Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
File: ifKArlGVUMen9JU6sn16593rE0E.mft (raw, json)
Hash identifier: VD7VnrDRw4+4Jes+H9iRHDDqcpCKdQWhrdK6xxSubRI=
Subject key identifier: 2B:FB:F1:48:C1:6E:8B:24:7B:85:E3:66:90:59:A5:A3:13:D0:CF:73
Authority key identifier: 89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
Certificate issuer: /CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Certificate serial: 0199FAD7FE93FC97FE1BDCBE360717B94848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
Manifest number: 1673
Signing time: Sun 19 Oct 2025 05:01:23 +0000
Manifest this update: Sun 19 Oct 2025 05:01:23 +0000
Manifest next update: Mon 20 Oct 2025 05:01:23 +0000
Files and hashes: 1: 9dTi4wdiI3Tu8z52gakpEQiMUok.roa (hash: 4zYsVsn8fJnXPhGX6xQByXU2W5bf/FC7mJXJpk5+gzY=)
2: ifKArlGVUMen9JU6sn16593rE0E.crl (hash: 8hhYXzc9TiHxXuh1XdLJlLoELhTTt9F0vcuNEf1OmAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:fe:93:fc:97:fe:1b:dc:be:36:07:17:b9:48:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Validity
Not Before: Oct 19 05:01:23 2025 GMT
Not After : Oct 20 05:01:23 2025 GMT
Subject: CN=2bfbf148c16e8b247b85e3669059a5a313d0cf73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:22:42:22:c9:02:4d:4a:23:bf:2a:12:8c:7f:
0c:a2:4a:3c:70:f1:58:45:b1:e7:13:38:a9:a0:eb:
d0:ef:5d:64:a3:d3:69:2a:eb:2a:f2:49:de:6e:01:
4e:7c:f1:c0:0f:96:46:77:fc:22:15:76:26:f1:28:
12:e4:93:7a:7b:d1:d6:54:d6:69:cc:e7:92:2d:1c:
5d:71:6a:70:34:76:65:27:ed:8b:26:0e:69:6f:7f:
e5:1d:a0:c6:73:97:b1:cd:51:bf:eb:02:07:38:fc:
c6:51:bc:73:61:d2:43:e0:a0:9b:3e:cc:d1:12:23:
f2:cf:c1:c5:01:ca:6d:e0:0f:6f:b0:f6:e0:83:41:
0b:34:37:dc:56:86:b1:ad:61:d3:7f:b8:28:c5:47:
28:85:9c:67:e8:c9:ae:52:9f:f0:8d:91:69:e0:0e:
1c:42:c2:2d:2d:e9:27:86:4a:2a:aa:a5:ff:5e:fa:
99:74:4c:ec:4b:fb:76:63:42:11:e5:89:3c:64:86:
2b:76:c4:69:cc:97:47:d5:39:8b:8e:34:23:6f:32:
d5:d3:b6:ce:31:91:49:54:9e:a4:2a:62:f1:09:ce:
f3:84:2c:0a:1c:7b:b0:d2:4d:57:22:b7:f7:87:56:
07:6b:dc:96:90:1c:37:d1:11:f2:6e:42:ff:32:6a:
20:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FB:F1:48:C1:6E:8B:24:7B:85:E3:66:90:59:A5:A3:13:D0:CF:73
X509v3 Authority Key Identifier:
keyid:89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:9b:0e:4f:9a:2e:f5:e2:c3:69:c7:a3:e2:46:3c:c4:79:39:
e3:2c:fe:92:a6:fc:42:98:b1:13:69:3d:e7:81:b2:9f:0e:97:
1f:5b:d3:2e:0f:56:f3:da:02:b6:81:f5:0d:6e:e7:81:2c:89:
2c:85:e0:94:d3:81:1d:d1:5d:39:00:4f:de:95:eb:21:74:21:
93:f9:c7:1a:db:fe:3a:24:a5:4a:94:94:2e:34:85:fd:db:e3:
df:62:27:d7:c6:87:9a:22:6e:dc:51:e4:43:39:8f:22:d1:8c:
e3:20:b2:50:74:e1:04:b9:1a:44:c3:bd:ca:4b:52:a7:50:79:
85:e6:b4:65:79:2d:f0:27:3d:f0:57:5b:f4:83:9c:da:8c:45:
b3:ce:c6:95:63:fe:cf:c4:a0:b8:f7:e6:19:f2:07:f7:a3:1e:
34:4e:d5:e6:02:e3:1d:5d:b6:46:80:f1:5f:1b:81:9f:82:26:
14:36:7c:29:3b:ac:70:09:f1:ae:90:38:90:c9:ec:57:8e:d4:
0b:c0:19:f1:a0:ea:14:eb:1d:5f:43:c4:71:1f:e1:4b:de:f4:
94:2c:33:8c:55:2e:82:df:ae:9b:56:97:7b:29:54:25:9b:02:
ac:f2:06:a0:d2:f6:52:f4:32:5e:54:c9:c3:48:c7:14:fa:bc:
c1:07:52:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:45 2025 by rpki-client