Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.mft
File: IB_mmB68vJI8jkn0hFJEHQgOZvA.mft (raw, json)
Hash identifier: mI7MQBAeSLweITyC+1Kuyojx25ekqWMBKttRwCDL0To=
Subject key identifier: 16:BC:3A:CA:C9:6A:F8:B9:74:76:D7:8D:EA:32:B9:15:C7:65:08:A8
Authority key identifier: 20:1F:E6:98:1E:BC:BC:92:3C:8E:49:F4:84:52:44:1D:08:0E:66:F0
Certificate issuer: /CN=201fe6981ebcbc923c8e49f48452441d080e66f0
Certificate serial: 019A0222F5DF7C95117360488E1B02FB3FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_mmB68vJI8jkn0hFJEHQgOZvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.mft
Manifest number: 10E0
Signing time: Mon 20 Oct 2025 15:00:36 +0000
Manifest this update: Mon 20 Oct 2025 15:00:36 +0000
Manifest next update: Tue 21 Oct 2025 15:00:36 +0000
Files and hashes: 1: GDKGeKleHqIsNhWuvQIPnj1S5ik.roa (hash: 027frokon21vo4MMUC96Z9OEZpQ3AsbdGWojRJwBl/8=)
2: IB_mmB68vJI8jkn0hFJEHQgOZvA.crl (hash: vLDGd4BN3rFHtM+1fgNgeY1RaLEAWTsYQo2V8N6a0mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IB_mmB68vJI8jkn0hFJEHQgOZvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:22:f5:df:7c:95:11:73:60:48:8e:1b:02:fb:3f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe6981ebcbc923c8e49f48452441d080e66f0
Validity
Not Before: Oct 20 15:00:36 2025 GMT
Not After : Oct 21 15:00:36 2025 GMT
Subject: CN=16bc3acac96af8b97476d78dea32b915c76508a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e6:ad:3b:17:fe:11:76:63:13:d0:d9:7a:44:
c8:a7:7f:b3:37:a9:6b:cc:31:d7:0f:97:75:66:61:
8f:b5:86:b6:ce:d4:39:29:35:33:52:e6:72:2e:79:
51:79:6f:1e:e4:18:67:2f:c8:99:4b:96:c6:9e:a6:
a1:a7:bb:39:31:9f:61:c0:d7:9d:b5:c5:fa:76:aa:
4b:3e:9f:94:cf:53:04:94:8a:f5:d0:cd:99:32:cd:
e9:7a:71:c6:1f:04:a6:6e:e8:25:55:52:81:e7:43:
2c:bc:0e:5d:9c:54:41:4e:1f:72:84:1f:d3:6f:9e:
80:c0:fd:4e:f7:bc:49:11:86:57:43:1e:fb:99:b3:
69:7c:04:58:bb:b8:01:83:d1:e3:3b:86:9e:66:3b:
a2:3f:e3:d5:3c:8c:f6:a0:58:fd:5b:9a:fd:b3:46:
97:96:56:40:6c:82:35:65:19:48:2b:78:00:c3:97:
38:f8:86:2a:9e:ac:a4:cd:90:7e:86:f1:e6:01:38:
4e:1f:1c:fd:6c:14:1f:e3:c8:5f:ba:1c:ab:bb:3d:
34:aa:4b:f0:e0:cd:c9:22:56:9b:ef:58:01:bc:46:
36:f4:83:52:00:96:0d:21:bd:32:2d:9d:bb:eb:4a:
d6:9f:22:f5:f6:79:28:cc:77:55:98:f2:72:5a:d2:
cb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BC:3A:CA:C9:6A:F8:B9:74:76:D7:8D:EA:32:B9:15:C7:65:08:A8
X509v3 Authority Key Identifier:
keyid:20:1F:E6:98:1E:BC:BC:92:3C:8E:49:F4:84:52:44:1D:08:0E:66:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_mmB68vJI8jkn0hFJEHQgOZvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/44b2b2-b45a-4053-be29-2724f92bd56e/1/IB_mmB68vJI8jkn0hFJEHQgOZvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e8:76:42:39:68:a7:48:02:a5:42:c8:0f:58:71:dd:a4:52:
94:92:94:56:fb:26:b7:99:0e:e8:0a:3e:af:aa:98:f8:46:d6:
12:ac:29:9b:49:13:dd:e3:ec:e4:8c:df:22:06:87:3d:86:b1:
96:ce:92:f2:48:58:79:a9:ff:36:3d:e8:ed:96:f4:ae:f9:99:
13:2c:6b:20:d7:9d:e5:6e:e0:60:df:29:82:ae:f7:a7:78:46:
52:bc:e4:96:d2:91:e3:7c:83:a0:b3:7d:bf:9b:7d:28:66:d0:
49:dd:a4:fe:e3:16:e0:6e:4a:bf:fe:7c:51:f7:73:cf:0e:8c:
f0:e6:94:17:4f:52:86:3b:0c:1c:48:4c:45:56:fb:02:f5:e6:
24:e1:63:67:cc:db:36:8f:21:88:6b:7a:75:2d:4b:a4:dc:62:
a7:30:bf:67:71:14:0f:d7:eb:78:10:c5:c1:43:62:a9:4e:db:
87:60:98:82:a5:75:a9:0a:f2:0c:06:93:0c:74:64:e8:d4:9b:
c5:bb:be:28:42:68:cd:e1:10:0e:85:30:31:2a:5d:7c:1d:92:
db:c7:84:6d:4e:69:c5:37:c6:cf:69:88:9f:2b:b8:4a:f9:bf:
41:3d:00:32:90:17:21:aa:6f:d6:9d:ed:7b:23:49:a4:be:03:
0b:6d:ea:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:38:55 2025 by rpki-client