Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
File: IPY4EHq7hK5vsDzB2yz9G8RIf40.mft (raw, json)
Hash identifier: c450BEqxpRc34N1MfwFvH+Xl7guaTUT3LFwvomPOVqM=
Subject key identifier: 21:9B:7B:2D:4D:A5:BB:12:AF:E1:87:DD:2B:FD:40:CF:5B:BB:9E:A9
Authority key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
Certificate issuer: /CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Certificate serial: 0199FBB36CE1BAAAE13DD924A1770F5F3A6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
Manifest number: 10B1
Signing time: Sun 19 Oct 2025 09:01:03 +0000
Manifest this update: Sun 19 Oct 2025 09:01:03 +0000
Manifest next update: Mon 20 Oct 2025 09:01:03 +0000
Files and hashes: 1: IPY4EHq7hK5vsDzB2yz9G8RIf40.crl (hash: pFhMvnk/L+4OKCgMk/TlOuKn1+FaztKAp1xVMqHKbvw=)
2: JK5dBkqsG4C8M2ttw7JiFgUdZew.roa (hash: vMhSi46i8JCqRLgPeW41NRu360WeGbF0LT7pGWnTq7U=)
3: VNrppWVy36SKNgtS_F1qaT2zJHY.roa (hash: 9DXGS+oBa4dlfj3+GMMrbil8G+vwg9kQTst1kCj/GhM=)
4: sLy4f0J28AKLnDg3qJ8vxAYCBx0.roa (hash: beKd4jqG4/esSSfPF84tT28gcKiXZoavsjTYolwvANc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:6c:e1:ba:aa:e1:3d:d9:24:a1:77:0f:5f:3a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Validity
Not Before: Oct 19 09:01:03 2025 GMT
Not After : Oct 20 09:01:03 2025 GMT
Subject: CN=219b7b2d4da5bb12afe187dd2bfd40cf5bbb9ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:3b:ee:be:20:55:0d:c1:58:2d:5a:1c:38:
d5:36:ea:e8:d5:57:0b:bf:89:25:f1:aa:8c:53:b3:
ff:20:77:97:50:64:81:5d:4d:33:3d:e0:de:a7:d4:
79:ef:07:b6:88:93:bf:41:aa:35:33:9e:b3:27:4e:
95:4d:cc:cc:e9:da:49:16:56:0f:8b:25:d2:3a:e5:
a1:bd:11:43:31:68:c8:be:7f:57:15:79:fd:12:23:
14:f3:45:ec:8d:9a:dd:d1:1f:29:16:9d:6f:8c:d3:
59:65:f8:e2:23:02:6d:d0:75:f8:34:92:aa:57:b3:
56:77:d8:cc:fd:00:c6:e2:a5:d4:39:f6:6f:8b:c9:
da:69:31:08:1c:6b:e2:03:f6:0c:9e:c1:80:41:b5:
b8:ba:27:25:e6:c7:a9:b9:c7:fc:30:5c:3c:b4:e6:
b5:cc:ee:ec:17:01:f5:f2:9b:a9:3a:bd:2f:e6:4d:
c8:81:bc:0d:84:02:cc:0d:33:a5:08:b3:8b:5f:d0:
5e:ed:5c:29:42:e4:b4:63:8a:95:1c:f8:ac:49:aa:
e8:c0:27:39:7d:e3:46:a6:27:87:22:7b:22:e3:4b:
fb:3f:9b:b2:3d:61:11:4d:99:95:41:8a:87:07:b9:
95:a2:ab:e8:93:6e:cc:8e:83:0c:2c:85:41:5b:60:
02:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9B:7B:2D:4D:A5:BB:12:AF:E1:87:DD:2B:FD:40:CF:5B:BB:9E:A9
X509v3 Authority Key Identifier:
keyid:20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:08:67:bd:a7:cd:4a:22:ef:74:ab:39:34:4b:54:ed:91:38:
50:31:f1:64:af:6f:c2:fb:85:b7:96:49:a0:5e:3e:c0:58:60:
93:33:e8:6e:2c:fd:84:9f:61:bd:41:e2:1d:76:c1:3d:ad:27:
3f:ae:7d:88:f4:75:ea:f5:74:fb:f3:80:46:42:2a:64:a8:cb:
cf:e8:f8:cf:3f:d8:f2:72:c7:ba:58:9c:c4:16:1a:ca:0e:07:
ce:87:f8:a9:55:fa:48:93:43:ba:d9:a0:b7:8d:e7:b4:22:58:
51:94:4c:87:29:73:b3:e5:bd:b1:ed:1e:c3:99:7e:9c:93:a3:
bc:09:46:d0:91:a9:05:53:62:cd:0c:26:fe:df:41:e1:ef:25:
44:96:53:e0:fd:6a:38:55:e1:7a:6c:86:1d:69:3c:72:8a:ab:
79:aa:91:35:af:f9:53:84:1b:e1:9a:e6:ec:a8:59:16:1d:38:
48:40:94:37:a3:11:1b:ac:ea:9b:f2:a8:b4:f8:4b:ff:dc:3d:
1e:0c:0f:18:5e:0b:49:e6:2c:da:a4:19:a4:b0:ab:1c:60:0c:
11:9f:28:5e:c0:95:bb:94:ab:bb:19:ca:8f:e7:1d:81:c7:5e:
3e:81:4b:70:aa:8b:5c:dd:1a:fa:a6:0b:26:70:91:28:27:4c:
f2:bc:ea:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:30 2025 by rpki-client