Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
File: IVBgNbMswzrwWJxVvoSXdeksRpM.mft (raw, json)
Hash identifier: boWjJ1MVlY+Hgvrd9jGZtZ7H95YylOgPuTusRjAfLjM=
Subject key identifier: F7:A7:16:F3:E3:30:58:6B:CB:2F:5F:D4:68:93:15:02:C6:A1:1A:7C
Authority key identifier: 21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
Certificate issuer: /CN=21506035b32cc33af0589c55be849775e92c4693
Certificate serial: 0199FD34652B61273DF8F95FB0879BE0898A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
Manifest number: 13F1
Signing time: Sun 19 Oct 2025 16:01:33 +0000
Manifest this update: Sun 19 Oct 2025 16:01:33 +0000
Manifest next update: Mon 20 Oct 2025 16:01:33 +0000
Files and hashes: 1: I1R3to4OG_lNOOBtkQLneyBTnz8.roa (hash: FMbiRiL06k35Wxnm+65HlWTTvYTK4mOLvCtx0FDCwp4=)
2: IVBgNbMswzrwWJxVvoSXdeksRpM.crl (hash: UfemgYARVekfWLzziKBo6h+KzFq9/ZmmTtkwn/t+7bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:65:2b:61:27:3d:f8:f9:5f:b0:87:9b:e0:89:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21506035b32cc33af0589c55be849775e92c4693
Validity
Not Before: Oct 19 16:01:33 2025 GMT
Not After : Oct 20 16:01:33 2025 GMT
Subject: CN=f7a716f3e330586bcb2f5fd468931502c6a11a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:83:ca:7d:de:13:84:ff:4b:73:db:2c:c3:ec:
62:09:13:7b:3e:3d:af:27:6f:51:03:af:17:d2:71:
1e:2c:a4:dc:aa:53:49:b7:c5:fc:07:11:60:1f:53:
a8:99:a1:9a:13:5c:f3:7c:bc:a8:ae:22:04:82:00:
fd:ec:e2:9e:bc:2a:38:82:5a:68:50:a1:21:29:06:
f0:df:fd:46:ab:cf:87:d0:06:ed:1a:ff:ef:a5:da:
b7:31:71:28:3d:ba:94:e8:32:dc:26:df:40:0b:46:
b8:f0:4d:d1:29:fc:c4:7a:e4:db:df:12:e1:87:49:
3f:e8:40:8b:a0:13:d2:e0:d2:5f:fc:de:df:78:c8:
5f:08:91:40:02:e7:3c:f0:36:54:9d:5a:7a:31:a2:
9f:7a:f5:16:90:b7:a0:6d:ce:60:86:95:3b:4d:f3:
7f:17:4b:10:7a:c3:98:7f:37:60:43:fe:45:8b:00:
05:5b:d0:32:9a:2b:22:8b:36:ca:5d:7c:74:24:fc:
6f:9e:81:d4:06:17:eb:a1:fa:da:a2:22:f5:29:f5:
1d:6f:a3:3b:f3:ce:15:28:b4:65:17:76:eb:e5:98:
fa:07:3c:1e:cb:81:4f:e5:be:57:ef:1b:65:6b:a9:
a7:45:cf:cb:e2:63:2c:4d:cd:01:a8:c0:c7:f0:fc:
3a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A7:16:F3:E3:30:58:6B:CB:2F:5F:D4:68:93:15:02:C6:A1:1A:7C
X509v3 Authority Key Identifier:
keyid:21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:3c:6b:32:0a:22:c7:e0:02:00:6f:06:4f:9c:e9:9e:cd:02:
08:fa:ae:40:db:76:71:85:9b:47:a7:dd:65:90:55:5f:fd:81:
1c:b0:bc:86:e7:fa:a9:3e:db:03:e8:e7:fd:ee:e9:ad:de:5c:
78:92:a0:59:7f:9b:3f:78:47:f5:3c:d3:89:73:3b:90:37:08:
b8:59:25:8e:6d:ab:f0:d2:9e:fc:fc:0a:e2:d9:fb:00:4a:bd:
20:3b:9f:ba:3e:d3:ad:1d:bb:86:70:d2:51:b4:a1:85:bf:8a:
7d:a6:69:0d:f3:d2:b7:fc:ee:f1:38:70:03:f4:d0:25:ca:2d:
09:2f:d7:7b:07:cc:ee:86:e1:03:4f:4b:f2:de:97:bd:3d:e6:
6d:43:40:94:33:04:62:42:30:5f:f7:0b:a7:0a:94:9f:f7:7c:
bb:3b:38:16:7b:ff:de:a6:b2:15:4c:ce:65:67:c7:a2:f6:0e:
03:b1:91:5d:90:7d:e5:46:98:aa:58:f6:e9:63:6f:59:14:7a:
1b:b2:c3:9f:ed:19:3f:12:b3:3b:1c:b6:34:04:92:5a:cc:cc:
a5:f4:8d:8b:a9:45:59:28:e9:6b:1d:3a:96:13:95:09:66:76:
42:1a:2f:41:ba:6c:fe:79:10:66:a4:42:76:2d:40:15:a7:01:
cd:2a:d4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:36 2025 by rpki-client