Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
File: I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft (raw, json)
Hash identifier: ya7RTkBwKtxsLx0l81MvPm4X/9Gtd/jjLIQgiMBxMfk=
Subject key identifier: B9:83:D0:C2:67:8D:80:BF:A7:93:E4:46:88:FC:91:D1:C1:AE:07:A4
Authority key identifier: 23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
Certificate issuer: /CN=23607105955c764a813fd9524a7e41b940c56832
Certificate serial: 0199FC58BAAD6B146B3A7440427CDC55B9F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
Manifest number: 02E5
Signing time: Sun 19 Oct 2025 12:01:37 +0000
Manifest this update: Sun 19 Oct 2025 12:01:37 +0000
Manifest next update: Mon 20 Oct 2025 12:01:37 +0000
Files and hashes: 1: I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl (hash: udW08VQ4SuMuvW7oG5/eTlz3CmUDPtBXN1MX0fVgWmo=)
2: pL8DPUuY6V_LTawy1OdUwrIg01c.roa (hash: yxyfBx5vs5Lhayo07nTfHgtEaPhrWIe0WeuncjCeyYo=)
3: rPtueqwAgjU2IUHv5A02J4kLlys.roa (hash: vDBPmEjKrFXU2lnK2ZWnREJRhpJ1uOnxEsPQx6QBwFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ba:ad:6b:14:6b:3a:74:40:42:7c:dc:55:b9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23607105955c764a813fd9524a7e41b940c56832
Validity
Not Before: Oct 19 12:01:37 2025 GMT
Not After : Oct 20 12:01:37 2025 GMT
Subject: CN=b983d0c2678d80bfa793e44688fc91d1c1ae07a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:82:6b:af:cf:4d:ba:cd:79:31:52:89:71:ed:
89:1c:dd:92:53:92:63:4c:40:a4:38:35:15:37:5e:
cc:09:f1:85:ce:59:da:7a:32:6d:73:7a:16:21:21:
ca:8f:13:3c:71:a8:93:28:b7:0c:d8:2a:55:3e:68:
ae:ac:7e:e9:d3:4a:cc:6d:43:49:d8:50:89:57:15:
2c:60:b5:24:ce:4d:d9:b8:3f:bc:4f:8c:31:bc:a5:
2b:47:58:c7:ce:7a:75:b6:77:6a:74:40:de:cc:15:
ac:0d:39:82:9b:67:67:2b:25:5f:b1:24:6d:06:ef:
c3:06:34:c1:30:1b:8e:13:d7:a5:b6:4d:7f:f8:b8:
be:36:ba:14:b0:76:c3:18:7d:f5:05:4d:72:ac:1b:
21:29:d8:63:0b:89:00:41:06:5b:30:bd:6c:aa:b1:
76:3d:2c:fa:2f:22:aa:4d:b4:8d:a1:46:ff:a4:ec:
7a:c4:2a:d4:00:1a:77:86:ce:2b:7c:3d:4b:47:ca:
a7:b5:9a:95:bc:19:91:92:b5:7c:75:64:01:91:06:
57:a3:c5:d0:4e:2e:bd:c1:8e:a5:65:c9:0d:86:7b:
4d:e1:6c:dd:41:3d:ce:b8:ad:0a:e9:3b:5b:ba:37:
3a:ac:33:3f:fe:d8:f0:80:29:d0:d7:fa:7d:24:de:
d3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:83:D0:C2:67:8D:80:BF:A7:93:E4:46:88:FC:91:D1:C1:AE:07:A4
X509v3 Authority Key Identifier:
keyid:23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:06:94:48:52:4a:08:45:83:fb:12:5c:24:b8:5a:86:d3:44:
9e:e4:27:41:b0:d8:f4:ca:e3:67:2d:78:0a:9b:3a:68:d6:17:
04:ec:a2:26:ce:19:cf:2c:dc:d8:e9:85:b2:a5:03:f3:ac:58:
5b:b8:4b:d2:1e:0b:d0:54:c7:4b:09:c2:7f:d9:66:0a:80:23:
8e:6e:24:cc:32:9b:a1:f1:5b:bd:e4:fb:0e:38:95:f6:1e:fd:
0f:00:ce:5e:6c:36:92:02:b7:8f:05:4d:e4:fb:0f:ff:8a:e8:
a9:40:a6:5c:29:5f:bd:c9:d3:2c:fd:9f:5a:7c:18:32:e4:ed:
8a:a4:23:a3:dc:93:3c:ca:2c:24:03:ca:15:e9:27:8e:ca:99:
8c:7e:1b:09:26:1b:85:2b:20:f7:ee:75:05:17:59:81:56:a1:
20:93:b3:62:a0:10:46:95:94:da:23:c1:b5:ad:e0:a2:9f:a1:
da:5e:ea:4e:00:80:f1:2c:4b:e7:03:92:ec:ea:e4:a5:d6:d2:
36:10:e2:5d:ad:2c:46:4e:da:69:ba:c4:81:ac:bd:2c:28:25:
ad:ad:bd:a8:b7:8c:38:0c:f7:5a:c3:36:64:e2:b9:45:a4:27:
68:98:8c:7c:1e:7a:db:d8:af:1a:5d:d8:9f:10:57:f6:80:c5:
0a:5e:e4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:18 2025 by rpki-client