Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
File: IQ2p568B3nVEj0kGqsQb0pZOiEc.mft (raw, json)
Hash identifier: jXOzn1+nNzXlQNgrrZQe3Qs+obhZ0hEz1GOIp7NcasY=
Subject key identifier: 9E:E1:B7:23:1E:A7:EE:6F:EF:3F:94:52:AD:12:06:90:4A:45:7F:31
Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847
Certificate serial: 0199FCFD91C1795F52F30B555E9685F645FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 15:01:40 +0000
Manifest this update: Sun 19 Oct 2025 15:01:40 +0000
Manifest next update: Mon 20 Oct 2025 15:01:40 +0000
Files and hashes: 1: 84db03xfYelGerORYCPaE18sIuY.roa (hash: mGsmynBl7jLseJdNkmqKYTcle2kapG2/B7E0rIACZPM=)
2: DWb6WF8DjwRTU0qXDx46BO4zwgA.roa (hash: CzOBQqTqajUkprVoUPDiYGmEDab6x3jR9YCHnFVJudw=)
3: IQ2p568B3nVEj0kGqsQb0pZOiEc.crl (hash: nn0wRgJXw0014yOPt9OoTQ9Qfq+Jy7mZ+ECln8/bn5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:91:c1:79:5f:52:f3:0b:55:5e:96:85:f6:45:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847
Validity
Not Before: Oct 19 15:01:40 2025 GMT
Not After : Oct 20 15:01:40 2025 GMT
Subject: CN=9ee1b7231ea7ee6fef3f9452ad1206904a457f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:1a:1f:da:27:3b:8c:48:e3:d0:73:95:24:
87:53:32:de:3c:6f:1c:f4:98:0e:61:28:10:33:04:
74:92:59:07:b0:70:ea:e7:76:46:31:09:be:79:df:
85:b4:f5:74:b5:1d:27:d3:de:ed:9f:1a:d3:35:17:
af:18:dd:35:67:44:8f:e0:83:66:91:b0:66:25:a0:
3a:40:5f:39:5e:dd:a2:ff:a3:cf:e0:ed:b0:81:cd:
3d:e5:43:48:ca:ce:0c:91:cb:44:ce:32:14:5e:c5:
22:11:3a:bb:4b:e8:d7:e4:73:90:6a:a0:10:78:eb:
6b:fa:7d:dd:b6:03:e7:c3:b3:98:e6:1d:c0:ab:5a:
bd:b6:ed:3d:80:0b:4c:42:3d:62:93:89:3b:00:f6:
6c:32:bc:cc:01:02:6e:f0:8a:18:21:8f:ad:08:cd:
28:cb:a7:c3:62:dc:08:fb:72:81:ec:fa:44:83:c2:
b3:4c:0d:36:91:9e:64:ac:68:56:f4:77:74:20:66:
cd:7d:57:09:0d:14:0d:8c:7f:30:6a:04:2a:ce:e2:
c5:6b:6d:13:fc:20:f2:f7:46:41:f6:4e:ed:0b:14:
c3:fe:ea:44:f8:d0:dc:ea:e1:70:68:64:6d:08:ca:
00:72:ea:77:7a:bf:4f:f4:65:6a:aa:40:34:7d:f0:
11:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E1:B7:23:1E:A7:EE:6F:EF:3F:94:52:AD:12:06:90:4A:45:7F:31
X509v3 Authority Key Identifier:
keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:dd:b6:e6:4c:54:de:43:28:a6:ea:2c:6f:8e:fa:cd:63:9a:
f5:44:85:62:02:24:35:f5:06:f3:0f:a1:69:ec:03:d8:ad:d1:
94:68:ba:b2:55:a6:04:17:a2:09:99:f6:f4:20:1f:6c:38:fb:
3f:04:c2:6b:29:92:2a:12:be:5e:46:26:d7:08:da:88:c9:3b:
49:66:f1:af:2c:4e:2d:4d:cd:5e:77:29:80:af:a7:79:45:cc:
66:7b:a3:09:5d:69:f2:a4:d5:b1:ae:61:75:7b:c7:11:c4:c8:
b9:dd:11:ff:89:d1:34:ee:ed:bf:d5:ec:5d:cd:e3:00:61:c8:
d7:51:be:32:78:b5:33:2f:65:a3:57:a6:c3:cc:7c:ea:11:ae:
42:9b:1b:f7:de:a6:8c:e6:76:73:94:94:f5:3a:1c:d1:f9:0e:
bd:13:cf:bd:27:fa:90:bd:63:88:1b:65:4c:b6:53:36:52:f0:
ce:ea:ac:59:26:74:ac:5a:57:7d:1d:36:fe:1a:6a:fb:11:4b:
e7:ab:30:03:7a:bf:22:83:b1:64:04:fb:39:f9:8b:54:ba:98:
83:a9:04:a8:fa:4d:36:aa:30:d8:90:6b:61:ac:6a:93:a0:ba:
5d:40:61:f2:40:49:38:eb:66:61:b4:c1:9f:ef:ee:f6:d4:59:
bb:7b:48:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:44 2025 by rpki-client