2025 10:02:54 +0000
Files and hashes: 1: 8EaewYTyFly5jEaj4gZEqMNcVMk.roa (hash: gqxj+841N8d9uy4L59oEcZudU4ge+IzVBr1jzF4wgjc=)
2: IHeZAnMp8iaCdkVzryEV2pWp9r8.crl (hash: J9aaHephBmxeBa5h0EY4YhMXjAdoCrvCVw9rlRDtLV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IHeZAnMp8iaCdkVzryEV2pWp9r8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:0b:72:a6:6d:10:99:5e:b4:db:33:55:a9:3b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=207799027329f22682764573af2115da95a9f6bf
Validity
Not Before: Oct 19 10:02:54 2025 GMT
Not After : Oct 20 10:02:54 2025 GMT
Subject: CN=b98b07992eeaab0c07f90b61360d1b8cf7ab2592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3d:55:7c:0d:e7:02:31:6d:fb:e3:b4:0d:db:
3b:ca:cd:52:21:b4:e0:a0:30:8b:ef:83:94:af:59:
89:db:c5:46:9c:bb:11:ce:5b:0e:5b:4d:9d:bb:44:
65:67:d9:3a:99:ce:0e:8c:a4:19:ad:94:c0:35:d1:
8d:dc:76:5a:34:52:af:50:ec:51:5d:53:52:52:8f:
c9:6c:2a:8b:62:bf:4b:04:02:82:6d:54:42:7c:c0:
4b:a6:6c:24:3b:1a:57:af:d7:de:e0:b9:28:e5:68:
5d:c1:ad:d1:93:c9:c2:16:0b:6c:01:bf:27:74:75:
8b:81:31:31:dd:cf:96:63:12:f5:64:ff:80:28:29:
a9:15:3d:05:a2:d4:bd:91:99:b6:d9:a4:89:fa:a2:
31:c2:b1:46:ff:28:17:d9:a3:e1:1e:c7:15:c2:c2:
cd:44:ba:24:57:b1:96:54:2b:31:e9:3f:9b:49:62:
6d:63:a5:a9:90:4c:8c:35:d8:5d:1b:98:0b:ad:ef:
d9:07:d5:14:be:c3:ae:34:f3:a4:0f:be:f2:65:8e:
3b:ed:32:0b:41:e5:aa:35:7f:1e:fe:5d:27:df:51:
f2:b8:a0:b6:5a:e9:6d:f8:65:14:68:94:e2:29:d4:
59:4e:06:38:ee:2c:00:65:ed:c2:79:d0:6c:9c:be:
7c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8B:07:99:2E:EA:AB:0C:07:F9:0B:61:36:0D:1B:8C:F7:AB:25:92
X509v3 Authority Key Identifier:
keyid:20:77:99:02:73:29:F2:26:82:76:45:73:AF:21:15:DA:95:A9:F6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHeZAnMp8iaCdkVzryEV2pWp9r8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:10:d7:21:37:af:fa:23:af:73:46:dd:10:d1:78:40:ff:0f:
ea:f0:1d:3f:0f:43:f1:b0:3f:ae:9b:0d:5d:f1:f7:c8:73:78:
f4:c7:6f:50:b7:55:49:f0:8b:c9:82:11:99:c9:97:ae:39:39:
81:c7:da:c3:aa:9d:b9:2c:2c:bd:04:ef:b3:d4:ab:2e:dd:d1:
04:f9:ad:e5:03:61:89:e8:13:ba:52:fb:f3:a9:8b:31:7e:36:
8a:05:ab:2e:4e:05:09:fc:6d:88:3f:a9:e7:9b:c5:66:d1:f1:
95:0a:9b:78:2b:13:7a:e0:b3:5f:1c:08:80:f4:d7:28:b0:d8:
f6:7d:c9:e5:63:bc:66:26:a8:16:1a:8b:f3:1e:9a:f0:53:e9:
63:ae:e2:b4:6c:b4:df:11:33:37:9a:e8:11:96:1c:6e:96:08:
5c:73:25:40:a6:71:48:4d:e9:60:52:9c:dc:41:89:30:e5:50:
0c:cd:10:83:68:35:f6:b7:96:01:7a:7e:f8:31:bf:f7:ad:cc:
a9:df:90:84:54:24:7b:84:2b:76:05:6c:52:0a:7f:57:be:58:
3e:ca:f2:4a:09:cd:0e:1e:54:77:b9:18:27:e9:50:2a:f7:e1:
63:3e:12:ab:40:70:49:97:08:a5:08:84:05:3b:4e:80:09:e7:
d5:c0:ea:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:40 2025 by rpki-client