Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
File: iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft (raw, json)
Hash identifier: fVH6VqetMf9+/UVKTzcnn98LWYIruHvtaJC32QvN3w4=
Subject key identifier: 2F:67:CD:32:46:CB:C5:45:41:D7:92:71:C2:C0:DB:88:34:75:B3:B5
Authority key identifier: 89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC
Certificate issuer: /CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
Certificate serial: 0199FCFDA10648DB2A344CFCE6EF5DE606C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 15:01:44 +0000
Manifest this update: Sun 19 Oct 2025 15:01:44 +0000
Manifest next update: Mon 20 Oct 2025 15:01:44 +0000
Files and hashes: 1: iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl (hash: 2ounPTP5bKpc4/DpNwMSFOVVM/L3LtCB0qckNlG12k8=)
2: w8vjCf4MhWSno6arrBizV8hRGB0.roa (hash: u0VlJI61dIeh8T7++/kZccPzyKi9DwtmR02dU9ACLS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:a1:06:48:db:2a:34:4c:fc:e6:ef:5d:e6:06:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
Validity
Not Before: Oct 19 15:01:44 2025 GMT
Not After : Oct 20 15:01:44 2025 GMT
Subject: CN=2f67cd3246cbc54541d79271c2c0db883475b3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:eb:cf:fb:2a:bd:d4:e4:75:96:b5:b9:22:03:
d8:80:cf:96:f6:f7:27:db:14:4f:4c:45:49:d6:6f:
13:f8:98:c7:8f:8a:ef:55:90:1f:f8:bf:f4:04:15:
a0:69:27:cd:d1:63:5b:a5:43:8f:36:a6:d3:ee:59:
a5:47:4a:fd:07:d7:c7:38:b8:98:df:1f:fd:df:27:
e5:fa:d9:d1:b8:ab:43:31:4d:c1:ff:5e:8b:55:b6:
e3:fd:88:78:fc:df:a9:d6:01:b8:72:e3:15:d2:51:
27:11:0e:73:09:9d:af:14:f2:51:e8:16:dc:f4:34:
e7:fa:b4:bc:f4:fc:63:a4:a3:85:6b:40:ec:b2:87:
d6:7c:b6:7a:f8:9c:b2:7c:d7:da:18:47:33:5a:78:
b6:40:64:10:b8:6c:51:88:94:85:b2:39:3f:ed:a5:
59:5c:75:9a:30:f6:aa:7d:7e:d3:08:18:8e:7d:82:
6c:34:18:d5:9d:ec:a3:ca:98:5b:10:bd:76:6b:bd:
fa:5a:d1:20:f7:d6:2f:57:ff:ab:e8:1a:99:eb:da:
f5:d8:eb:b3:18:92:4d:2a:89:48:d3:7a:5d:d6:bc:
0a:cd:4e:11:4e:3f:51:1c:c7:cd:12:c5:94:9c:9a:
35:96:28:c7:e4:31:9d:0e:d8:58:de:5e:51:3a:a6:
02:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:67:CD:32:46:CB:C5:45:41:D7:92:71:C2:C0:DB:88:34:75:B3:B5
X509v3 Authority Key Identifier:
keyid:89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:79:10:5c:0e:39:4a:4e:a2:17:01:e9:f0:be:0b:cc:7d:2c:
4e:6e:aa:51:1c:60:a8:35:bd:e0:f0:33:22:0c:16:93:02:37:
43:be:79:da:43:dd:9e:6b:c3:58:4b:87:16:59:5f:bf:da:b3:
73:e8:bb:c3:d1:17:ad:17:34:af:79:d9:a7:97:8f:27:80:35:
ca:51:2e:61:9d:dd:43:6e:59:39:9e:49:a2:c0:1a:ca:91:c3:
24:4e:6f:72:a9:30:71:65:b5:67:23:ae:3d:b4:aa:ae:b1:db:
a9:9a:66:3b:26:61:64:4a:c2:5e:e0:c7:3f:73:c1:d0:f3:dd:
c7:5e:49:3a:f8:2c:90:3b:fa:77:4a:c7:be:46:f2:49:79:ee:
a7:0e:e4:45:16:5a:34:56:9f:7b:7d:41:38:b7:49:84:dc:39:
98:10:e9:56:6f:16:03:4d:2b:2b:3c:23:db:ee:6a:b5:b8:61:
24:be:d8:db:3f:26:00:80:31:ce:f9:b9:de:d8:97:92:20:cc:
ce:04:3c:24:d9:68:f7:bc:8d:07:a2:c0:34:e4:e7:5d:0b:e7:
8c:2c:81:e4:a0:86:bd:f2:d8:7d:9e:6a:49:87:d5:76:a5:f5:
e3:24:f9:51:03:0e:17:4d:2a:57:e5:d7:99:e4:58:dc:5b:61:
9f:0e:8b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:15 2025 by rpki-client