Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
File: I6xIaAc5isHO7Akh0E1Amk9_R5s.mft (raw, json)
Hash identifier: koDMJLt0rXrpPTYPX4a/VoneCRYvDWmC/6QXL+onYrs=
Subject key identifier: B3:F6:DE:1A:B3:02:84:D2:72:15:56:FC:F7:5D:A6:61:30:0F:3D:37
Authority key identifier: 23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B
Certificate issuer: /CN=23ac486807398ac1ceec0921d04d409a4f7f479b
Certificate serial: 0199FBEB8532C7200F9BF34D5DD6618D4453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:02:20 +0000
Manifest this update: Sun 19 Oct 2025 10:02:20 +0000
Manifest next update: Mon 20 Oct 2025 10:02:20 +0000
Files and hashes: 1: I6xIaAc5isHO7Akh0E1Amk9_R5s.crl (hash: oAt8Rb02AVB8PrCFol/jC6bwJvZ4/9tJwUGHzwsEeok=)
2: bjCXA7rp-GRMTkdMkg_zXfKYrW0.roa (hash: FxnvNnw+IOeKtHJC0KTXpxkTr4pA05J6vavAi4HV2BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:85:32:c7:20:0f:9b:f3:4d:5d:d6:61:8d:44:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ac486807398ac1ceec0921d04d409a4f7f479b
Validity
Not Before: Oct 19 10:02:20 2025 GMT
Not After : Oct 20 10:02:20 2025 GMT
Subject: CN=b3f6de1ab30284d2721556fcf75da661300f3d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:88:f7:2c:d8:32:7e:a7:36:e4:c9:dc:e2:ac:
41:94:11:1c:97:c8:72:be:91:09:48:f4:b4:20:35:
7b:78:4b:f0:3b:9e:0f:43:5e:45:7c:4d:42:5b:a9:
92:04:84:b2:c4:30:72:98:5b:bb:5c:15:d8:c9:10:
63:d0:9c:24:24:34:67:ba:67:d6:2d:ec:a8:36:51:
95:e9:3a:d2:2a:95:ca:80:9a:02:14:b2:2a:7e:ee:
f6:39:da:97:e1:c1:d4:ec:57:6c:34:58:78:7b:cf:
e5:f7:8c:d4:f8:0e:5d:a3:c0:ac:4c:a2:64:25:f8:
e5:98:c9:87:2d:d4:78:e8:5d:18:05:e6:33:6a:6e:
19:eb:6e:ad:df:4f:2a:24:8a:ce:c5:df:68:d4:1a:
0b:7f:fa:d3:dc:e5:91:4a:63:34:b0:82:80:f1:cc:
60:ce:70:b7:07:d3:82:6e:2b:5e:d5:fe:51:2b:85:
38:3f:63:37:66:93:46:0d:93:52:9b:87:3a:26:77:
41:50:70:f1:4b:7c:39:92:1f:67:76:e3:ce:bc:51:
12:93:07:e6:12:ff:d6:9b:b6:20:b4:6b:f8:e7:af:
79:f5:78:1b:c0:b8:aa:ba:64:ab:ea:8d:2a:e2:b8:
78:4d:27:7c:ef:c2:3a:89:d3:81:f6:19:50:b8:f6:
16:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F6:DE:1A:B3:02:84:D2:72:15:56:FC:F7:5D:A6:61:30:0F:3D:37
X509v3 Authority Key Identifier:
keyid:23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1a:ce:48:8f:1b:94:fe:91:8d:0e:37:3c:e1:95:19:41:cb:
1c:62:25:ea:be:36:d8:80:c7:8d:a6:e1:4b:ae:a6:9d:6a:7d:
e7:c4:a1:27:76:5e:2f:ef:9d:82:7f:fe:8d:f6:a6:82:cb:b1:
35:7b:05:7f:7a:bf:12:1d:e8:fb:1b:df:c5:6b:f4:76:5e:23:
1f:1e:1a:e0:76:03:f6:83:03:bc:33:d5:5b:aa:a6:5c:78:31:
0d:42:fc:7a:0c:58:57:f7:7f:0f:e2:9a:39:f3:bf:11:8f:68:
25:9c:04:2d:7a:28:a2:78:bf:b2:5e:eb:89:70:a7:fa:74:c2:
d2:8d:aa:90:04:1e:4f:73:62:24:0d:c3:1e:64:ec:8a:b8:3c:
85:f3:95:2e:d7:ac:a6:58:0e:b3:76:73:99:b6:57:8a:de:2f:
c8:03:43:c1:5c:8f:61:34:6c:c8:2c:1f:28:ff:43:5a:e8:de:
cd:d4:9d:1c:d4:93:f2:d4:47:24:bc:cb:76:81:68:27:6f:0e:
b0:10:4d:84:a8:6f:53:08:df:f8:96:14:e3:95:99:27:85:73:
97:4c:3f:ae:d4:d7:5a:b9:4c:32:b1:c8:e0:40:28:67:c0:3b:
64:c1:46:60:a9:a0:31:c0:29:ef:c3:e1:bd:2b:29:86:52:22:
29:39:68:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:11 2025 by rpki-client