Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
File: I_IfcxbhvXj4bupkJdXCKbmA-aw.mft (raw, json)
Hash identifier: jzjIrZFH6PkENrcaiilsFopUOyqDigl4ZQAXhyIHoKE=
Subject key identifier: 49:E4:C1:76:DF:B1:DB:AE:F7:3E:A3:7B:61:D5:F9:42:EF:C6:E8:D3
Authority key identifier: 23:F2:1F:73:16:E1:BD:78:F8:6E:EA:64:25:D5:C2:29:B9:80:F9:AC
Certificate issuer: /CN=23f21f7316e1bd78f86eea6425d5c229b980f9ac
Certificate serial: 0199FFFE939A144716A3E631464CC9F0FD39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 05:01:37 +0000
Manifest this update: Mon 20 Oct 2025 05:01:37 +0000
Manifest next update: Tue 21 Oct 2025 05:01:37 +0000
Files and hashes: 1: 15gQ3l_CTz5DpsQh5tCstrbwJks.roa (hash: NBh6zaBQW3FImxNGTreLJET3gJwOeBKW+FttZU4GhEA=)
2: I_IfcxbhvXj4bupkJdXCKbmA-aw.crl (hash: N2smdwHHrBk7nq8zSBIRvrENK1eoteglrD6Yc4EWNFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:93:9a:14:47:16:a3:e6:31:46:4c:c9:f0:fd:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f21f7316e1bd78f86eea6425d5c229b980f9ac
Validity
Not Before: Oct 20 05:01:37 2025 GMT
Not After : Oct 21 05:01:37 2025 GMT
Subject: CN=49e4c176dfb1dbaef73ea37b61d5f942efc6e8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ee:d1:8d:65:ce:93:b3:19:d1:12:c6:54:aa:
63:14:53:bf:f3:ad:c1:ff:91:fc:dd:ce:42:06:86:
e4:92:c7:95:4e:41:34:87:80:d0:a0:47:8b:71:a9:
92:08:7b:7f:e3:b3:5c:63:69:0a:0a:e6:89:c5:b1:
1a:83:7d:5c:69:44:85:7c:da:1b:a1:5e:01:60:e3:
bb:c1:89:be:24:2d:85:88:43:48:93:cf:d5:77:b1:
81:c2:a1:52:b2:97:70:0e:56:f3:93:b4:93:4a:9a:
8f:d3:70:e6:98:81:ca:b2:12:a4:5d:04:a0:b2:0a:
72:ae:6f:a4:b0:26:23:a6:37:c8:9e:bb:e7:9e:a0:
ca:3c:3f:b2:17:b6:6c:ca:f6:11:fb:39:42:3a:b4:
72:57:09:96:22:c9:06:9c:3b:60:98:2f:d4:e7:a9:
a6:15:aa:c3:6f:5c:86:62:20:3e:74:19:63:3f:09:
f3:5a:5e:93:11:96:b2:f6:33:80:94:73:63:08:6b:
c1:98:bd:38:a7:35:dd:f5:3e:e0:6f:12:b1:7f:63:
6a:1c:40:ee:26:99:e8:40:08:c0:a9:c6:db:fd:cb:
b7:11:8f:1e:bc:57:dc:d9:76:43:b2:01:70:5a:54:
11:0a:6d:46:b2:4c:d0:66:3b:74:f3:49:12:f4:77:
d6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E4:C1:76:DF:B1:DB:AE:F7:3E:A3:7B:61:D5:F9:42:EF:C6:E8:D3
X509v3 Authority Key Identifier:
keyid:23:F2:1F:73:16:E1:BD:78:F8:6E:EA:64:25:D5:C2:29:B9:80:F9:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:32:5c:88:b9:35:9a:27:57:31:cc:ef:fb:c1:ba:f0:ec:f2:
eb:7d:8f:88:ec:68:ca:03:d4:20:0a:54:02:80:4b:a3:7f:6d:
37:24:cc:a2:b6:01:39:5f:2e:4c:de:cb:e1:18:13:71:6d:8c:
34:a6:ae:d7:46:33:80:38:9a:4d:55:a2:a4:7e:55:10:f1:67:
86:3b:c0:48:e6:e8:c2:fa:18:ce:27:6a:d6:58:79:2b:6d:f5:
b8:19:f5:75:4b:42:f8:f3:07:b5:6e:14:a6:67:46:1b:7c:76:
4b:f6:9e:5f:b6:45:02:31:79:c2:a9:55:f0:fe:29:fe:f7:32:
c9:f6:a6:10:3e:d1:bc:e0:64:42:63:c2:91:d1:48:0c:ba:05:
cb:58:24:cf:32:8d:1b:20:27:dc:1d:5b:d7:d4:cc:b3:6a:1e:
cf:e1:85:5d:5c:71:12:3e:0f:20:9d:ab:d7:6d:88:7c:82:c5:
3e:c4:66:2a:bd:13:90:d0:54:92:c8:0f:e4:79:6f:4c:8b:bc:
57:4c:1b:80:ba:8e:18:6d:98:86:09:a7:fd:01:81:41:1d:98:
1a:35:d6:0c:1e:e5:df:e2:2a:4a:4e:a7:7f:8f:68:06:7d:90:
37:09:5b:b7:0f:07:a8:30:f3:70:c0:ff:c0:1f:58:bc:79:9b:
14:53:68:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:45:21 2025 by rpki-client