Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
File: IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft (raw, json)
Hash identifier: p+AeTWORFxRXccRye98LbpaPQfB5/fyvlMJ3egwXC0g=
Subject key identifier: A8:3D:D0:1A:27:06:E5:8D:81:76:82:FA:8D:6C:E1:47:0B:F7:11:DF
Authority key identifier: 22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
Certificate issuer: /CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Certificate serial: 0199FD6AF9F5BFF73FF59EC6A0F5C488032B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
Manifest number: 12C0
Signing time: Sun 19 Oct 2025 17:01:10 +0000
Manifest this update: Sun 19 Oct 2025 17:01:10 +0000
Manifest next update: Mon 20 Oct 2025 17:01:10 +0000
Files and hashes: 1: 1-nMAZc-5nMETLGR20qQodJXwzWs.roa (hash: eYA8AUyf83NJ/62tL4Gk8TX1qXmPj/b3h3AkumPPTzQ=)
2: 7PCtQ5R_w0udczv79LfUn6Szs8E.roa (hash: UeOrmKK9TH1L4E/SbRA8TvqgXT96VYfRkeusRGYVXmU=)
3: IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl (hash: xJI1AIWJTB8GXeZxu9r0398L0qHqhGISGgVT+xpLkm4=)
4: ayyHxivjLEoLFlxHs79jNQaOed8.roa (hash: QQS+fGK9P+7C6sfs4vGiJ9dFO6N+wnkemR+q8OHEfUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:f9:f5:bf:f7:3f:f5:9e:c6:a0:f5:c4:88:03:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Validity
Not Before: Oct 19 17:01:10 2025 GMT
Not After : Oct 20 17:01:10 2025 GMT
Subject: CN=a83dd01a2706e58d817682fa8d6ce1470bf711df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ab:bf:67:76:b1:e0:fd:07:ed:e4:6e:00:f3:
87:ae:6a:fc:3b:c3:24:1c:74:5c:17:f3:8d:05:67:
02:85:c2:9c:12:85:21:fe:bb:58:e0:c1:f1:9d:93:
4f:f4:6d:08:84:62:43:66:68:af:4d:84:5e:de:5f:
e9:54:75:da:60:69:c0:a4:c4:ee:7f:d1:78:64:2e:
26:c4:5e:56:9e:2f:f6:9d:45:25:6e:d5:75:67:ef:
44:5f:d4:11:4d:38:9b:22:24:3f:c1:55:95:09:70:
d5:9d:95:25:84:e6:58:15:dd:d9:69:e2:d8:09:15:
9e:e5:4f:4f:6f:3b:d2:32:46:0e:2b:34:3a:ce:94:
d3:7f:20:61:5f:6f:80:04:3f:ba:77:62:41:7a:38:
b9:f6:0e:ef:e6:e5:c6:5f:b8:68:ef:9d:9e:c8:c3:
b0:01:d8:76:6f:9f:47:cf:87:4e:c2:80:7b:8e:93:
79:6e:b1:45:65:c5:ca:8e:fc:4f:2b:44:db:16:4a:
cd:33:86:6a:71:42:40:c9:ba:9d:d2:0b:82:45:c8:
24:12:72:05:d2:30:17:90:8f:54:fd:d7:2a:54:9b:
a1:7a:5c:21:df:2b:c3:8d:d0:db:ea:b9:ab:cd:dd:
aa:78:56:78:3e:85:7d:b4:fb:3d:e6:16:6a:d6:34:
76:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3D:D0:1A:27:06:E5:8D:81:76:82:FA:8D:6C:E1:47:0B:F7:11:DF
X509v3 Authority Key Identifier:
keyid:22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:83:06:a9:2a:5f:ab:38:dc:02:7c:41:bb:39:43:52:fd:f9:
51:24:13:a1:08:ed:ef:9e:f1:00:31:3f:68:7f:3f:0d:bf:c3:
3c:ab:70:ef:fa:ab:d2:66:c9:80:f4:dc:8b:0b:73:19:76:be:
f2:16:42:df:1e:00:fd:6c:54:2d:43:f0:98:85:b9:c7:d2:d0:
cf:c2:97:57:81:73:d8:36:47:91:58:2a:50:bd:f9:47:9f:8b:
ab:b4:33:91:53:7a:cc:88:0a:ca:ff:50:61:cb:6a:04:11:d4:
16:b5:a5:35:00:e0:bb:e4:8f:95:37:a0:fd:cc:3c:54:49:fa:
a2:1b:64:f2:f6:d3:1c:88:4f:6b:27:b8:ef:ac:9b:a3:61:fb:
4b:77:f2:21:5e:54:a0:79:b7:51:e1:6f:32:eb:59:6c:7d:3d:
c9:ac:ef:ba:35:79:23:10:07:26:c6:8f:e7:79:da:f2:bc:51:
05:02:d2:ff:db:32:91:2d:84:dc:df:8f:b8:57:cc:ce:fd:99:
7c:28:95:86:74:ce:0b:1b:b6:1b:85:fa:38:aa:ec:00:19:22:
12:c7:05:c3:6f:c6:69:8a:33:dc:b3:23:79:fb:85:34:ed:29:
6f:ff:dd:cc:5f:c3:fc:fb:26:65:43:5e:a2:5b:1b:24:1a:13:
fc:82:d2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:20:33 2025 by rpki-client