
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
File: IAsV4Hg_4A8bile9FP29BpJLiDI.mft (raw, json)
Hash identifier: n652+s8bKByJ7kQ0grG68YXLZf5L7rJAkXXaaAvz/5g=
Subject key identifier: F1:BA:4C:4D:97:DE:84:01:41:B1:6D:30:62:EC:86:15:3C:73:08:54
Authority key identifier: 20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32
Certificate issuer: /CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
Certificate serial: 0199FC8FA57CF1417E2F919DF1E9CF9C4219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 13:01:36 +0000
Manifest this update: Sun 19 Oct 2025 13:01:36 +0000
Manifest next update: Mon 20 Oct 2025 13:01:36 +0000
Files and hashes: 1: IAsV4Hg_4A8bile9FP29BpJLiDI.crl (hash: D5SVYe2RYrnH4xKEFRKY21QKiWLAU9rrw5ANUxUhjK0=)
2: foZeHIwLujdlY8Z9L88C79OdbL4.roa (hash: kBji60S+DjYJ/bgY7+g+22RM5gAKkLkkfayTk1h8AIo=)
3: szEuog0QzjoBQW1CQcU6MA8xPCY.roa (hash: LsMXxa5IeE1fxcnMKQjYIuPdJ91pJvkbpdujugd5olw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a5:7c:f1:41:7e:2f:91:9d:f1:e9:cf:9c:42:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
Validity
Not Before: Oct 19 13:01:36 2025 GMT
Not After : Oct 20 13:01:36 2025 GMT
Subject: CN=f1ba4c4d97de840141b16d3062ec86153c730854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:38:36:b9:5a:9d:05:f0:6c:a7:c1:da:42:de:
7b:72:a4:51:34:0e:19:38:40:f3:6c:dd:d8:4a:79:
26:24:a9:5f:be:ab:b3:08:e4:98:9d:ac:66:67:ac:
2c:7e:52:63:39:30:6c:43:0d:34:4c:34:06:56:1c:
b6:bf:ac:3d:0f:86:14:52:3c:09:32:59:a0:99:fb:
f2:24:fa:6c:2f:ae:a7:d2:1e:fe:ce:3b:b7:98:d5:
56:b1:c0:cb:bf:1f:37:25:e0:eb:aa:1f:29:0b:0c:
f3:74:d1:2c:bb:2b:a1:01:c1:53:85:6e:bd:78:f7:
b2:7e:58:28:79:d7:72:df:b7:f7:4b:f1:27:ab:74:
c3:ee:01:8c:80:aa:c3:19:b8:56:f5:8e:36:ac:c3:
a9:d1:51:5d:9a:f7:9a:2b:65:2e:7f:22:a3:37:bb:
60:15:ae:c8:14:8d:0d:bc:8a:f5:57:f9:8f:40:ba:
ab:7a:37:db:27:1c:7c:38:b2:83:cf:92:70:b3:6a:
34:1a:0a:3f:51:7d:79:ad:3b:dc:00:70:b5:e4:e1:
92:ad:b5:bc:ac:5f:65:38:1a:bc:ed:3b:5b:38:ce:
98:e4:3d:14:f1:f7:15:99:ec:4a:d0:34:8d:8b:11:
82:10:8f:c4:f6:93:a8:7d:15:7f:5a:fe:ab:fe:90:
5d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BA:4C:4D:97:DE:84:01:41:B1:6D:30:62:EC:86:15:3C:73:08:54
X509v3 Authority Key Identifier:
keyid:20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d2:4e:c7:16:78:e5:bd:e4:23:fc:09:20:81:37:88:00:23:
d4:e1:ac:af:60:30:31:23:86:f2:da:c0:65:78:4e:8a:a7:23:
5c:a6:9c:1e:23:bb:a0:1f:9d:52:9d:11:5e:00:80:30:63:b9:
25:10:8a:11:69:73:06:fd:94:ad:84:58:cb:0a:dd:a4:a3:6b:
be:fc:b7:06:34:8f:b2:06:bc:4a:58:3e:82:27:01:45:d4:b0:
ea:e0:57:89:c7:97:d6:d5:4c:d2:6c:8f:2f:41:47:9d:ca:94:
a6:01:e6:b6:6f:08:39:8d:aa:d1:d4:48:93:48:c0:09:44:65:
dc:4a:80:4e:3b:d2:d3:08:21:2d:6d:07:94:db:2e:89:45:85:
05:96:11:a9:b2:92:43:0f:cd:d5:ab:02:0e:36:8b:7c:48:10:
89:9d:82:69:b0:63:43:40:8b:94:66:73:4e:24:d1:74:1b:00:
55:de:1e:4f:ba:45:fd:f5:a4:28:c6:6a:2a:61:44:83:82:26:
bf:88:13:35:b8:77:8b:d2:c3:c4:df:95:0e:ac:83:b2:af:a2:
07:bb:3c:93:37:db:ad:9c:84:eb:86:fc:ec:e0:58:3f:e7:d7:
8f:78:e8:17:2a:4f:12:5f:34:e5:d9:92:79:09:96:b6:ef:e3:
b0:d0:94:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:00 2025 by rpki-client