
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
File: IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft (raw, json)
Hash identifier: h04xX269OmOeiWh/1WpelgQHIHjTWENyUCm2T64JPK0=
Subject key identifier: 4F:B6:26:BB:A4:4B:E2:CC:E7:E2:12:BE:37:93:84:FA:61:E3:8A:95
Authority key identifier: 20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B
Certificate issuer: /CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b
Certificate serial: 0199FC2153134761BA9ECB51CF0E5DA69DFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 11:01:06 +0000
Manifest this update: Sun 19 Oct 2025 11:01:06 +0000
Manifest next update: Mon 20 Oct 2025 11:01:06 +0000
Files and hashes: 1: IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl (hash: Lg0lwKLCi0nchLjKvm6KZrAGgTL08xF5GKRSLCobknc=)
2: J46kuUmF_sgE0zFOUz0hgWBo52M.roa (hash: jPrLPvaHVRm/LYCKQXvlkQimqCpYkjCK3g37WDkRjQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:53:13:47:61:ba:9e:cb:51:cf:0e:5d:a6:9d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b
Validity
Not Before: Oct 19 11:01:06 2025 GMT
Not After : Oct 20 11:01:06 2025 GMT
Subject: CN=4fb626bba44be2cce7e212be379384fa61e38a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bb:f9:c8:43:70:0d:f3:b3:76:81:8b:3c:b8:
c9:8c:1b:a4:1b:8b:e9:f4:88:a6:70:13:6d:b7:20:
46:da:8b:68:12:9a:3d:5f:68:fa:38:bc:ce:ad:b5:
b1:10:a9:12:e8:9a:1a:d2:ed:86:57:6d:10:6c:e6:
92:7e:de:cf:91:75:2b:02:5e:cf:42:96:7a:7f:d7:
e5:75:33:69:62:17:88:2a:11:c3:2a:87:bf:fd:d7:
9f:15:7a:35:26:46:d0:50:08:52:aa:08:f8:94:c1:
89:4a:2f:10:20:dd:90:49:cb:09:a8:9f:2c:9a:2e:
46:ef:b2:f8:a8:b3:f7:12:9a:5d:b2:ce:72:78:74:
ca:88:44:da:4a:f2:77:ce:28:2a:22:ed:85:31:b1:
a5:14:15:d5:ce:db:a2:49:d4:b6:6b:89:d2:93:5b:
7f:7d:74:1a:ca:f6:48:f3:a5:e3:2f:2c:d4:31:7d:
e7:71:b2:c0:e3:b4:89:85:b8:38:3a:96:15:a3:c4:
ce:70:9d:3d:0a:ff:d5:c3:6d:61:81:f7:32:c0:6b:
f0:4e:aa:db:9f:04:b3:86:8b:7a:ec:f5:d8:18:e1:
47:33:7a:69:18:ee:aa:e5:b5:74:91:df:72:e1:88:
d2:36:ba:9d:34:19:7a:ee:30:9f:39:99:1a:08:ad:
2a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B6:26:BB:A4:4B:E2:CC:E7:E2:12:BE:37:93:84:FA:61:E3:8A:95
X509v3 Authority Key Identifier:
keyid:20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4c:3c:21:e9:5f:6c:8a:be:fc:ff:4f:3d:5d:19:be:85:c3:
78:e8:12:f3:f6:a1:20:0b:c1:0f:5c:33:f7:6a:1e:5a:1f:0d:
d1:6a:83:5f:8b:6b:2e:d8:ab:43:11:05:12:3a:6a:3f:89:4c:
f5:f1:51:26:87:78:c9:de:e2:07:0a:82:5b:e9:ce:e0:94:a4:
8a:b3:89:45:8d:36:b9:0b:3e:3b:93:c8:4f:bb:da:80:93:60:
cd:94:7b:4d:af:f8:d6:45:51:01:dd:5a:3d:f6:39:33:30:93:
71:5c:b5:b0:54:61:7c:fc:56:65:68:7a:94:1e:7b:e7:15:2c:
52:c4:13:31:95:9e:23:bf:3a:79:57:86:d5:58:4b:8e:5d:6d:
62:5a:b5:a6:cb:37:d0:cd:2a:05:b5:72:40:3e:ce:94:df:06:
c0:0c:f9:e6:6f:36:f0:47:d7:68:5a:a9:eb:e3:c5:dd:56:04:
7e:6a:66:7a:26:a2:80:99:f7:b7:df:bb:af:d0:f1:62:44:e9:
9c:4a:86:64:14:20:22:b5:a2:53:04:8b:d7:bf:5b:13:8d:09:
14:eb:9d:09:3b:26:e0:c0:6b:73:23:10:6e:9c:61:df:28:cb:
91:a2:13:76:9c:59:75:97:f3:56:37:86:b5:54:8a:40:ef:7a:
57:ed:7c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:05 2025 by rpki-client