
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
File: I-Ivi97cvhm7M_zhT8HbauOkDpA.mft (raw, json)
Hash identifier: HsNmV674sgPRDrf4xI31lDDfaYbNl9dKgeSpXeu+GoA=
Subject key identifier: C5:9C:96:CC:36:E1:A8:44:05:21:0A:41:FD:09:84:A3:0A:30:1A:EC
Authority key identifier: 23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
Certificate issuer: /CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
Certificate serial: 0199FCC652D5111D74B05B4E19451D0B1846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 14:01:19 +0000
Manifest this update: Sun 19 Oct 2025 14:01:19 +0000
Manifest next update: Mon 20 Oct 2025 14:01:19 +0000
Files and hashes: 1: BSo6esZVhXizhr6rXIY91M7Ycb0.roa (hash: rDl9FCgKvio+Um9dNVGYTCS6mmU9eKk7X7/TBLZ4IMU=)
2: I-Ivi97cvhm7M_zhT8HbauOkDpA.crl (hash: 41tQusI/4Ijz07YptpJcIxGTUKuPYUQo00lYI+2HBwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:52:d5:11:1d:74:b0:5b:4e:19:45:1d:0b:18:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
Validity
Not Before: Oct 19 14:01:19 2025 GMT
Not After : Oct 20 14:01:19 2025 GMT
Subject: CN=c59c96cc36e1a84405210a41fd0984a30a301aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:18:60:db:4f:c8:7a:22:45:00:7c:97:21:
c9:1b:69:df:9c:4f:8b:a9:78:70:b4:39:4f:ab:a2:
0a:72:e3:31:90:1c:9f:92:f6:4d:91:e0:8f:81:78:
9c:d4:39:94:8e:32:fe:6a:2d:60:64:a1:85:9e:b8:
97:08:a4:76:5e:5e:0b:5e:24:b7:ca:a4:f9:57:5d:
7d:8f:f5:04:02:85:c1:59:de:1d:d3:fb:0d:94:7c:
55:0c:76:8a:cc:de:11:71:75:a4:f1:15:f7:d6:97:
0a:d6:66:fc:76:2d:75:ac:b5:40:83:b1:b7:ed:72:
b4:8b:1a:3f:53:14:54:3a:0b:d7:e9:93:de:f7:8e:
f1:bd:72:24:da:1a:2c:25:88:96:fc:15:68:6a:49:
b9:30:73:4b:b2:79:f3:5b:c3:f4:cc:91:eb:ee:71:
42:ba:45:9d:28:b0:b0:1d:0c:85:88:b2:b2:d8:c0:
15:f6:9f:e6:d3:bd:5f:26:88:a3:04:f2:ba:8f:87:
66:fb:34:e4:16:a4:29:59:dc:6c:91:f4:b4:b3:9b:
b6:2a:e4:b1:35:a6:da:58:fe:ba:91:8d:7c:44:15:
86:41:1b:79:66:99:f4:ec:c1:0b:b0:83:e3:04:b4:
5c:35:d2:2b:d9:b6:75:6c:5c:df:73:46:21:89:e1:
07:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9C:96:CC:36:E1:A8:44:05:21:0A:41:FD:09:84:A3:0A:30:1A:EC
X509v3 Authority Key Identifier:
keyid:23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e4:b7:eb:0e:c7:e1:ed:8e:68:82:4a:62:c7:f5:3f:78:ff:
e6:0a:05:d8:ae:bb:66:d0:4e:c6:cc:90:7b:c3:49:3d:29:c8:
3b:85:99:d4:a1:67:2d:38:6b:37:09:4c:80:ed:31:c4:33:f3:
bc:ba:0b:ee:f9:16:5e:51:9a:4c:5e:e6:f9:5d:80:ea:b2:a8:
44:ff:3d:ce:37:ca:16:45:bb:a3:f1:5b:f2:51:c9:f8:bd:f9:
5f:3c:5e:d9:58:ff:6d:57:33:a1:5d:2a:48:7c:60:df:2d:d7:
be:c3:d0:63:57:60:f4:b3:9e:e4:ae:30:3f:09:c2:40:ed:80:
a5:63:22:61:3f:b0:2e:58:a8:ea:f8:3b:11:42:18:65:94:8a:
1f:40:01:19:fb:43:44:46:e7:48:d9:77:ef:0d:e6:35:6d:25:
fb:48:b8:6a:e8:d1:73:e3:4c:07:af:d3:44:49:04:00:d8:46:
fe:cd:9b:dd:31:bf:8c:51:0e:eb:97:56:01:9d:01:31:33:a3:
d2:62:18:10:26:54:c9:24:89:3e:2c:ba:d6:ad:fc:ec:1d:f8:
5f:14:12:09:1d:a1:77:f9:d1:c1:66:38:e6:c2:f5:72:b6:0f:
3d:e7:a2:8e:a0:f2:e8:a5:c5:42:7d:aa:de:79:32:7f:00:60:
38:16:41:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:46:50 2025 by rpki-client