Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft
File: IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft (raw, json)
Hash identifier: JXZTtZuVwa34oldkpcK8VdHbOquwhwRIed+j8xuHkZg=
Subject key identifier: 11:C8:57:80:EC:30:5D:3D:FB:61:96:0C:03:2F:22:FB:E4:D4:3A:C9
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 0199FDA47B49AF4E9D952F6967DD68CDA03F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft
Manifest number: 1713
Signing time: Sun 19 Oct 2025 18:03:59 +0000
Manifest this update: Sun 19 Oct 2025 18:03:59 +0000
Manifest next update: Mon 20 Oct 2025 18:03:59 +0000
Files and hashes: 1: IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl (hash: ATzgbHGzjAGPvIFHyQFejopDJGeX6xB9MrFMfe6Z4mI=)
2: R99dYNqYsBqUsChphTk93qUHPQI.roa (hash: oITPzkMB7sLtvkSUO+8ORkUXyH71yZzthGpvgYu/GMw=)
3: Y3eIjjaADlqPYslQ6LVIGKsbv_w.roa (hash: Z4qkgPUrTToIqTEJGniS6vXulVTkRUgqcb39uARrEjg=)
4: YlS0qhcvfxmHK3i2Atu8iHlQyy8.roa (hash: JJTAqpTGe2vNlEv4BQ7ae6jf0gv/R7qn+RigFBVB2r8=)
5: _cUgUw_BRt2ky383BgwJeRuvLBI.roa (hash: mRndir2tfJNGSDw48vuCEotaV1wwM7VOqj41aXaU9a8=)
6: jMxhOzBSeMP0LtXLXP7EcBhoAB8.roa (hash: 0uCBihxg/sVC+EOc4ZTIYJf8x4v2kocHLJVgzm9lM24=)
7: q_DU4LpYW5iMWWvp18KMkPW4jyE.roa (hash: dS1YtoKx6Fr5PPMvDkPqkspr86D+De4f+k+4trrsOTk=)
8: xv12OPtaTpKWrICjs27-0WrsmIg.roa (hash: X8XG/cdIF+kjQf+VKvmL60lRdGE9r9sJ1I4ddr9jEgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:a4:7b:49:af:4e:9d:95:2f:69:67:dd:68:cd:a0:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: Oct 19 18:03:59 2025 GMT
Not After : Oct 20 18:03:59 2025 GMT
Subject: CN=11c85780ec305d3dfb61960c032f22fbe4d43ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:39:5e:05:89:25:ad:c7:47:8e:f3:17:07:20:
77:04:d6:9f:35:be:a8:b4:05:86:d9:19:48:5c:e1:
5f:f8:c4:66:b3:f7:bf:ba:00:4d:bc:cd:42:db:b2:
c4:1b:3d:3e:8c:e7:b6:11:7f:68:04:8a:6e:19:29:
08:0b:79:bf:ce:7e:2b:b2:b5:7e:7f:d1:ab:9f:0d:
89:71:49:49:04:f5:16:bb:a1:6a:d8:20:ee:8c:08:
c1:88:11:69:e0:09:c2:d8:01:08:9a:d2:86:eb:f3:
94:4f:c7:2f:ac:84:bd:4c:ce:61:f9:66:4f:48:cd:
90:03:38:3a:01:67:ba:bf:72:ff:c9:24:29:1d:44:
f7:10:d4:13:e5:67:43:6c:e2:90:5d:ea:a8:3f:ab:
76:5d:7e:8d:ce:19:c4:41:93:69:5a:88:f6:00:bc:
54:07:fc:1b:62:9b:0a:76:80:36:53:ab:03:ef:d3:
8f:06:64:86:0b:9b:f6:98:16:e5:a4:50:8e:55:b1:
44:f4:d7:cd:9d:fd:6b:98:ee:07:76:8a:3c:37:3b:
df:cd:fd:f1:b8:cb:61:a4:18:7d:30:8b:50:9d:a7:
4e:d0:8c:26:9f:c8:c0:71:48:d3:6a:07:fb:64:41:
9b:53:48:51:a0:82:16:19:78:c8:d2:87:c0:19:0f:
6e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C8:57:80:EC:30:5D:3D:FB:61:96:0C:03:2F:22:FB:E4:D4:3A:C9
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b2:df:05:f6:a7:45:81:ec:34:82:e3:6f:59:d7:f8:c8:56:
c6:ce:3c:12:ab:72:44:45:f9:0b:32:cc:52:66:90:ca:fd:37:
62:2f:bf:ea:0a:f3:d3:9b:1f:94:37:29:9b:80:ec:09:3f:5a:
ce:d1:93:a0:94:c5:94:1f:dd:09:c4:5e:90:a4:d4:7b:91:2e:
e1:7a:4e:63:0f:25:c3:81:6d:68:99:ff:35:a2:5b:d5:7e:5e:
e2:39:e0:72:7f:81:aa:3f:3f:eb:10:3b:33:75:bd:13:57:91:
c4:01:fc:4b:d4:16:5c:bd:2e:e5:52:c7:ae:06:a9:13:89:45:
a4:76:a7:2d:d7:3e:af:70:46:a9:a4:74:a5:b2:9e:09:ab:c8:
69:bc:16:93:7f:af:6f:7d:7a:71:2b:ef:7f:41:fa:97:74:b3:
1f:a3:c5:5e:5a:2b:7b:55:32:0d:27:06:c4:00:45:9d:c7:1a:
f4:4d:a4:f2:1a:a7:59:6a:5b:37:f0:4d:82:00:28:e0:d0:19:
86:7e:6c:32:dc:97:d3:5b:6a:fe:e1:36:32:ec:3f:37:ec:b8:
d5:c9:d1:08:49:bd:be:e7:97:9e:d7:c2:66:be:43:8d:d2:72:
18:a0:83:70:d2:7d:0a:65:5d:04:aa:d2:7c:32:0e:d6:92:85:
65:df:ce:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:31:34 2025 by rpki-client