Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
File: ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft (raw, json)
Hash identifier: 6x8ZTtPimmTGcNK6V7mQrprpFJsABuRDMkXf/7z1Mqw=
Subject key identifier: 45:52:BD:07:06:31:DF:B2:E5:83:60:7A:9D:61:77:EA:F9:46:E9:51
Authority key identifier: 8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD
Certificate issuer: /CN=8b19f3d7ffea957261501e91664ff6823ed936ad
Certificate serial: 0199FCFD21F279CE9BC4240E9E119B52A9D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 15:01:11 +0000
Manifest this update: Sun 19 Oct 2025 15:01:11 +0000
Manifest next update: Mon 20 Oct 2025 15:01:11 +0000
Files and hashes: 1: ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl (hash: 9XfoNAnsWJ1k7qSJOv8PrT2LltEJxa0eENAF7+hM84E=)
2: yIUv-9UBFSosZaxk_SAM-oPYWDg.roa (hash: A5HtFiQ3ZfwDO/6Fs5djNbIUq/3hrajgNOS9o/n1CuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:21:f2:79:ce:9b:c4:24:0e:9e:11:9b:52:a9:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b19f3d7ffea957261501e91664ff6823ed936ad
Validity
Not Before: Oct 19 15:01:11 2025 GMT
Not After : Oct 20 15:01:11 2025 GMT
Subject: CN=4552bd070631dfb2e583607a9d6177eaf946e951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7b:84:11:62:6b:03:0a:43:86:bd:28:d8:3d:
df:e2:f3:8a:9c:ee:76:a2:b7:36:a7:be:45:f1:21:
f1:95:1c:f4:37:ca:a3:b4:77:4e:71:df:5f:55:41:
03:1e:ab:61:ef:92:fc:a3:89:66:9c:3a:a2:a3:1b:
f4:5c:7d:55:22:3f:c4:a0:c3:55:1f:4f:e3:3e:cf:
11:3f:af:68:26:ce:49:90:db:37:4d:a8:bf:0a:e4:
e3:02:84:67:2b:4d:79:4a:3a:82:39:27:c1:43:ba:
d9:fb:64:e2:5c:0c:63:6d:e6:af:57:97:30:28:c4:
08:1a:c3:4a:79:29:af:1e:36:12:a2:81:d6:28:fb:
6c:ae:b4:7e:9f:bc:4e:7d:30:0c:2f:5f:72:d7:23:
df:8b:4d:dd:0a:17:45:5e:a8:3f:19:4c:ea:ca:7e:
19:b9:9d:68:cd:c0:9d:f2:fe:76:b2:56:7e:d2:97:
d4:36:9d:1b:cf:d9:b6:ce:85:20:4d:1f:44:8f:72:
93:93:7b:c7:c4:16:b6:dc:86:85:f8:3c:4c:35:e4:
ba:0f:7a:09:9a:31:df:d8:96:e0:f2:b1:69:a5:b1:
1f:12:de:6a:a2:6b:6f:b8:fc:a3:32:ef:0e:eb:ff:
7e:c7:8c:f5:01:69:27:7c:42:fa:13:da:06:ea:c1:
a1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:52:BD:07:06:31:DF:B2:E5:83:60:7A:9D:61:77:EA:F9:46:E9:51
X509v3 Authority Key Identifier:
keyid:8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:0f:32:44:ba:a3:80:dd:c9:23:a7:0d:c2:66:72:57:a5:bf:
e4:fe:c1:26:54:b9:6e:33:14:f6:34:01:4c:e9:a3:12:0b:83:
af:de:c4:13:61:52:be:72:c2:1a:04:91:b0:32:03:51:8c:d2:
99:f8:1d:52:23:eb:c4:67:35:ab:5e:45:6e:2a:69:df:ea:67:
89:ee:e1:da:3f:ae:a8:1a:d9:2c:60:70:ad:95:a0:49:ee:e5:
e7:c2:c9:de:dc:e3:12:5e:8b:cb:ba:87:e4:26:8c:9f:95:89:
5e:08:b5:2c:6e:4b:8d:6d:99:a6:11:0e:eb:36:28:ee:81:23:
26:a7:24:d3:28:5e:27:20:ec:5c:3b:f0:42:1a:a2:d2:25:2d:
ac:cb:31:36:15:72:18:21:79:4b:c3:17:9b:f9:e5:39:c8:62:
c1:91:60:33:13:68:59:05:d8:42:54:d3:37:66:82:ad:2f:25:
6b:62:4f:cd:30:5a:a1:8f:8e:64:11:18:d3:ce:e2:ef:86:7d:
3a:1e:8c:f7:d0:c1:89:e2:25:93:69:63:bf:df:b6:33:86:1d:
36:de:59:f2:ea:dd:8b:ea:63:ab:1d:cc:31:03:df:c8:8e:1d:
c8:aa:be:0a:29:cc:a7:67:1d:7a:3c:1f:a3:59:1b:96:f7:09:
62:af:92:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:34 2025 by rpki-client