
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
File: I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft (raw, json)
Hash identifier: h+fnYpLNcVsXADXCXLvbQXIsCxSKoEloumIY4TD0a/c=
Subject key identifier: 62:17:B2:A3:1B:37:0E:AB:83:98:3A:DC:6D:F3:00:E6:18:70:CA:AE
Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
Certificate issuer: /CN=237c83447d17183380f489bc946c8b9e300ffb1d
Certificate serial: 0199FE0FC452BB89080A773C4FE8F110B9EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
Manifest number: 141A
Signing time: Sun 19 Oct 2025 20:01:10 +0000
Manifest this update: Sun 19 Oct 2025 20:01:10 +0000
Manifest next update: Mon 20 Oct 2025 20:01:10 +0000
Files and hashes: 1: I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl (hash: S8N4187SLA/5EClVqPZn8mq7hpK49IdhyYGG8HWu/LQ=)
2: dQiPhvfLmWkjHMDaDZ-gEA5vKsA.roa (hash: Apxi4HVF9cbEKfl01+GMULsLDvfabVWHAPxCuePrSkA=)
3: dkb5gZIob1tpW-aZ36OG6g6eqVg.roa (hash: 6qmzftK2St+wbMPcDJN5VBpBK/rYP12e7Qen5uHlL/g=)
4: mgi-sHB9BvG_JhGVaolwV53PdcI.roa (hash: Mp5ienel094fK7II/BeJb819aKnF3b9Sr1dy+H9Nl2U=)
5: rU_QoTqJF9XgZ3vTYq0OTybZfSI.roa (hash: kAqEU3AZtb+qAVPxKeiCoJPu2fI++dhercqPaQVS1jY=)
6: vAX6cMjo8la6961Io6NKSibrpLs.roa (hash: QGc4CY1otQW+SDtxZLvjRsQAMwHLQ4AN0c1HPwQX50Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:c4:52:bb:89:08:0a:77:3c:4f:e8:f1:10:b9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d
Validity
Not Before: Oct 19 20:01:10 2025 GMT
Not After : Oct 20 20:01:10 2025 GMT
Subject: CN=6217b2a31b370eab83983adc6df300e61870caae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f6:32:75:67:b9:55:90:1c:b4:82:d8:7b:78:
2d:72:57:17:12:fc:91:30:a4:57:0a:94:e6:74:d6:
4e:d6:aa:c0:c5:3a:3b:51:3e:73:56:b2:65:76:3e:
ac:2c:8a:14:c4:6f:d2:cb:af:0b:3c:46:a4:24:c1:
60:78:68:f7:c5:08:e9:59:37:c7:bb:42:67:21:8a:
74:94:2d:57:4f:7e:d4:ea:69:5e:b1:d4:e7:ca:72:
a7:34:3f:42:62:26:de:d0:f2:d5:bf:9c:6d:de:9f:
75:4c:dc:2c:4a:c2:27:9e:7c:87:99:86:59:28:83:
17:ec:96:d5:f0:28:73:9e:f1:87:23:85:01:c6:d5:
96:38:27:23:5c:8d:fe:45:59:45:ee:84:a4:5f:07:
8f:3d:a2:d3:40:15:68:14:9e:ca:dd:61:93:79:55:
f2:79:fe:8b:53:10:03:b7:b1:67:30:e5:92:83:1c:
11:6d:25:5e:20:c2:76:b5:f6:b1:0d:c6:f0:f3:e3:
30:72:4f:ac:11:58:33:ef:3e:9d:e8:f0:94:4a:3a:
5d:12:af:56:f1:5f:5e:8e:b3:36:93:4e:1c:69:62:
ae:99:86:fe:37:bd:ac:d8:21:d5:e7:01:05:0d:01:
d3:2d:8e:29:24:b4:f3:9c:13:8f:95:ab:54:9c:b3:
47:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:17:B2:A3:1B:37:0E:AB:83:98:3A:DC:6D:F3:00:E6:18:70:CA:AE
X509v3 Authority Key Identifier:
keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f8:88:04:03:b3:02:53:ac:94:af:76:6f:8b:de:ee:d0:45:
02:16:5b:90:e8:c6:26:50:3f:6e:12:75:03:e9:7f:31:6f:ab:
25:a5:fa:57:d4:89:38:3b:41:59:ed:78:1a:db:91:66:32:b1:
50:db:ea:83:92:45:00:6b:34:14:00:8e:0b:0c:ef:07:7e:5b:
4b:d6:f7:22:b0:f8:89:f1:a5:9c:28:1f:2a:29:bd:29:4d:f9:
d4:72:56:f4:34:6a:97:1d:b4:49:d3:cb:ea:1f:69:35:fc:2e:
aa:0c:9d:9a:7d:f5:c5:1c:2a:9e:53:ef:22:a9:a3:1c:78:9b:
a3:a0:7e:95:16:43:05:30:6e:5f:60:5f:87:6d:6e:1d:42:f0:
f9:c1:06:ab:c8:ec:73:c6:b2:3b:14:99:10:5c:08:8b:06:e6:
05:e3:0b:23:f2:3a:33:50:df:2d:8f:56:fe:99:96:b8:a7:83:
35:c2:fc:66:de:bb:e0:e7:d7:50:b6:2c:4b:6f:2a:de:98:4a:
b2:a3:6c:20:0e:b6:4f:01:e1:e3:95:60:d9:cc:ac:bc:2e:77:
09:09:a6:c3:3d:c4:4e:de:ed:b2:0c:24:62:6e:9f:8a:ff:82:
ee:8e:cb:db:95:a3:14:25:8e:8d:c3:40:d8:11:28:82:48:9f:
c2:25:c1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:02:17 2025 by rpki-client