Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
File: IJ2ng837PLbZvILBktbXKrtKM20.mft (raw, json)
Hash identifier: 9/z2M/c8KQwPhaG68CpOvbT0Ur4zwQzdY2YV17xzA9w=
Subject key identifier: D0:CD:D9:E8:8A:21:EB:D8:25:05:C8:CC:8C:FA:D0:13:D0:D7:05:5E
Authority key identifier: 20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
Certificate issuer: /CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Certificate serial: 0199FBEB2520CC8C61C3705695F277388564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
Manifest number: 0323
Signing time: Sun 19 Oct 2025 10:01:55 +0000
Manifest this update: Sun 19 Oct 2025 10:01:55 +0000
Manifest next update: Mon 20 Oct 2025 10:01:55 +0000
Files and hashes: 1: 2n3afJDZ2VaAW1ICi9wuuluJH-s.roa (hash: n7gdmzqfRPjhPckkIN46JD6+pmnsuH8Fvwcad0thHWk=)
2: IJ2ng837PLbZvILBktbXKrtKM20.crl (hash: pA+m3CHEgB2X/ar9cmpenp/04mKIkKEfUy0lS7K/kww=)
3: fc650b5-Hy28l_7CM0InWSbhHHA.roa (hash: I0jfOZTYpGZasFE0U01uqVVs9byyAIXg5OzAj9nSBPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:25:20:cc:8c:61:c3:70:56:95:f2:77:38:85:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Validity
Not Before: Oct 19 10:01:55 2025 GMT
Not After : Oct 20 10:01:55 2025 GMT
Subject: CN=d0cdd9e88a21ebd82505c8cc8cfad013d0d7055e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:40:25:ac:53:93:63:04:ca:7a:d1:6b:ad:33:
09:a6:17:a2:81:48:eb:ce:49:8c:d9:92:43:e7:a4:
ba:e3:51:fe:67:6d:85:6f:97:22:7b:de:c9:b2:d2:
f8:94:9f:62:34:02:bc:f6:d3:1b:9c:93:e0:62:7a:
ae:4b:93:c2:61:9e:fc:55:fb:16:7b:be:d1:c6:a3:
66:d8:5b:8b:7a:93:1e:10:63:d5:81:bb:81:e1:ad:
80:fa:90:4e:ff:22:3e:56:1c:80:f2:48:1d:04:e2:
f1:97:86:c3:ec:63:f9:39:e1:98:aa:92:11:79:45:
b4:f9:44:03:64:27:b1:4a:84:bd:a8:63:01:6d:81:
ae:35:6d:f1:2b:53:d9:25:6d:b8:31:73:fe:14:9d:
8e:de:16:da:ad:57:1d:93:3e:b0:84:c7:96:b4:f1:
cc:2b:80:e1:36:57:d5:10:3c:89:14:db:79:29:6e:
bc:7c:da:8d:56:32:4b:72:49:49:8d:f8:08:07:51:
32:26:66:3e:f2:16:d1:a9:67:2a:02:50:ab:25:1d:
d0:6d:33:37:7a:25:fa:92:cf:a6:1a:9a:11:e9:06:
22:a5:6b:27:d0:ad:57:9a:53:2b:5d:3b:93:f3:76:
e4:be:cf:d5:cc:7b:1d:61:66:28:44:74:2b:05:7e:
5e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CD:D9:E8:8A:21:EB:D8:25:05:C8:CC:8C:FA:D0:13:D0:D7:05:5E
X509v3 Authority Key Identifier:
keyid:20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:6e:2c:60:6d:30:4b:11:90:6a:92:36:d2:06:d5:0a:fb:0f:
b6:81:39:f1:6b:a4:84:4f:4b:55:59:6b:c4:b1:f5:40:4d:73:
62:c8:28:3a:ef:0d:b7:7a:ba:28:f5:6a:90:8f:20:fe:ba:a6:
09:9a:d1:4b:b5:cc:2e:73:ea:e8:0b:98:46:16:17:22:c8:71:
a3:bc:58:bc:8d:b2:d5:68:71:37:9c:7d:fc:b2:62:83:40:06:
6d:da:11:b2:ea:56:ef:db:82:77:a0:ac:ce:61:a8:54:8b:cd:
85:5a:77:d9:07:44:3d:ca:6d:49:29:89:a2:74:d9:a9:07:26:
d7:ac:9a:e1:7f:b0:2e:e9:75:da:43:f1:f6:03:90:fe:f0:8f:
4a:f9:58:60:99:01:fa:9f:f0:4c:bf:4f:81:46:38:88:eb:a4:
b8:29:40:da:70:28:01:bf:e7:cc:eb:80:8d:be:7a:13:6a:c5:
d8:e0:b0:40:12:d1:39:fd:54:0f:da:25:93:9b:b7:3c:a7:16:
b1:9b:64:c8:13:6c:b3:73:8d:d2:5f:d6:3d:85:e0:d6:4e:b3:
3f:bc:80:0b:88:b7:9c:7b:84:e1:53:f3:f7:d2:d7:ab:34:27:
62:7a:b0:a2:b6:9b:5f:54:d1:a1:37:8d:8b:59:f7:14:bd:71:
e5:97:fa:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:40 2025 by rpki-client