Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
File: IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft (raw, json)
Hash identifier: jTzwWFoMn2P5A8v437cTy/wS3MvmDXxEySOHSmnYQzE=
Subject key identifier: B9:F6:61:25:FA:AF:96:52:D3:7D:CA:76:AE:21:1E:CE:26:17:C8:47
Authority key identifier: 20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
Certificate issuer: /CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Certificate serial: 0199FD6B17C24AB5291F8FA0B2B4F9C5919E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
Manifest number: 1454
Signing time: Sun 19 Oct 2025 17:01:17 +0000
Manifest this update: Sun 19 Oct 2025 17:01:17 +0000
Manifest next update: Mon 20 Oct 2025 17:01:17 +0000
Files and hashes: 1: IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl (hash: YZ9Ih/biBLPtjOS5PiqP+Tkl/TjHPMw8ee2PFbtZTjk=)
2: Tj1VT7s8ilnWaRH5FDEx4ErgOfw.roa (hash: EAnVAxYXeZnLn3O7V7JRGZpaiw9YJLofd+adf3s7hWw=)
3: z8gJT3mWJvoCjNtGavez3w-sptI.roa (hash: rAtA37xRZ8BRiEnR3BviWDsE+vEFga17zSGIolCXdPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:17:c2:4a:b5:29:1f:8f:a0:b2:b4:f9:c5:91:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Validity
Not Before: Oct 19 17:01:17 2025 GMT
Not After : Oct 20 17:01:17 2025 GMT
Subject: CN=b9f66125faaf9652d37dca76ae211ece2617c847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e4:21:ea:c9:fa:c8:c2:aa:56:1c:66:3c:46:
77:0b:4e:d7:02:03:2b:9e:3a:8f:7f:29:8c:e4:4b:
9d:84:e7:ab:16:ff:29:3c:25:d5:71:95:87:d6:7b:
29:86:b7:9e:b3:d4:20:3d:e8:19:89:12:ba:53:3d:
7e:3a:dc:77:aa:85:c3:fe:74:4e:cc:2d:b2:e1:62:
53:d4:3e:db:dd:28:db:b4:e0:94:2b:88:d4:62:a5:
c1:b8:17:05:1c:3e:c5:31:b1:41:a8:f6:38:0b:84:
2c:9f:dc:90:b0:7f:74:63:b4:ce:da:3b:4d:3a:1d:
a2:e2:91:7c:17:78:70:d5:9d:09:7e:4f:c0:df:0b:
0c:fd:07:67:c2:04:f3:f0:d9:b2:09:0f:6b:1e:db:
0f:5f:22:b0:bc:86:a4:b6:15:49:eb:71:81:ee:5c:
d9:a2:85:be:bb:f8:94:21:5d:36:95:be:53:8b:91:
fa:19:fb:4f:d6:4f:d4:b1:06:4b:55:98:00:8f:39:
dc:c6:98:b4:b8:28:fb:a3:ed:32:0a:37:b5:b4:56:
75:60:a1:ec:89:1a:54:a9:c4:ab:d4:85:90:65:58:
6a:9d:b5:4c:f2:61:b4:14:14:21:07:41:ef:37:ba:
c4:be:59:48:60:28:53:bf:c7:ae:ce:d0:80:0b:3d:
4b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F6:61:25:FA:AF:96:52:D3:7D:CA:76:AE:21:1E:CE:26:17:C8:47
X509v3 Authority Key Identifier:
keyid:20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:16:b0:6e:8d:05:44:27:c7:33:80:ea:02:28:97:33:54:33:
69:23:96:e0:92:ff:fe:16:48:58:65:42:47:86:22:78:9c:9c:
6b:d3:1c:d0:18:17:c6:eb:ff:81:cb:85:d8:97:d6:12:3c:e7:
ad:22:1b:1c:79:99:b0:ae:91:a1:3b:91:70:ee:69:89:79:fc:
aa:82:01:33:c5:82:a5:6c:e3:78:9e:0f:da:6e:98:5c:31:7c:
e2:71:0b:66:47:11:7f:04:d1:43:b1:4e:59:f3:48:07:d4:cb:
f6:c3:04:f7:54:7e:ed:a7:16:97:1f:1b:fc:d1:e4:a3:74:54:
65:68:c4:ae:67:7e:8a:42:6a:1d:83:2e:36:73:2d:4f:e1:c2:
8f:d4:b9:7f:5a:4a:bf:41:92:ba:a6:a4:9e:7d:6a:15:15:aa:
7e:51:c3:45:ce:53:57:f7:30:6e:bf:6c:b9:59:c4:32:85:e0:
fe:71:da:ba:29:34:73:41:ad:21:45:23:58:76:fc:27:e3:c7:
fd:88:30:ec:ab:2c:91:9a:b0:de:0e:c2:4f:6b:19:73:56:d1:
7c:40:23:37:4a:e0:2a:36:5f:b4:26:14:8d:4b:86:be:4f:57:
5c:8a:1e:2c:2b:eb:18:be:2b:bd:c5:06:42:d0:18:44:dd:32:
f3:90:f0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:15:46 2025 by rpki-client