Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
File: IURHLRaXNp2DK6Em5eFyMqzV9fM.mft (raw, json)
Hash identifier: 9k0T4mRTj1Dt3/lDUA/m6gVbSMGU42GuDz+xxHUDv1g=
Subject key identifier: 1B:EE:51:27:C5:58:A7:52:B4:B6:D7:8D:03:8E:E1:B6:97:DC:75:F5
Authority key identifier: 21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
Certificate issuer: /CN=2144472d1697369d832ba126e5e17232acd5f5f3
Certificate serial: 0199FB7CE30D479ED8D2B2C43CC748FD0A2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 08:01:29 +0000
Manifest this update: Sun 19 Oct 2025 08:01:29 +0000
Manifest next update: Mon 20 Oct 2025 08:01:29 +0000
Files and hashes: 1: IURHLRaXNp2DK6Em5eFyMqzV9fM.crl (hash: d8kLqQDIaODm1DNxTk2xtsoWSJI2DsQPeEiP+VQHIBE=)
2: jxP3zWsY1gZpCGxBiysaY7EpSc4.roa (hash: 8YozH8Bcb75tXVAEGcttViIiDw3bZdzWBPyjFnX3Zdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:e3:0d:47:9e:d8:d2:b2:c4:3c:c7:48:fd:0a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2144472d1697369d832ba126e5e17232acd5f5f3
Validity
Not Before: Oct 19 08:01:29 2025 GMT
Not After : Oct 20 08:01:29 2025 GMT
Subject: CN=1bee5127c558a752b4b6d78d038ee1b697dc75f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8a:fc:7a:46:bc:96:3c:13:cb:5b:90:40:32:
1c:6f:64:6f:36:88:06:9d:d5:d9:9d:02:09:fa:1b:
ab:01:61:7c:9f:13:94:c0:b7:45:9c:d3:e8:1f:4e:
44:64:40:09:15:ef:08:52:44:f2:7a:e2:dc:44:03:
98:fe:3b:da:72:f1:fa:86:6b:ac:27:4b:29:18:6d:
55:14:12:bb:c5:14:be:eb:85:76:54:aa:5c:6b:8a:
31:58:7d:b5:91:33:27:5b:08:28:a9:5d:3c:2c:4e:
94:1a:2b:a9:b3:ba:c2:aa:72:4a:3b:33:79:e9:ff:
42:aa:ef:a3:96:ec:39:83:9a:6d:b7:c8:a5:81:90:
bf:52:f3:6a:0f:c1:c7:20:2d:0f:15:b3:26:2b:cc:
93:2b:62:41:00:36:11:33:7a:d5:67:76:82:82:ae:
80:56:62:d3:ea:12:9a:e8:8b:f7:08:50:8b:67:e4:
7e:49:57:a6:d6:75:ca:eb:9d:cb:bc:8e:2e:78:dc:
32:92:2c:62:5d:2a:ae:6a:b9:38:26:8d:7e:6d:45:
c1:a6:d3:0f:52:13:be:df:9c:00:be:24:65:4e:bb:
f9:0b:a5:60:ab:c3:b8:88:68:f1:60:ff:bc:32:8e:
c9:32:7d:09:87:8f:78:4b:00:dc:6a:01:87:b9:23:
cb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EE:51:27:C5:58:A7:52:B4:B6:D7:8D:03:8E:E1:B6:97:DC:75:F5
X509v3 Authority Key Identifier:
keyid:21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5b:b5:43:83:fa:72:25:18:82:5e:36:37:0c:ea:e6:a0:d9:
62:f1:1a:ac:e1:45:67:59:89:94:cf:2c:e1:04:35:e7:97:85:
fb:b6:9b:49:28:89:85:95:30:0e:d1:f6:70:1b:a4:0c:bb:1b:
3b:18:e6:9c:f7:5c:8a:02:56:fc:7d:bd:55:c1:67:08:c0:9a:
91:92:3d:4f:7f:49:6b:f5:7f:dc:71:ff:31:49:48:0e:9a:f5:
79:96:f0:4d:4d:e6:51:84:ac:59:05:e9:98:ff:a0:76:57:d1:
a4:33:3e:9f:cc:ce:9c:a0:35:bb:3f:ac:22:f8:75:8b:28:7f:
18:f6:0f:4c:1e:5c:73:d0:a4:c4:d6:f5:05:9c:f7:d8:76:41:
c6:63:d4:cd:15:bf:d2:e9:d2:4a:63:be:88:dd:34:30:20:6e:
c0:93:fe:0d:9f:70:e6:0a:53:4f:13:3e:b9:2e:20:99:bc:60:
ce:8d:56:c5:6c:b2:48:15:f5:85:1d:53:09:47:04:bd:a9:90:
17:c4:69:d6:3b:5a:e6:0d:73:9c:69:f0:11:59:ba:78:7c:bc:
95:a2:fd:be:3f:a2:08:2f:19:46:bd:89:85:ef:bb:c1:d0:fe:
10:1b:fe:c5:c6:f4:58:87:8b:fb:c0:93:1c:97:a0:6d:82:65:
52:b4:42:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:55 2025 by rpki-client