Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
File: IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft (raw, json)
Hash identifier: bi5MMpkFYobWsyEXzh64MXERnvafZik81eEVivHo3nE=
Subject key identifier: C7:0D:CA:19:95:FC:2C:B5:DF:71:D3:36:32:1A:B6:EE:1C:3E:7C:56
Authority key identifier: 20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
Certificate issuer: /CN=205945443c5b25e4dcf6203f061ac04d36871554
Certificate serial: 0199FAA0B94BF663DAE4D72096AA8F8D563E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 04:01:01 +0000
Manifest this update: Sun 19 Oct 2025 04:01:01 +0000
Manifest next update: Mon 20 Oct 2025 04:01:01 +0000
Files and hashes: 1: IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl (hash: S44N7fQhBFnFY9oR8e4XrylCrwVgMNDlnOekc74rBC0=)
2: vwwOJsNwZhQ7jXxQBO6C3CzaqW4.roa (hash: PgsS8twf0GYuOEotT5Wskvo1GlMh/1Ykh+edTuYgZgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a0:b9:4b:f6:63:da:e4:d7:20:96:aa:8f:8d:56:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=205945443c5b25e4dcf6203f061ac04d36871554
Validity
Not Before: Oct 19 04:01:01 2025 GMT
Not After : Oct 20 04:01:01 2025 GMT
Subject: CN=c70dca1995fc2cb5df71d336321ab6ee1c3e7c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ba:48:97:e5:4a:cf:9a:c1:34:55:9c:c0:08:
01:66:56:8f:c1:cc:b6:5f:3a:c7:df:27:4a:9b:3b:
40:7e:77:a1:a0:cb:b6:e4:17:9a:59:7f:65:fa:ad:
85:83:21:45:44:9d:07:4b:01:f0:ef:b6:62:2a:7d:
c2:7d:00:9c:91:a9:3f:86:7a:16:ca:be:e1:bb:9a:
e4:2e:75:59:9f:9c:34:d9:0e:61:78:9a:76:7e:81:
88:4e:95:86:b3:b3:14:46:86:5b:43:0e:b0:8a:cd:
58:dd:98:9d:0d:2f:64:fa:80:f8:7a:7f:65:35:c0:
01:17:7f:2f:a1:94:e6:8d:36:59:59:05:14:c5:75:
14:73:9c:35:81:9b:cf:2d:5b:50:ad:4c:f5:e0:59:
6e:f0:3a:b6:a0:00:7a:e0:4d:f8:d2:cf:e7:9c:21:
b5:e5:7d:43:fb:ee:a6:46:ba:5f:8f:77:42:f7:94:
e8:7d:71:38:3b:af:bc:e4:e8:44:24:db:8d:4e:46:
6c:a1:c9:73:0b:00:f3:f0:21:a2:ab:bc:cb:6c:f4:
3b:db:1a:42:52:0e:f3:43:af:59:78:bb:59:84:e8:
f2:7c:e9:1d:1d:15:07:93:9e:3e:9e:cc:cd:bd:6e:
6a:ce:bd:05:ce:f0:bf:d5:9b:b9:11:09:e0:fe:07:
9a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0D:CA:19:95:FC:2C:B5:DF:71:D3:36:32:1A:B6:EE:1C:3E:7C:56
X509v3 Authority Key Identifier:
keyid:20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a2:41:16:6f:e8:60:dd:a8:a3:30:01:e0:c0:4c:34:37:c3:
a3:9b:c5:c1:c2:12:f2:50:f1:2f:82:fd:f2:d9:55:45:63:6a:
fc:8e:94:74:1e:89:aa:53:e2:85:94:a1:fa:83:04:19:13:a8:
db:0c:0c:c0:29:36:e7:81:16:60:51:83:61:bf:ac:fd:09:e1:
3c:df:2a:c6:af:f6:25:28:40:c4:32:c8:42:b4:4b:3c:28:3b:
25:ae:2b:7e:e5:c1:89:82:ee:6c:4f:33:ff:98:46:68:da:c1:
32:c1:6c:33:5c:10:d5:31:9c:fe:e4:9a:5f:e3:cf:42:9e:e1:
27:86:54:9f:87:cb:d5:3c:71:fc:b5:a2:3a:dd:97:7b:23:cf:
50:f3:30:bc:d0:2f:9b:15:eb:79:58:64:5c:13:4d:26:86:ad:
6e:eb:73:3f:ae:76:e6:9a:af:d0:43:29:dd:c7:a5:c1:d2:ed:
63:d7:06:f1:58:4f:44:8e:6e:c3:f3:9c:85:fb:7b:5e:42:9e:
c7:8a:f1:9d:fe:ae:dd:b2:4f:f6:f1:51:6c:05:df:7c:1f:01:
0a:18:7d:c9:0b:b0:41:67:83:49:9d:db:a0:70:82:93:db:88:
e6:43:96:3f:bb:58:6b:2f:95:20:40:34:86:a1:bb:15:d2:5f:
e2:8f:9c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:52 2025 by rpki-client