Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
File: ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft (raw, json)
Hash identifier: bN5TEIdyw+ln000aTAdF99In4cL90jf8YTzHfgOFuVQ=
Subject key identifier: 02:41:14:0D:27:05:1D:9B:FC:E8:12:F2:38:CB:1A:A9:86:7F:BA:44
Authority key identifier: 8A:40:00:10:1A:D3:93:CA:DF:7F:C8:FD:63:DA:AD:3C:6D:AE:12:4F
Certificate issuer: /CN=8a4000101ad393cadf7fc8fd63daad3c6dae124f
Certificate serial: 0199FC8FA08FB2292C681937A4C5737D0426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 13:01:35 +0000
Manifest this update: Sun 19 Oct 2025 13:01:35 +0000
Manifest next update: Mon 20 Oct 2025 13:01:35 +0000
Files and hashes: 1: JZepDg8cmhIm-UJF3a4q9oRFbaM.roa (hash: wTv/4wR5ugYke9BGCLmcTg7vZIIrGydt69pX/2ie8SQ=)
2: ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl (hash: nb8cBjQxVg0bJPvHRlcTPofNkOkEMDqHf2APB7vm4LA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a0:8f:b2:29:2c:68:19:37:a4:c5:73:7d:04:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a4000101ad393cadf7fc8fd63daad3c6dae124f
Validity
Not Before: Oct 19 13:01:35 2025 GMT
Not After : Oct 20 13:01:35 2025 GMT
Subject: CN=0241140d27051d9bfce812f238cb1aa9867fba44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:eb:14:8c:d3:93:e5:7d:b2:e0:16:71:dc:74:
af:03:0e:c5:f6:f1:b3:b1:67:ab:7a:26:36:f3:b6:
9e:6a:52:aa:a9:54:04:ee:6f:67:ff:f0:45:8d:26:
05:86:cc:56:d7:20:85:d7:61:53:4a:e7:46:12:5f:
42:2b:d6:a2:da:1b:4b:21:1b:bf:0f:dd:70:13:30:
48:39:a3:dd:55:e8:7e:4f:ac:da:b3:2b:f7:ef:11:
8b:df:9e:b0:64:e0:23:09:2f:23:5c:fc:ae:f1:0d:
03:5e:44:b8:67:d2:aa:99:11:f3:4b:8d:d3:96:55:
2d:ec:a2:77:2a:51:0f:ae:f1:c2:a3:25:33:a4:c1:
60:2b:bb:56:d2:07:b3:b2:28:de:12:d9:aa:d9:bc:
c7:68:09:6f:bb:49:e6:2b:67:e4:7e:dc:10:14:1e:
e2:a5:7f:df:55:fc:c7:e4:00:f4:f9:d7:c8:2f:27:
02:79:33:19:60:47:ac:15:01:1b:44:f3:a9:2f:20:
bd:2c:f4:97:52:bf:dc:57:06:7c:c9:43:97:42:3d:
de:9d:67:98:15:89:86:11:48:2a:21:c1:2e:4b:5f:
70:d3:46:0c:a0:3b:77:8e:76:83:83:04:64:6c:5a:
0d:b9:3a:e1:25:2d:9c:4f:08:fe:c7:16:eb:34:ce:
29:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:41:14:0D:27:05:1D:9B:FC:E8:12:F2:38:CB:1A:A9:86:7F:BA:44
X509v3 Authority Key Identifier:
keyid:8A:40:00:10:1A:D3:93:CA:DF:7F:C8:FD:63:DA:AD:3C:6D:AE:12:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:fc:3e:68:d9:48:1c:7f:43:5c:7a:4b:1d:25:a1:1e:eb:41:
ee:7d:14:16:74:d9:c1:8c:1a:cd:bb:7b:c3:3b:27:72:e6:d2:
4e:9e:2e:74:24:59:8d:0d:3c:a7:c5:a8:93:1d:a4:e6:d8:63:
af:e2:00:bf:37:25:dc:96:54:2c:8b:08:7d:89:e9:2f:a9:47:
03:c8:78:f2:c2:af:ee:b7:7a:25:5d:68:dc:dc:62:ce:4a:9c:
8d:12:af:b1:75:66:70:5e:41:57:25:61:c6:8b:49:8a:47:fd:
70:51:c6:74:a1:1d:c3:3c:fa:af:a2:68:a4:8c:85:a9:62:6a:
4f:10:f9:0e:65:3a:7f:37:2d:05:4b:95:1e:17:60:e2:b6:d7:
8b:42:02:e2:46:6d:1b:fd:f2:9f:1f:8c:53:50:98:5e:f2:a6:
b3:53:84:42:14:ed:65:08:d9:4d:91:80:64:d6:4f:ca:b2:77:
90:39:85:35:aa:5c:9e:dd:52:85:16:28:f3:07:3c:49:8a:24:
ce:d7:d5:f4:0a:ca:77:d7:aa:f9:7b:6d:de:ff:63:05:c7:51:
80:af:5b:2f:ba:fc:37:a2:cd:c9:a8:f5:9d:4f:63:2e:3b:e5:
b7:ba:b1:02:2b:60:a9:58:87:11:4e:f0:db:0d:7a:96:e6:0c:
26:1b:30:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:05 2025 by rpki-client