Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
File: IxIMamyM8XJufUjjFKFszQXvhgc.mft (raw, json)
Hash identifier: uwt0BKJAtdArbq33scXchEHoVlOtfvp41e3bgqv2E/A=
Subject key identifier: 07:7B:E3:9E:40:BD:67:D2:8A:52:9F:93:B4:FA:76:69:3D:49:28:04
Authority key identifier: 23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
Certificate issuer: /CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Certificate serial: 0199FB7C6CA2C1ED59631D7736D75CC8FB2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 08:00:59 +0000
Manifest this update: Sun 19 Oct 2025 08:00:59 +0000
Manifest next update: Mon 20 Oct 2025 08:00:59 +0000
Files and hashes: 1: 3ljJaz1a5cIjZ8YC3COzHNt_p94.roa (hash: bMQghzShphucnVw2AcHoK8ZlibkBQSkRsxgVMSWXPUM=)
2: IxIMamyM8XJufUjjFKFszQXvhgc.crl (hash: A1iJjtWA3p31hi7K2t1N6OFnSjOiOEZrw8qJPNr1lU4=)
3: PVPdjWfp5158kOXCBG02gGqvS2k.roa (hash: yHL6CrBTx/Lx7UNatKVR0PW+xHw8+FZidWVfHY4s2Bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:6c:a2:c1:ed:59:63:1d:77:36:d7:5c:c8:fb:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Validity
Not Before: Oct 19 08:00:59 2025 GMT
Not After : Oct 20 08:00:59 2025 GMT
Subject: CN=077be39e40bd67d28a529f93b4fa76693d492804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:71:90:92:7e:cc:5a:f9:31:1c:79:99:dd:
2c:69:b8:06:20:52:78:91:96:de:ac:c6:bd:ed:3d:
41:1d:e6:62:53:6e:d2:4d:fa:a8:3e:ca:b2:44:ac:
64:12:f9:19:25:c7:88:71:6b:17:16:33:22:62:e1:
da:3f:d8:2a:ce:cc:92:bf:cf:77:f0:60:d6:be:8e:
96:62:8e:e4:ea:7b:85:18:3a:b6:af:b6:61:41:e4:
29:9b:30:47:df:f1:f6:81:b2:45:42:67:19:8b:73:
3f:3a:d6:32:ee:d6:af:d0:7a:43:b9:ab:d6:93:71:
ca:40:b3:d4:3a:06:a8:da:f1:b5:cb:33:c3:53:1d:
68:0b:27:af:6d:f8:60:58:9f:95:8f:8f:82:3d:9a:
19:76:68:17:1a:c2:4c:ec:1b:72:a3:7d:5e:67:d9:
89:95:9a:79:00:1f:49:1c:6a:ee:d9:85:80:d6:97:
29:a3:24:3b:47:95:bf:6f:31:17:73:c1:cf:89:e8:
e2:75:83:98:f9:2e:f3:25:82:a7:59:90:06:85:26:
f8:c9:1c:1d:fd:02:f6:ab:01:5f:3b:ff:d6:92:e0:
85:de:64:97:67:e5:97:83:4d:69:b8:3c:d8:04:30:
25:75:69:3a:eb:c3:3e:92:3c:52:1f:73:d0:b8:de:
5e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7B:E3:9E:40:BD:67:D2:8A:52:9F:93:B4:FA:76:69:3D:49:28:04
X509v3 Authority Key Identifier:
keyid:23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:bc:b3:df:b4:cd:3e:79:41:ba:81:b1:e8:7a:98:e3:55:6e:
30:80:ab:0d:eb:01:4b:ca:99:3b:db:05:5f:0e:36:6f:8d:88:
fc:4d:6c:e1:36:82:7a:c5:5e:c0:33:f3:d8:da:d8:5a:a2:66:
7e:18:41:6c:a3:9e:6a:d3:0b:9b:48:89:2f:2a:96:39:98:2f:
11:58:84:3f:d1:cb:e4:85:df:35:75:24:09:61:dd:76:5a:61:
c4:37:d0:ad:39:0a:23:23:ab:5b:7d:b6:3b:bd:60:e6:57:84:
2a:bb:15:45:49:d9:19:9c:81:77:b6:9a:d0:d3:98:ea:b3:04:
fb:6c:bf:d5:45:d1:ae:9d:fb:85:b2:b2:36:62:f9:20:a2:6b:
79:38:a9:b0:12:e9:62:65:9a:80:5e:10:e5:49:76:41:7f:e1:
dd:21:de:90:db:37:4f:c3:ee:87:5b:c6:24:af:9f:be:5c:a0:
03:06:0e:37:55:71:78:04:5b:e6:3b:01:16:6b:b6:28:4a:ae:
9a:4b:42:f4:cc:c1:e4:51:4f:5e:52:fe:a4:6a:9a:d7:bc:6b:
1f:e4:1b:2e:62:ee:a3:a5:30:60:b4:28:fe:6e:df:63:c1:f3:
bb:97:87:7b:7a:7a:ab:87:fb:77:2c:69:1d:14:c2:71:02:08:
a1:e2:eb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:29 2025 by rpki-client