Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
File: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft (raw, json)
Hash identifier: fhttmwp2ppdGMlLaFS+jkELjDHcxv2qQEGoDzFPmNr0=
Subject key identifier: 22:BC:4D:CE:25:8E:54:86:AF:CE:84:C1:A9:F9:C2:58:F5:2B:FA:A4
Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
Certificate issuer: /CN=21a00080cd2cb1bb073903b32b25ad660a366486
Certificate serial: 0199FC214BA83EED4B73248833FA5A843036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
Manifest number: 15B7
Signing time: Sun 19 Oct 2025 11:01:04 +0000
Manifest this update: Sun 19 Oct 2025 11:01:04 +0000
Manifest next update: Mon 20 Oct 2025 11:01:04 +0000
Files and hashes: 1: 1KLC3gBk4V8UlL1q34VPnUxHzZY.roa (hash: PpTqyE9jhdplaM4jeC6bew/Mkzc7lRGupafDYfql5k0=)
2: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl (hash: QiU3KyUC+tQA18XRrap/6ixIdzMPfuk5CRGZzayc0H4=)
3: QdEJ7zpCJnQlkbu72Bn_JyCb_EM.roa (hash: uicaL7GuC1Mghzq3VpHhej/MKa/9KriBzrxlFVoCpcc=)
4: WylnrO-wU58E26AefCAQ7nrb79w.roa (hash: y1OWdCLTeRgES3w6dtbyOUz1ZW2NZGMx2qqGlzUOOl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:4b:a8:3e:ed:4b:73:24:88:33:fa:5a:84:30:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486
Validity
Not Before: Oct 19 11:01:04 2025 GMT
Not After : Oct 20 11:01:04 2025 GMT
Subject: CN=22bc4dce258e5486afce84c1a9f9c258f52bfaa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cc:17:5e:1b:3d:c4:1d:e8:a2:07:22:81:e5:
e2:57:90:64:20:8b:5e:a1:55:6e:c3:70:e8:2e:36:
27:aa:bb:ff:46:09:a3:d5:5b:45:2f:08:e0:e0:9b:
98:02:bb:29:46:39:b6:34:1e:b5:60:ce:ad:e9:68:
2c:94:ae:94:1e:3f:1e:e0:f0:40:61:84:42:4c:fe:
ff:b1:3b:6d:9a:66:8e:df:12:4e:1f:e9:c1:ce:9f:
d2:fe:d3:23:e7:dc:4a:28:2e:51:41:02:ae:dc:d8:
18:ac:b1:33:00:90:ab:8c:56:9d:5c:39:80:ac:fe:
a5:d7:ea:1d:86:84:68:7f:9a:46:50:13:fb:0b:34:
06:d7:43:53:2f:92:7b:3e:8a:e8:db:c4:51:d5:a5:
3f:21:e1:f4:56:c7:0f:1c:cb:54:c0:86:bc:0d:3b:
f2:da:f0:70:89:fa:65:a3:e9:d9:ea:1e:63:0e:80:
73:e0:76:50:dd:47:4c:60:95:f9:70:03:99:c5:27:
cc:f2:85:f5:b4:4d:a2:fe:bf:7d:1a:6e:de:09:9b:
05:c2:71:13:79:f4:8f:27:53:b5:fb:f6:9f:53:d0:
c6:91:5f:cd:4d:cd:00:0c:e7:86:16:12:44:18:c0:
b3:8d:b5:5f:f0:65:b0:2a:c2:9f:e2:fa:1f:84:23:
9a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BC:4D:CE:25:8E:54:86:AF:CE:84:C1:A9:F9:C2:58:F5:2B:FA:A4
X509v3 Authority Key Identifier:
keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:42:0e:2d:ed:a5:dd:a6:37:6b:a3:2c:42:b9:21:4d:97:c1:
19:98:c4:92:3c:da:5f:c8:25:73:fe:76:ad:a4:cf:26:d1:c6:
36:39:3a:da:18:2c:4e:f1:9a:01:15:b5:97:99:2a:fc:de:58:
67:5a:bb:29:2e:20:ce:18:89:19:10:25:6a:f4:ae:cc:a6:4a:
76:ec:00:b1:dd:5e:38:b9:a0:eb:3a:62:3c:58:39:f4:ae:a4:
52:47:2e:67:a2:e0:d9:b9:16:53:f6:dc:3b:c3:c1:81:a1:f1:
1b:09:b5:8b:f7:f0:27:85:56:ed:0e:42:08:90:7f:f7:d0:8d:
d0:b3:53:30:b1:00:0e:de:26:d4:89:9d:47:3f:69:18:59:10:
d1:d9:53:fc:e8:b8:6e:19:31:94:ec:dc:22:b1:f6:29:41:b6:
25:fd:30:e3:a9:2e:6f:ca:06:21:40:cf:50:2e:64:d1:70:b0:
63:1f:c0:78:67:03:b5:9f:48:ae:56:d4:a9:96:32:23:96:45:
2d:f0:39:f2:9a:63:ac:99:2f:98:21:c3:d6:64:4e:b3:23:f4:
a3:37:7c:49:0c:10:0a:3f:68:7f:59:f7:6f:af:e1:7c:d1:f2:
d3:8a:74:13:eb:40:2e:2b:b3:2b:06:22:c1:15:83:01:d8:e9:
37:dc:c3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:21 2025 by rpki-client