Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
File: IzlKEl-jrODEem_jT0CGtNO6VYg.mft (raw, json)
Hash identifier: Gw0NevZg0riVruiRQ4SRO3l2UW6DRLvF6cLYkkjUWIY=
Subject key identifier: EF:51:22:A7:FB:F8:72:62:57:83:40:AB:97:E6:8A:DE:D1:CD:E8:3D
Authority key identifier: 23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
Certificate issuer: /CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Certificate serial: 0199FC8F2ABDDDC514C021A8046CA2122A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
Manifest number: 16F0
Signing time: Sun 19 Oct 2025 13:01:04 +0000
Manifest this update: Sun 19 Oct 2025 13:01:04 +0000
Manifest next update: Mon 20 Oct 2025 13:01:04 +0000
Files and hashes: 1: 43AxQadttxpukdA8vcrVdRW-t5w.roa (hash: kF6ocnoDs/XQiaEmG2F7DKuzq9j+uOFKWVL4Npen2L8=)
2: IzlKEl-jrODEem_jT0CGtNO6VYg.crl (hash: VvZh7Q4H5Sag5kICCqqCjpQU7lf/u9bpe2ZlYyIgMSQ=)
3: hSxMBu_igMJgBtfSOfQQ4Pj49pw.roa (hash: bffcp9BhaMHMTNVqsuxgb/xO/YYHeGPregGtKUrYEWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:2a:bd:dd:c5:14:c0:21:a8:04:6c:a2:12:2a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Validity
Not Before: Oct 19 13:01:04 2025 GMT
Not After : Oct 20 13:01:04 2025 GMT
Subject: CN=ef5122a7fbf87262578340ab97e68aded1cde83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f0:50:98:f3:79:d4:9d:c7:37:92:07:87:72:
74:7a:37:40:cf:0b:d4:31:ba:5e:76:24:9a:b7:2d:
f4:3a:03:ce:4f:bf:b9:ed:9c:b3:90:93:3f:b2:e7:
da:c9:04:73:1f:26:3e:c0:93:73:cd:4f:b3:43:bb:
32:2f:9d:40:48:28:1a:01:0d:c2:e8:61:5c:7a:2a:
48:60:11:58:84:3c:c3:e9:43:06:22:f0:99:4a:a7:
35:60:61:74:ea:a4:80:39:e6:32:e5:a6:f3:8b:c7:
a2:4e:28:5e:79:cc:f8:8a:fa:f2:f8:32:17:05:93:
ca:5d:65:78:a0:2d:6d:3a:1a:36:cc:d0:de:c0:7d:
e3:89:4d:93:eb:9f:5d:d0:f0:43:81:07:5d:c3:29:
64:08:f6:ce:04:51:d1:16:a5:de:96:36:db:b6:20:
3f:02:fc:5f:2f:fe:a2:55:28:be:0f:9b:0d:a7:47:
6d:e6:08:cc:d7:5d:96:18:75:97:89:f6:d6:5b:5f:
ae:53:0b:c4:ba:48:33:73:e3:2f:1a:e9:48:ef:30:
39:82:96:16:7c:5f:f8:e8:06:c1:bb:4b:97:5e:15:
9c:41:69:0d:88:fe:17:41:65:4e:c6:dd:a4:a5:e3:
b3:71:e7:34:ef:38:90:33:ed:06:0c:99:b4:ea:0a:
87:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:51:22:A7:FB:F8:72:62:57:83:40:AB:97:E6:8A:DE:D1:CD:E8:3D
X509v3 Authority Key Identifier:
keyid:23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:bb:a7:11:86:cd:12:0e:5a:be:f8:81:5a:73:e2:4f:5d:03:
db:16:6c:03:2d:83:c7:8b:91:8f:a0:40:5e:07:cb:3d:c5:c4:
c9:cc:65:00:68:42:cb:bf:6b:ca:6d:df:9f:43:c0:12:59:48:
50:78:d5:ef:92:4a:ed:fd:db:79:79:49:ac:c3:dd:c7:a8:48:
1c:59:85:e5:b1:f5:5b:39:68:95:49:99:41:1b:08:9b:78:7e:
2b:cf:90:6f:ac:51:06:2c:9a:a2:4f:95:28:75:9e:3d:64:ac:
e5:28:eb:2a:88:4c:31:1d:df:10:46:fe:cd:16:bf:5a:75:ac:
82:0c:44:3a:21:32:97:96:5d:a0:23:36:65:08:ff:52:7c:0b:
95:3d:26:43:20:38:de:ef:58:c9:7c:4b:0b:26:5d:4a:23:e6:
8d:6c:63:12:2c:84:84:1c:5f:d4:51:e2:81:1a:67:5f:51:87:
f4:b0:81:5d:d1:b1:59:9f:07:1c:23:0e:75:75:6b:fd:09:22:
bd:3c:03:86:60:bd:d0:61:bf:3a:83:28:20:ba:44:ae:8a:ba:
b5:51:ad:db:f0:41:51:8b:f0:4d:3c:2f:77:0b:bb:d6:7a:7e:
7d:09:c0:78:ed:28:96:77:dd:cc:50:8f:11:c0:2c:e3:b9:5b:
38:8a:db:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:55 2025 by rpki-client