Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
File: I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft (raw, json)
Hash identifier: ZXALyB7pT5w6/q+1ma9f+JOLdbmHhpPwEmJQyQ/pZEE=
Subject key identifier: BB:CF:18:59:75:D4:5E:7C:64:15:81:25:EA:C9:B8:4A:BA:AE:BA:35
Authority key identifier: 23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99
Certificate issuer: /CN=2384674ea007a12030ac8d2be560db21f4fc0b99
Certificate serial: 0199FF59B022B942DCA27ACF50D47FE7A2BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
Manifest number: 022E
Signing time: Mon 20 Oct 2025 02:01:31 +0000
Manifest this update: Mon 20 Oct 2025 02:01:31 +0000
Manifest next update: Tue 21 Oct 2025 02:01:31 +0000
Files and hashes: 1: I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl (hash: 3FeeX2viDe1nrRw0zfLLGzt+5NlyXZqoAcLTdVWtSZo=)
2: b-r28Bu4MGj-UsbsE6JV2xkR_Kg.roa (hash: CYtDxQh2JoY//+IHHkS7DA+4Jm80AdOA6Xho21YVow0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:b0:22:b9:42:dc:a2:7a:cf:50:d4:7f:e7:a2:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2384674ea007a12030ac8d2be560db21f4fc0b99
Validity
Not Before: Oct 20 02:01:31 2025 GMT
Not After : Oct 21 02:01:31 2025 GMT
Subject: CN=bbcf185975d45e7c64158125eac9b84abaaeba35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5c:99:a4:9e:35:e0:c3:38:11:bc:1c:a6:91:
99:9f:e1:2c:95:e0:5f:9d:dd:28:1a:02:90:f7:39:
ee:f3:aa:a1:60:f5:9e:23:e0:9d:e0:f3:cb:08:af:
c2:a3:f2:c0:26:d4:e2:a7:3f:40:f1:dd:2e:a3:b1:
b5:fb:bd:a9:14:c3:df:da:c6:78:4d:a2:0b:d3:75:
b6:f8:3c:80:0d:08:cc:7a:c5:69:8c:5f:41:52:30:
a0:70:f4:6f:52:23:62:39:b3:36:5e:fd:66:03:9f:
0d:22:29:9e:ef:f7:a4:69:d6:d6:a8:a9:ea:2d:6b:
47:6f:d8:71:8d:eb:82:f6:0b:28:cd:91:f3:13:ac:
af:38:32:9a:6b:81:83:3d:5b:ae:31:43:db:4a:2e:
a3:5f:fe:fe:3b:4b:c0:5d:e0:c1:9d:81:f4:cd:b0:
06:71:e1:1d:1b:1b:5f:75:c5:d6:ec:4f:e3:7d:d3:
f6:84:0f:7c:71:96:20:2d:68:d2:ab:12:54:25:2a:
27:27:24:13:64:2e:b6:d4:68:3c:3c:d3:f0:aa:01:
45:b4:8a:92:9d:f7:bc:6e:88:cd:9c:b6:e4:70:9d:
9c:5c:b1:26:e6:ec:1b:ef:be:66:56:46:01:13:56:
40:b2:d1:b5:4b:e3:b7:84:5c:9e:4b:12:56:a6:66:
4e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CF:18:59:75:D4:5E:7C:64:15:81:25:EA:C9:B8:4A:BA:AE:BA:35
X509v3 Authority Key Identifier:
keyid:23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0c:19:be:c0:b7:7c:64:10:80:f5:6f:fb:75:55:b0:79:c5:
31:57:b4:39:20:bc:5d:42:7e:ac:c5:0e:95:13:7c:bf:9a:45:
3c:eb:0e:b9:7a:08:60:80:fd:97:a8:57:87:cc:de:e4:bc:d8:
0a:8b:b9:4e:00:77:7e:85:cd:b2:bd:22:02:56:f2:2b:53:53:
01:0f:2c:5f:29:ca:02:69:17:b5:47:e8:00:c6:39:36:bd:72:
1d:6f:a7:2f:1f:35:28:2c:27:ad:b5:f9:c1:f8:ef:dc:ed:27:
be:a3:e0:43:29:98:ce:9b:5b:13:11:c9:17:92:8b:11:a3:b6:
a4:cd:fd:2d:8d:91:f4:54:95:65:b9:64:2d:77:13:7b:0a:5e:
b7:cc:fd:f6:39:b7:0a:36:d2:ba:0d:69:fb:84:f5:63:f0:5f:
1d:e1:16:33:8f:21:f4:a7:5d:f1:bd:e1:c3:1e:93:b2:71:70:
de:ed:1d:3c:66:f0:7a:a0:7c:08:b3:2b:7a:6f:0d:63:b8:bc:
7c:23:06:1f:82:c0:c7:19:b5:d4:32:74:51:92:53:f4:0f:3e:
7a:3b:f0:1f:c4:d0:d7:0f:41:63:0a:ad:09:b0:bd:ee:0b:79:
d8:0f:8c:61:b9:01:c4:68:ec:34:98:86:4e:c8:d6:5c:ec:9e:
45:c3:ad:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:00:09 2025 by rpki-client