Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
File: ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft (raw, json)
Hash identifier: fsl544TeMhF5csk1Fz11PU1+2oK1VLhWbLAcYAX5+Go=
Subject key identifier: 61:EA:0F:3D:8C:98:91:96:D2:41:A7:FB:49:95:8F:FA:81:2B:92:3B
Authority key identifier: 8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F
Certificate issuer: /CN=8b17fe8dd72c50c628dea973158d0f942326da8f
Certificate serial: 0199FD348BAE59863B625B001DF6AA7A797F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
Manifest number: 0864
Signing time: Sun 19 Oct 2025 16:01:43 +0000
Manifest this update: Sun 19 Oct 2025 16:01:43 +0000
Manifest next update: Mon 20 Oct 2025 16:01:43 +0000
Files and hashes: 1: DLubGHoQGgvM_j186blmZIGyLZM.roa (hash: TEMPnE8yGqVWn4gW4EZOnV9emzYVMGQtqJpNZOLj0Yc=)
2: ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl (hash: JBD5rBPbgKlpItyZglSbJs+twqUulxo5ZQKU199d+mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:8b:ae:59:86:3b:62:5b:00:1d:f6:aa:7a:79:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b17fe8dd72c50c628dea973158d0f942326da8f
Validity
Not Before: Oct 19 16:01:43 2025 GMT
Not After : Oct 20 16:01:43 2025 GMT
Subject: CN=61ea0f3d8c989196d241a7fb49958ffa812b923b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:98:55:39:34:e2:84:82:d6:f4:cf:19:b1:3f:
24:80:d5:42:4c:a7:1c:2e:49:8b:b4:b7:d6:77:4f:
75:17:c4:f5:58:0a:19:7d:41:b7:6c:4c:f1:cf:4b:
ce:1e:0f:70:8d:b8:8c:51:07:c1:da:a2:8e:53:9e:
a2:52:d4:87:6b:d2:2a:68:e6:3f:59:96:3f:fc:4f:
94:a8:68:b7:f2:bf:d0:47:ae:52:9c:0b:f7:82:10:
c4:8e:eb:d4:9d:41:d1:27:56:e0:7e:af:7d:50:7e:
10:42:14:45:f3:73:dc:68:b0:de:ce:aa:7f:4a:9e:
88:dd:be:d5:97:78:0f:1c:c1:7a:63:53:2c:66:2d:
15:fc:31:6d:45:ab:61:b9:ee:c9:3a:c6:61:cc:c4:
e7:bb:8b:e1:a1:31:ae:f8:7e:4c:3e:ec:83:7d:ac:
8e:a7:42:4c:ff:f2:02:6e:f9:f6:ce:da:f8:fc:7f:
cf:6b:6d:1c:0e:62:80:f0:8f:32:24:cd:cc:0f:69:
bd:bb:ae:d7:53:cb:9d:94:21:3a:01:52:56:47:87:
ae:c1:02:75:c1:a8:80:d2:5c:39:e4:88:f0:53:42:
6e:d6:de:43:49:06:1f:48:c6:39:2c:4f:65:d6:0e:
76:b9:4e:9f:bd:a9:66:4e:fd:8d:04:01:51:d1:4a:
ab:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EA:0F:3D:8C:98:91:96:D2:41:A7:FB:49:95:8F:FA:81:2B:92:3B
X509v3 Authority Key Identifier:
keyid:8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:61:2b:2b:55:3b:43:3b:89:b5:0d:0a:08:93:b3:d5:84:88:
5e:74:35:27:5c:13:4f:c7:4e:c2:ff:13:c0:bb:73:e8:ac:59:
f1:83:14:fb:ba:03:52:c7:f5:e5:10:8c:2d:31:7f:76:39:7a:
db:84:51:2a:94:db:ba:c5:2a:b5:38:27:25:17:39:84:8d:22:
3e:c6:e2:7d:2c:92:ee:9e:3d:04:1c:75:9e:51:2b:cb:7a:db:
28:4f:e9:ce:b7:ef:cf:d7:9a:af:cd:89:e4:28:9f:ee:ec:e2:
5e:05:04:21:44:9b:8a:92:1f:64:bb:c8:6c:29:f1:d1:b5:04:
2e:72:80:45:fa:6a:1f:0c:90:e4:7c:f4:2a:7b:80:12:a5:61:
13:c4:fe:c0:ce:bc:24:16:aa:d4:b4:56:05:72:30:c6:6e:e7:
fe:e7:95:2b:8b:35:71:d3:48:d1:3e:5c:fc:51:c9:66:b9:9f:
51:c1:a6:a0:ea:5d:0b:e7:11:f5:d1:62:68:d6:c6:88:26:d3:
52:16:df:c1:61:ff:33:07:4e:01:09:4a:ab:49:b3:08:88:b6:
b6:e4:d9:e6:e5:3d:ca:8c:7d:24:45:37:ca:f7:10:a8:d4:2f:
60:e4:5e:07:37:82:a9:8b:dd:08:41:f2:c9:3c:31:ad:1f:12:
f2:17:21:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:07:29 2025 by rpki-client