Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
File: Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft (raw, json)
Hash identifier: sVJ0OsOyqp1kWD3MUbrT0bDcZVEyQRPkUW7SFHJghE8=
Subject key identifier: 42:59:81:34:EC:74:48:DB:49:66:77:FB:3A:7C:3A:D1:A2:AF:32:CD
Authority key identifier: 26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A
Certificate issuer: /CN=262f7322fbe9743eb471383a090b35b5296a2a8a
Certificate serial: 0199FEEBAE7872418137EB85293E0B354831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
Manifest number: 10DF
Signing time: Mon 20 Oct 2025 00:01:22 +0000
Manifest this update: Mon 20 Oct 2025 00:01:22 +0000
Manifest next update: Tue 21 Oct 2025 00:01:22 +0000
Files and hashes: 1: BQ2_9-ItF5dIDSCPAfxbIaGC5hA.roa (hash: +G1ycNpVwWYjvSoa5pj4YTiRmj97XRdNfodhiBjoJD8=)
2: Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl (hash: R8ankDLb/D8Dzc8bCjTcXikW7NiftYNDPu33dikE+j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:ae:78:72:41:81:37:eb:85:29:3e:0b:35:48:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262f7322fbe9743eb471383a090b35b5296a2a8a
Validity
Not Before: Oct 20 00:01:22 2025 GMT
Not After : Oct 21 00:01:22 2025 GMT
Subject: CN=42598134ec7448db496677fb3a7c3ad1a2af32cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fd:59:b0:2f:9b:68:38:3e:88:4d:26:22:d1:
b2:53:d7:fb:2b:c0:25:6c:27:bc:96:9a:8e:db:57:
d5:9b:3d:da:5f:dd:3a:30:32:d0:47:58:59:6c:5c:
6b:3f:27:ef:c1:3e:2a:56:de:8e:5f:80:27:57:cc:
62:c2:62:08:c0:f4:56:9c:d9:eb:fd:f8:e2:c1:7a:
3a:d6:51:27:9b:e6:6b:15:b1:50:e4:9b:4a:7a:f1:
f5:c6:f2:b9:a1:50:8d:82:4f:fd:8f:26:2d:9b:6c:
93:09:8d:cc:44:d6:56:b6:25:6c:65:74:14:46:0d:
2a:7e:c0:43:f7:1f:28:5b:29:55:1e:5f:0d:77:ff:
ca:44:f4:34:f3:1a:af:55:64:04:d5:0d:ef:9f:01:
80:8b:8e:e7:05:fc:7a:3c:78:68:d7:0f:22:fe:ce:
12:c2:65:5a:ac:93:1b:b0:ec:55:39:d9:3e:a9:d6:
9e:ba:50:48:95:a7:60:af:f9:eb:1d:d1:53:b1:fb:
6d:ca:4a:63:4e:2d:ef:40:dc:36:85:16:f3:34:b8:
c7:05:96:91:56:5e:2f:58:1e:44:6a:38:5b:44:5b:
08:03:59:4f:e7:3f:42:65:b9:db:7f:60:1d:80:bd:
9e:04:f7:54:1e:49:19:f8:be:2e:a5:a1:3a:0b:42:
c1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:59:81:34:EC:74:48:DB:49:66:77:FB:3A:7C:3A:D1:A2:AF:32:CD
X509v3 Authority Key Identifier:
keyid:26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:3f:24:3b:cc:73:91:fd:f1:77:2e:72:02:64:0d:04:c0:e9:
4a:30:45:f9:7c:f4:f3:17:55:bc:9c:d5:f1:4e:73:f8:f6:33:
ce:50:e8:3c:f1:46:94:45:27:38:e2:58:4d:e2:2e:cf:ea:a9:
26:22:d4:79:cc:f1:20:ce:aa:0e:5f:09:e7:bc:17:10:93:8d:
4d:da:d8:2e:bf:74:fd:50:8c:fc:77:57:1e:b3:57:e8:40:7e:
7f:10:7f:2d:d1:3c:58:a7:c7:45:af:73:40:ee:a0:12:21:66:
c9:d0:a9:f7:19:b1:c9:7e:bf:bd:14:aa:a4:fc:c7:72:60:43:
57:fd:85:7f:5f:33:1b:be:39:0a:7c:38:9d:33:85:18:25:19:
8d:76:1d:e7:22:c2:5f:d3:2c:87:02:9d:cc:65:a7:dd:2d:76:
bb:9c:ec:f8:51:8a:04:ea:ef:b0:e7:49:19:57:72:80:3b:92:
a2:f2:07:84:9e:f3:1b:e6:bf:bb:8b:72:53:11:52:b9:bf:3d:
13:01:31:08:c3:58:28:1b:74:af:42:e5:31:82:f6:cc:b7:20:
00:d2:e6:82:fe:bf:4d:4f:fc:b8:cc:2a:ce:9f:11:4d:a8:8c:
2e:24:32:35:33:57:f5:b1:66:2d:48:ba:d4:73:f3:18:f4:ff:
0c:8a:a6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:24:54 2025 by rpki-client