Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
File: I9SAsHlWF-Libm4YJkN356lsePM.mft (raw, json)
Hash identifier: HCakAcrsTDwYFAyyRQrtFFi21Y3k+DPr0Bplc0q5Q4I=
Subject key identifier: D5:8E:C7:DB:70:DA:7E:9B:31:31:B7:E9:4A:92:21:F4:65:01:66:F9
Authority key identifier: 23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
Certificate issuer: /CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Certificate serial: 0199FF224B197D2FD616C226DA1132A7D983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
Manifest number: 156D
Signing time: Mon 20 Oct 2025 01:01:01 +0000
Manifest this update: Mon 20 Oct 2025 01:01:01 +0000
Manifest next update: Tue 21 Oct 2025 01:01:01 +0000
Files and hashes: 1: I9SAsHlWF-Libm4YJkN356lsePM.crl (hash: 9hbAYSCsccktL1MwXDKaaCKuFIxBk3OKjb5fjwfHBGg=)
2: i2GfKnioIrK4DFco2liFl7JEt9U.roa (hash: Ib8ibm5kzCYxk8mp5/206nEi8+cY3/XjnCkQAxAJBU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:4b:19:7d:2f:d6:16:c2:26:da:11:32:a7:d9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Validity
Not Before: Oct 20 01:01:01 2025 GMT
Not After : Oct 21 01:01:01 2025 GMT
Subject: CN=d58ec7db70da7e9b3131b7e94a9221f4650166f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:43:2c:27:64:58:af:a8:f2:08:6d:47:55:8d:
63:b2:42:a8:58:1a:ac:90:f9:6d:2f:da:14:f9:81:
bd:85:9d:33:b1:d0:f6:82:f5:7b:74:fb:49:12:31:
20:cf:6a:61:70:0d:3c:b5:45:23:05:8e:5b:f9:86:
40:eb:57:5a:0e:7f:f3:b6:f4:69:27:05:15:b1:29:
eb:b9:32:e5:1f:23:a2:a5:62:21:1f:e1:07:33:96:
1b:f5:e8:4b:5d:f7:be:10:7d:99:c9:b9:15:c8:1b:
d9:55:f2:7c:af:20:7c:f8:73:7f:f1:06:cd:ed:e8:
84:cd:74:50:71:9d:96:5d:f4:a0:f1:6b:f3:49:8e:
03:23:2e:c6:fc:e8:c1:c4:0e:35:90:17:03:f2:c2:
fe:9d:96:b9:2e:40:3a:24:a4:93:a1:00:fe:d2:fd:
4f:01:e4:54:14:5c:a3:d7:37:d1:38:89:5f:98:2a:
09:fa:a6:b7:1c:e0:72:fb:b7:7e:61:c0:64:a2:6b:
ad:56:bf:89:b2:bf:e2:41:47:fd:5a:5a:41:57:ac:
a1:ea:4c:ea:3a:3d:36:23:22:88:56:e7:43:32:a1:
16:00:cf:76:ba:f5:ed:9a:58:3e:c7:f6:dc:2d:ff:
4c:3a:e2:a8:9d:e0:1f:82:95:62:ff:fb:ea:d3:59:
4e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8E:C7:DB:70:DA:7E:9B:31:31:B7:E9:4A:92:21:F4:65:01:66:F9
X509v3 Authority Key Identifier:
keyid:23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:75:40:41:41:81:fd:f8:39:b5:51:a9:c3:76:17:15:71:ab:
d1:76:84:bc:cf:b8:31:7c:fe:31:ab:47:82:4f:00:5d:7e:66:
37:67:f5:0e:a5:5b:34:ab:9e:35:83:27:f4:5b:48:a4:25:3c:
d4:ea:6b:e0:fb:5c:18:0f:54:75:6d:2d:9e:64:6d:d3:c1:dd:
cb:c8:58:3b:29:b3:90:d5:48:2c:ec:c4:f3:78:61:f5:33:da:
da:01:27:1f:1a:0c:42:7c:8b:00:f1:20:24:80:ff:27:28:7e:
a0:f9:ef:63:6a:94:98:ec:be:12:ab:6f:3a:c3:9d:f5:5b:16:
b2:1e:04:09:4f:27:3e:39:95:1c:76:c9:8c:3a:d6:fd:97:ba:
18:49:30:a7:a3:9c:e1:32:72:bd:b6:36:96:00:a7:cf:bb:93:
c5:af:91:da:77:0e:63:14:ad:f3:09:6d:3f:cc:56:a2:c0:6f:
61:a3:c0:80:f3:39:ac:af:61:f4:6a:b8:45:d0:d5:2e:c3:f3:
df:33:21:c7:b2:63:ff:4d:96:e8:6b:c5:d6:91:dc:cf:e0:80:
22:90:d3:01:1b:e4:1d:72:fa:d8:44:ea:a9:02:77:04:d7:83:
db:1f:4d:99:49:fe:ba:28:b6:40:33:de:80:bd:d7:a0:52:26:
75:60:c3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:27:23 2025 by rpki-client