Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
File: IJejEXyhwdYpKuUpEbTwyk-OkBk.mft (raw, json)
Hash identifier: jKVmydhk+dRe5lAsm7sHw4SODSZM1lKXg2SKnVxD2B8=
Subject key identifier: 75:8F:80:E2:74:50:69:E4:4B:FB:A1:6A:A1:38:EF:74:B8:AD:1D:24
Authority key identifier: 20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
Certificate issuer: /CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Certificate serial: 0199FBEB85612E7DD458305F29BC1A4B8336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 10:02:20 +0000
Manifest this update: Sun 19 Oct 2025 10:02:20 +0000
Manifest next update: Mon 20 Oct 2025 10:02:20 +0000
Files and hashes: 1: IJejEXyhwdYpKuUpEbTwyk-OkBk.crl (hash: h33JFKLNyELe5nlwyqNDyTGQjO8ucdpj3H305AAgkRE=)
2: X26sGkQxHUd6ANya0fQeGbUaN2o.roa (hash: 72k/JceoXf+vjqY9cY+dmTPspA3n9C9nG7V6AU5QpNs=)
3: ph-_p4gT6KZB2Xgbs2zlGYIYtgU.roa (hash: 2iTmqWC/xN+Zadr2KJDlI5cxPwSqu9GxPi/bRx/hmlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:85:61:2e:7d:d4:58:30:5f:29:bc:1a:4b:83:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Validity
Not Before: Oct 19 10:02:20 2025 GMT
Not After : Oct 20 10:02:20 2025 GMT
Subject: CN=758f80e2745069e44bfba16aa138ef74b8ad1d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8f:b7:25:52:8b:01:e5:d4:5f:e4:a9:71:8a:
f2:cd:6d:4a:b1:e8:ea:7f:34:37:d8:1a:c3:06:d7:
89:96:28:04:ff:95:7d:46:94:5f:6e:a0:18:f8:d0:
da:22:87:fe:ee:d4:7a:c0:36:ea:8b:f6:c5:e4:01:
d9:ec:f3:39:32:16:69:02:89:55:fa:7f:d4:bd:97:
2d:90:6e:58:1b:53:fb:8d:c3:ca:62:8c:e7:50:5b:
c5:f7:5d:de:ba:61:7e:af:c4:2c:cd:75:f8:72:9f:
b4:80:1f:84:bb:1c:a7:9f:a9:a1:16:4c:f3:a8:0f:
b6:d3:c9:c9:07:39:c5:d0:cd:f4:ae:e7:0f:71:70:
01:21:cb:1f:c1:76:14:fd:c1:c8:0e:ab:65:a1:b2:
6f:8c:61:1f:f3:ac:06:c3:26:45:55:c0:9a:cd:94:
ba:cd:3e:a0:93:6d:9b:b6:74:45:bf:43:58:ef:0d:
4b:c6:d7:4e:5c:0c:24:7d:7d:ab:62:d2:01:84:88:
56:f6:ea:5a:3a:c7:63:3a:e3:65:ae:1a:5d:0f:ea:
ff:5d:aa:bc:5e:2f:cb:1e:71:f8:d3:7e:c3:7c:3b:
68:d4:a2:3a:65:b2:61:5b:18:06:de:eb:83:9f:08:
25:b3:0d:52:09:cf:aa:70:71:0a:8b:1d:5e:64:cb:
f0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8F:80:E2:74:50:69:E4:4B:FB:A1:6A:A1:38:EF:74:B8:AD:1D:24
X509v3 Authority Key Identifier:
keyid:20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:79:94:e2:32:44:d8:71:d3:c8:4d:0b:b6:02:fe:5e:be:5f:
f8:25:3c:52:41:a1:b7:d0:2e:d2:8a:b7:e1:59:d6:91:be:91:
11:70:ed:b2:0b:55:58:42:66:24:0e:3b:4c:f6:db:18:43:9d:
8b:09:ae:6f:ff:6d:73:5b:b5:f7:a7:fd:50:81:8f:47:2f:e9:
78:4e:eb:4f:89:77:1f:2e:2f:f6:2b:31:ad:0d:11:59:85:55:
48:db:02:0e:14:08:b7:7b:53:d6:ed:44:21:ef:8d:76:95:47:
2a:e0:b3:9f:bb:0f:fa:c3:f3:96:00:96:22:03:50:94:5b:22:
78:88:64:e8:af:64:61:0f:4c:cd:81:ff:87:ad:2a:3e:f3:a2:
1f:c7:74:0e:f8:1c:b1:1b:63:f8:f4:9b:3b:1b:ef:f4:f3:6e:
71:49:7b:ae:48:40:30:89:98:02:52:40:8d:7d:a4:22:df:7d:
33:b3:34:aa:c8:c5:1f:e4:9e:40:16:09:c9:fa:9c:43:08:f4:
b4:bd:27:67:f6:84:d9:ce:81:b8:96:f0:23:fc:24:15:7d:06:
19:19:cf:8e:73:92:a8:74:5a:aa:ad:37:84:fd:14:18:c6:25:
1b:23:68:0e:fb:19:d8:7d:82:27:c4:6a:63:99:0f:2f:1e:cc:
93:ce:51:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:45 2025 by rpki-client