Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
File: IKf8vlkxTDcraPIyIjgoseM6A-w.mft (raw, json)
Hash identifier: PGnrGquY1SlDp4o3Wb8oOAHveM5A+v2Abh2pZgTPCug=
Subject key identifier: D0:79:FB:02:0E:57:71:2E:0E:64:68:0D:77:6E:74:3C:12:EB:76:41
Authority key identifier: 20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC
Certificate issuer: /CN=20a7fcbe59314c372b68f232223828b1e33a03ec
Certificate serial: 0199FD342DD8B44779AB1DB05F891AAC3B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
Manifest number: 1342
Signing time: Sun 19 Oct 2025 16:01:19 +0000
Manifest this update: Sun 19 Oct 2025 16:01:19 +0000
Manifest next update: Mon 20 Oct 2025 16:01:19 +0000
Files and hashes: 1: IKf8vlkxTDcraPIyIjgoseM6A-w.crl (hash: NB8UDLv8/8Nsg4LhrGej00sPjzqygJOqftp8b0CxqUM=)
2: O18qD-IOxU7Qpx-7qCdZCriatME.roa (hash: XB9lqyR5AkwxeYq52oBczF39tInCtjYqPPhU7+xJ+5I=)
3: d-01XFis9cLH8BZUIJJWfcsmDG4.roa (hash: NudOKOFu9rScWQsymrxK2r70c3aFtGLF+JDUyVcCcnw=)
4: rwFlopf5Xa6Dqk29FmnWdxdlBsc.roa (hash: sHbPcAOKBddNPUyuRRzIjyvQe1AGIhhOwA82JfuKSsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:2d:d8:b4:47:79:ab:1d:b0:5f:89:1a:ac:3b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20a7fcbe59314c372b68f232223828b1e33a03ec
Validity
Not Before: Oct 19 16:01:19 2025 GMT
Not After : Oct 20 16:01:19 2025 GMT
Subject: CN=d079fb020e57712e0e64680d776e743c12eb7641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fc:17:40:2a:15:e8:37:48:37:b4:af:23:c6:
60:fc:bf:38:a5:f6:a4:ff:bf:1a:de:78:0f:bd:01:
81:d2:f4:16:9d:30:83:58:05:6b:4e:90:ae:dc:8f:
f8:76:c6:6e:d0:e4:59:75:18:70:2f:3d:e5:ef:a2:
ce:d2:b2:19:35:d6:f1:10:21:bf:6d:f5:03:7b:df:
ea:d1:42:9f:fb:26:ca:ac:2b:42:5e:50:1f:22:6a:
78:b1:44:a5:b1:a3:2d:9c:fd:6a:7f:9f:6b:2d:62:
08:5c:f8:86:77:65:5e:83:a5:0c:cd:f2:81:c2:e0:
a4:fd:f1:4f:06:bc:e9:bc:9c:6e:16:be:4d:6c:07:
02:dc:a2:53:81:11:4a:6a:cb:c1:40:fd:f0:94:5e:
ca:a0:17:a6:18:ed:c1:4e:3d:a5:c8:d2:e6:a2:92:
a6:92:5c:c6:b4:3e:6f:9b:a0:75:7e:e0:c9:94:d1:
d4:30:a1:ce:7e:1c:f3:99:aa:76:e9:ba:04:5a:66:
f4:e5:fc:99:37:f8:86:98:60:a5:45:a3:77:46:b6:
f3:e7:72:d1:dc:e1:89:6e:2a:3f:20:93:ae:6c:54:
01:20:5c:88:29:ab:1c:fb:c9:e7:1f:9e:57:34:37:
1f:bb:3b:47:78:29:b7:14:b1:29:e7:d6:44:7d:6e:
93:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:79:FB:02:0E:57:71:2E:0E:64:68:0D:77:6E:74:3C:12:EB:76:41
X509v3 Authority Key Identifier:
keyid:20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:01:07:a8:26:8f:49:b2:71:86:b1:27:1e:3d:7b:08:44:87:
dc:2a:5e:40:1c:1e:6d:c1:55:64:93:e1:15:1c:1a:db:73:79:
e1:38:b7:54:24:5d:e1:b8:9a:8d:40:22:07:4b:3b:38:cd:ce:
c8:72:82:56:e4:ea:b6:73:ea:5a:68:c3:22:f2:74:b6:e2:56:
de:f9:8e:4f:aa:0b:e1:da:44:4d:37:f7:8f:c5:0e:98:46:f0:
7d:6a:a2:f1:7a:76:41:db:5e:a4:62:30:77:5f:79:4b:1b:a8:
1b:0f:1e:05:10:e0:41:27:09:36:ca:2f:3e:9e:62:c9:db:39:
b4:4a:b8:96:6c:d1:fb:c2:4d:7a:c2:02:74:0c:f8:fb:c6:29:
b5:5c:f3:c2:f4:fc:2c:62:b2:df:3c:e3:23:df:3f:4f:db:e1:
8c:ce:b8:51:27:26:04:27:7e:fd:21:65:94:b2:9c:75:a8:8c:
26:1c:e7:41:e2:6d:3a:1b:48:f3:2b:f4:a0:76:d2:08:3d:b1:
11:c9:bf:c2:55:fa:07:0e:ce:9c:c8:c3:fc:e7:2e:63:3b:0a:
68:96:23:2e:ca:37:ea:f4:d0:91:87:9e:c5:61:4d:f5:de:f6:
71:03:ea:50:1f:ee:d4:6b:3e:e4:50:1a:17:4a:da:f9:61:29:
9c:10:81:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:37:45 2025 by rpki-client