Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
File: _IJp9C5GRBqx7ZlMifdHuqVU4yA.mft (raw, json)
Hash identifier: JpsWbFOW+yNR9jjfrCkBhv0YTY6Akkedsq5JevX3iLY=
Subject key identifier: E4:64:4D:FF:1F:10:A2:1B:1E:47:66:62:BD:91:92:61:68:23:BC:7E
Authority key identifier: FC:82:69:F4:2E:46:44:1A:B1:ED:99:4C:89:F7:47:BA:A5:54:E3:20
Certificate issuer: /CN=fc8269f42e46441ab1ed994c89f747baa554e320
Certificate serial: 019A01B4C13CEEF76E421B0CB3D5A1E95732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 13:00:14 +0000
Manifest this update: Mon 20 Oct 2025 13:00:14 +0000
Manifest next update: Tue 21 Oct 2025 13:00:14 +0000
Files and hashes: 1: _IJp9C5GRBqx7ZlMifdHuqVU4yA.crl (hash: 58/9Ba+Zvf898PXMNCTys6OfSOCc7AKkYoyg0dGWlRE=)
2: eJpm7vOqN0K6_-N5ZvgNj0bJa14.roa (hash: ZjNNKQofgKq/YUnavRCCV2cjVOzm2yU0UKdAMKHM4p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b4:c1:3c:ee:f7:6e:42:1b:0c:b3:d5:a1:e9:57:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc8269f42e46441ab1ed994c89f747baa554e320
Validity
Not Before: Oct 20 13:00:14 2025 GMT
Not After : Oct 21 13:00:14 2025 GMT
Subject: CN=e4644dff1f10a21b1e476662bd9192616823bc7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:eb:39:c7:55:db:19:37:ce:71:1f:5b:5a:ee:
98:27:84:a3:f6:2e:4b:47:b6:4c:87:89:d8:dd:73:
5a:bf:81:bf:5c:71:8e:18:e3:1f:c0:b9:9b:59:22:
6d:31:f0:e6:b6:fb:46:40:3d:87:1b:7d:16:15:e4:
fb:47:2f:d7:41:20:d5:8c:12:00:9b:45:93:a6:5b:
ed:39:3a:7d:bc:2a:62:2b:aa:68:61:69:35:db:5f:
b4:91:8b:8d:55:1f:65:51:07:49:06:c1:45:a8:ef:
f3:0a:b7:bc:6a:d3:ff:19:86:06:02:18:aa:96:d5:
b2:09:67:1b:c5:ea:b4:43:07:62:0b:95:68:b6:16:
3c:87:8b:89:66:c8:39:d6:06:21:62:a0:d0:6b:b9:
6e:bf:08:fe:71:c1:47:43:13:a3:23:0b:0c:f2:a9:
a9:b6:20:77:66:73:23:9c:33:49:36:a8:95:41:99:
3f:bb:94:4a:82:5d:f8:0d:bf:82:15:6a:e8:3d:a6:
7d:41:ff:9e:05:cf:e7:df:01:ab:b8:fc:54:d2:7a:
56:82:06:97:17:c4:fd:95:bd:04:0e:a7:f0:11:11:
49:fc:c2:2f:f2:ff:f7:0c:14:6e:5e:d3:15:0b:be:
c4:a7:40:62:5a:0f:bc:43:55:98:38:e1:2c:42:70:
8b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:64:4D:FF:1F:10:A2:1B:1E:47:66:62:BD:91:92:61:68:23:BC:7E
X509v3 Authority Key Identifier:
keyid:FC:82:69:F4:2E:46:44:1A:B1:ED:99:4C:89:F7:47:BA:A5:54:E3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:bd:df:09:21:66:5e:7c:b2:f7:05:72:d6:89:f7:76:13:1c:
24:67:ab:9a:e3:61:7e:0c:08:ee:c5:07:66:5a:45:72:d1:4c:
e7:e3:e3:ab:8a:fb:d6:fa:b5:33:2a:45:1b:37:84:02:d2:45:
ba:02:d8:b9:41:68:31:0b:f3:41:f1:fa:46:2b:4a:c5:b2:be:
45:97:33:6b:b6:17:55:b2:e0:d9:91:8c:7f:2b:3b:0e:2f:d9:
4a:5e:4d:cd:c8:37:d8:69:64:5a:5d:60:1b:14:4b:7f:f1:43:
55:9d:ae:19:06:ce:dd:89:ed:59:c5:0f:08:00:c1:c3:02:e3:
ef:c7:cc:05:2d:74:1e:4f:48:60:47:ef:00:27:f5:1b:97:3a:
a7:ed:60:a3:b1:4e:a5:b5:56:83:09:22:1a:d8:12:d7:92:e4:
08:c8:f3:4a:4d:89:93:33:b5:02:83:69:9c:23:86:61:22:95:
5a:88:31:29:80:2d:83:fe:f0:37:54:9d:65:39:1d:81:3c:58:
70:8c:97:34:39:a3:97:cc:80:23:d8:be:01:d0:5b:46:b4:ee:
f4:0e:1b:59:29:9c:dd:c7:a4:04:05:b7:ad:2f:f7:5b:d6:ae:
d6:8f:17:d6:f2:58:57:66:ff:1d:69:76:2a:f1:e2:1d:10:75:
90:db:e4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:22:19 2025 by rpki-client