Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft
File: sICdwHvAd1GY8vMVVBUvNWqD93A.mft (raw, json)
Hash identifier: f6u85EocfN7MgaIZor0snbfF8x3lZ/VH+upkRn8vZ+o=
Subject key identifier: E5:FD:91:6E:5F:46:0B:E0:0D:39:DF:4C:6D:A2:53:7B:EF:BA:3E:64
Authority key identifier: B0:80:9D:C0:7B:C0:77:51:98:F2:F3:15:54:15:2F:35:6A:83:F7:70
Certificate issuer: /CN=b0809dc07bc0775198f2f31554152f356a83f770
Certificate serial: 0199FEEB7E8F64802E28B6E78BD03629FE99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft
Manifest number: 1677
Signing time: Mon 20 Oct 2025 00:01:09 +0000
Manifest this update: Mon 20 Oct 2025 00:01:09 +0000
Manifest next update: Tue 21 Oct 2025 00:01:09 +0000
Files and hashes: 1: _vqUTJBaKVA__-YzImtaOgUdlPc.roa (hash: WjwzW+i6IqptZA1G2R9oYtf2Xiry6o+GVW/+RmHCnfA=)
2: sICdwHvAd1GY8vMVVBUvNWqD93A.crl (hash: SFr1VBdu9NfrtY+Z8I60bAfx6M5Zm6ZXpOrSJNlIZXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:7e:8f:64:80:2e:28:b6:e7:8b:d0:36:29:fe:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0809dc07bc0775198f2f31554152f356a83f770
Validity
Not Before: Oct 20 00:01:09 2025 GMT
Not After : Oct 21 00:01:09 2025 GMT
Subject: CN=e5fd916e5f460be00d39df4c6da2537befba3e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:1e:b2:06:3f:cd:dd:b6:46:46:37:84:ca:
be:9b:18:ed:ed:16:6c:d6:1d:c6:0d:ef:2b:32:d2:
26:da:fb:eb:3c:42:8d:a6:a5:d5:01:7d:26:2c:36:
c2:e4:d6:f5:e6:e4:a3:8a:4b:6e:a2:1f:9a:9e:65:
37:17:9a:06:34:7a:05:00:ef:94:5b:37:64:16:c2:
71:54:78:c9:16:86:df:81:1a:40:41:ec:f9:22:6b:
51:d9:85:e7:3c:85:f4:a6:30:30:b7:2a:72:69:74:
dc:ba:58:99:5e:bd:5f:db:97:50:95:c6:5a:fa:9e:
63:65:cf:5b:18:40:5b:36:ed:76:c6:96:ce:8b:12:
36:98:34:12:2e:53:fa:25:55:75:b8:c0:27:81:e3:
62:3d:f6:d9:38:55:81:2e:4f:52:41:87:7c:9b:6b:
46:2c:65:f3:69:a0:58:bf:77:70:40:34:20:5c:c7:
eb:8a:33:b2:eb:68:d2:f2:7e:c4:34:31:f7:52:1e:
58:5f:c4:9b:a2:64:0a:72:18:01:96:6a:68:57:7c:
41:ea:69:64:39:76:73:db:b0:94:b4:74:80:dc:fc:
f7:d9:41:d3:f7:58:65:a0:3d:d5:0a:13:e2:3b:b0:
13:4e:aa:69:b9:7f:ac:52:14:28:7a:66:5b:45:fc:
f3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FD:91:6E:5F:46:0B:E0:0D:39:DF:4C:6D:A2:53:7B:EF:BA:3E:64
X509v3 Authority Key Identifier:
keyid:B0:80:9D:C0:7B:C0:77:51:98:F2:F3:15:54:15:2F:35:6A:83:F7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:4b:a8:5d:2d:13:46:c7:58:f1:1a:e3:54:92:f8:4d:5e:00:
66:65:b6:c3:ff:23:a8:0c:ac:84:1c:a3:c9:32:0f:f3:c4:50:
7b:6d:3a:cb:09:4f:6c:1a:ce:9a:69:31:34:e3:ec:f7:66:cf:
10:e8:45:9f:43:b1:24:02:42:98:0f:ac:bf:c3:70:ff:2f:08:
39:0c:0c:1f:c1:db:c9:2f:13:09:af:72:43:b7:ec:b3:9c:50:
23:d4:46:c4:86:43:77:35:a6:0b:42:1d:36:3c:e9:71:c7:31:
c0:0e:99:f8:90:76:15:b1:22:26:9d:0a:0a:c4:b0:a5:c7:d2:
95:13:7d:f7:fa:6b:24:f2:6a:79:2f:e0:7f:67:e9:ef:c9:2e:
34:8e:67:fc:07:bc:6b:16:02:f9:5d:76:ad:b8:72:a0:73:a5:
ff:07:06:af:e0:e3:24:35:62:5e:7f:cd:92:c3:ac:8e:bb:fb:
ec:3e:4a:76:49:6a:af:5e:f1:65:46:1e:f3:3a:da:21:58:67:
73:8e:3c:07:0d:a2:a1:af:16:9c:2e:dd:b7:b0:08:fe:77:41:
ab:4f:e3:94:04:53:1a:5e:e8:32:56:48:df:8c:d7:f6:2d:2f:
83:b8:c5:c9:76:6c:94:2e:cf:cf:d3:07:0e:be:8f:ef:d5:07:
3f:9c:25:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:31:29 2025 by rpki-client