Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft
File: IK7ciyobvW03BV7ADo5g9FiOEwU.mft (raw, json)
Hash identifier: Mvp2DyG7tvjfenybwLb+Ou4s+y/FIcHe2/5jCosnQ6Y=
Subject key identifier: 05:A6:4B:A3:71:3F:EE:E6:0D:DF:28:AC:CE:32:06:C8:BD:AD:36:1D
Authority key identifier: 20:AE:DC:8B:2A:1B:BD:6D:37:05:5E:C0:0E:8E:60:F4:58:8E:13:05
Certificate issuer: /CN=20aedc8b2a1bbd6d37055ec00e8e60f4588e1305
Certificate serial: 0199FB7C8B85F33C595FA9FC61137B01D4B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 08:01:07 +0000
Manifest this update: Sun 19 Oct 2025 08:01:07 +0000
Manifest next update: Mon 20 Oct 2025 08:01:07 +0000
Files and hashes: 1: 20Yy79DTSfilFFbqcJeVWxZcEUk.roa (hash: Ts6CpvaJSTki03QhEk4q4v0AnVBL0dLMnm27BuNB3Q8=)
2: IK7ciyobvW03BV7ADo5g9FiOEwU.crl (hash: TcLe7mIKaQD1xEus9i11i7YqDdg/8US/5v9pDlQujvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:8b:85:f3:3c:59:5f:a9:fc:61:13:7b:01:d4:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20aedc8b2a1bbd6d37055ec00e8e60f4588e1305
Validity
Not Before: Oct 19 08:01:07 2025 GMT
Not After : Oct 20 08:01:07 2025 GMT
Subject: CN=05a64ba3713feee60ddf28acce3206c8bdad361d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d7:22:dc:b3:fe:8b:d6:a7:03:aa:13:4d:bf:
a8:ef:00:04:96:f0:42:9d:f7:d4:d3:ef:5c:ce:cd:
6c:a1:f4:a3:cd:c8:e3:22:6e:d1:29:d1:de:01:0c:
60:ea:74:37:22:9c:68:09:6a:80:fc:6c:3d:9c:5a:
ba:45:81:3a:c0:a5:92:88:cb:bf:9a:d7:6d:f1:f6:
04:35:56:0f:3b:bb:5d:26:18:a3:99:18:27:bc:c7:
b3:4f:5b:9f:dd:14:74:92:39:62:2f:36:bc:06:d4:
7c:73:5c:24:29:21:3d:e4:32:fa:c3:4e:b5:cd:bc:
78:69:9e:21:cf:ac:63:a9:5b:81:b2:01:5a:21:6e:
b6:0c:0f:bb:1d:08:87:c2:31:ca:0e:c6:a1:ab:ff:
74:58:53:d1:2c:5b:5d:87:29:e0:26:10:a7:d3:5c:
a4:4a:7e:0e:09:39:cc:33:c0:ec:31:c0:d2:99:33:
b3:60:ea:a0:32:3f:69:f2:08:5f:fc:c6:6b:ca:a5:
8f:6a:c4:12:80:16:76:15:0f:fb:67:ca:99:fa:db:
2d:d2:35:83:e1:73:5a:1a:23:50:d0:9f:99:a8:48:
28:94:b9:fb:e3:9a:80:68:e5:ff:0a:77:c9:34:c3:
ea:af:20:22:fa:27:21:ad:c9:41:25:f3:18:f8:16:
0e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A6:4B:A3:71:3F:EE:E6:0D:DF:28:AC:CE:32:06:C8:BD:AD:36:1D
X509v3 Authority Key Identifier:
keyid:20:AE:DC:8B:2A:1B:BD:6D:37:05:5E:C0:0E:8E:60:F4:58:8E:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:36:b0:e1:11:44:f8:f9:45:93:e1:b2:75:ca:70:5c:2e:1b:
71:e9:d5:e3:cc:af:6d:8b:c4:f6:e6:c0:fb:fc:cd:a7:08:25:
f8:51:12:19:86:63:55:ed:c8:04:b5:08:47:c7:a1:ea:6a:1a:
c0:0d:f8:bd:21:e1:a6:f4:24:9b:ce:cf:0f:99:41:99:c1:a1:
30:cf:85:22:b0:5e:5d:52:00:71:14:aa:76:c0:c3:f4:09:ce:
be:22:b4:51:16:a8:69:16:b9:6b:8a:e6:63:e4:e5:67:e4:50:
99:bf:88:43:91:0a:d4:9a:e1:5a:d6:79:47:e1:be:20:24:aa:
0a:62:28:12:88:1b:72:0f:1e:29:ce:74:56:42:a7:41:54:be:
4f:ce:db:58:ed:03:23:6e:22:77:e5:b2:8f:a0:75:cf:80:bc:
87:ba:64:ec:d2:4a:27:94:4c:66:67:ce:a4:d4:e1:05:5c:89:
f1:ab:f6:07:4c:61:5b:f8:7f:17:5d:1d:e7:54:40:f4:a9:11:
ba:19:cc:3f:82:64:e1:6c:83:58:37:b0:9a:90:69:25:e6:3a:
c5:6d:1c:78:15:8f:12:e4:d5:b0:26:e2:e3:ec:b6:db:84:21:
4c:bc:a5:6f:d0:4c:1d:00:a0:3b:bd:eb:b3:25:de:22:99:f3:
88:d1:2a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:06 2025 by rpki-client