Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
File: ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft (raw, json)
Hash identifier: LzRXmk5t1m+x5IAlCIx/XBYjul0iGJnMU/f0op7wqHw=
Subject key identifier: 32:58:E9:36:43:9B:71:66:62:A2:4C:70:1C:0E:0E:02:6E:C5:E5:58
Authority key identifier: 8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
Certificate issuer: /CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
Certificate serial: 0199FAD7C6CE5B4E17A8D99A7CD8E47A6AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 05:01:09 +0000
Manifest this update: Sun 19 Oct 2025 05:01:09 +0000
Manifest next update: Mon 20 Oct 2025 05:01:09 +0000
Files and hashes: 1: SZpd9qPeF2_UcZ0BFTiD1uQx6CE.roa (hash: 4d7c/yFsOUlnwxOih4L4b458874C6mb5/7y63/As6E0=)
2: e6NTQMQbAc2rRpYIgSE0b5QlitQ.roa (hash: AW2JD/AMZP/3NkMYPVumCDsjg07AD98EjBhRoynRE5I=)
3: ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl (hash: TKM7YjyBnf2sAOXDAt6kBFljjjs4PlZ8xffabexTlRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:c6:ce:5b:4e:17:a8:d9:9a:7c:d8:e4:7a:6a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
Validity
Not Before: Oct 19 05:01:09 2025 GMT
Not After : Oct 20 05:01:09 2025 GMT
Subject: CN=3258e936439b716662a24c701c0e0e026ec5e558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7b:a2:66:66:d3:a3:19:d8:3f:40:a3:f5:74:
e5:d8:14:5d:07:a0:a8:38:45:c6:44:d8:5d:92:42:
d6:20:40:45:1e:9a:2e:7b:2b:78:3d:3b:9a:33:b0:
74:18:50:e2:da:df:0c:27:95:c7:33:aa:67:6a:cc:
ac:b7:46:f5:35:11:82:8c:b5:d1:89:e2:ca:76:7f:
cc:95:b6:0d:4a:2d:ca:ce:c7:c4:ab:fd:ec:9d:50:
46:6f:a5:74:34:e2:0e:0a:ed:b7:72:73:73:40:ae:
41:ed:4a:75:4e:ea:e2:b9:64:fd:5e:65:24:32:94:
e8:b5:bd:74:7c:0a:53:83:20:db:62:55:72:23:f2:
75:85:31:ed:bc:90:63:e3:1e:04:60:10:11:b8:30:
a1:c1:a7:1c:23:1c:57:04:7c:1a:aa:93:f9:f6:0c:
65:9d:e6:16:36:c6:38:81:6f:2e:36:0f:a4:db:ea:
23:fa:8a:37:58:30:df:5f:c2:27:5d:05:97:20:7b:
98:63:8a:ef:88:d2:59:a3:88:6a:11:6d:55:d1:4a:
ac:42:83:2a:59:19:15:63:24:08:74:8e:7f:25:a3:
13:1b:49:28:65:59:94:e3:84:fe:58:70:d5:96:fa:
07:ae:98:d5:84:8f:5f:23:e0:7e:95:cb:15:f4:d0:
03:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:58:E9:36:43:9B:71:66:62:A2:4C:70:1C:0E:0E:02:6E:C5:E5:58
X509v3 Authority Key Identifier:
keyid:8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:47:6c:fc:cb:87:56:ca:7e:8c:08:d8:5f:93:6d:3a:b3:da:
37:93:61:c6:4d:9a:30:ef:2a:d7:0f:4c:9f:09:88:84:04:e0:
bb:96:72:33:33:46:76:2a:57:5c:04:d5:5f:f4:93:54:63:29:
68:31:4e:b3:46:6f:69:65:15:ac:f7:4c:ac:4b:ba:0f:ea:17:
d6:ef:8c:08:fd:ef:cd:d6:91:4c:b7:9e:42:2f:3a:2a:9a:c6:
49:71:ed:1d:01:02:87:5a:64:df:7c:01:bf:5d:b0:11:68:0b:
ab:15:8f:18:80:f6:a3:0f:5a:46:10:16:b8:66:9d:a6:d1:54:
f9:86:03:f2:14:db:29:b3:0d:fb:ec:ac:93:5e:d5:c6:a4:8d:
fe:46:5a:19:21:11:d4:7d:a1:d1:8a:5a:b1:0e:9f:f6:53:02:
55:7a:79:4c:3c:ea:f1:f5:fe:65:f2:09:e9:70:e6:7e:72:13:
eb:a6:f7:54:09:40:6b:48:36:55:b5:29:12:0a:07:04:55:62:
3c:a2:37:30:3b:50:98:6b:5f:3b:b4:cf:d4:76:b1:1d:a5:c8:
39:fe:b5:36:73:ba:7d:3a:51:19:a0:29:01:a1:d2:25:dd:da:
61:c8:9b:ca:81:73:0a:6c:85:d8:d0:13:5d:3b:76:a2:40:cc:
5a:9c:3d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:10 2025 by rpki-client