Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
File: IC9MGjfpMTzdLup3UK4CjRjNWq4.mft (raw, json)
Hash identifier: zAiH6JRw4cbIbHzvoIMpjpTu3ALTZlh/lPHd3Xc+qo8=
Subject key identifier: 87:E8:65:B7:2E:FA:AD:7B:AB:C0:96:81:39:4B:F0:7B:B9:81:7B:3A
Authority key identifier: 20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
Certificate issuer: /CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Certificate serial: 019A2289787285A25B2B6446C234F95BE1D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
Manifest number: 16F8
Signing time: Sun 26 Oct 2025 22:00:25 +0000
Manifest this update: Sun 26 Oct 2025 22:00:25 +0000
Manifest next update: Mon 27 Oct 2025 22:00:25 +0000
Files and hashes: 1: IC9MGjfpMTzdLup3UK4CjRjNWq4.crl (hash: MvT84zi7FluvFXKQl9ltZBiZtPcZoc/iMxq2Id5l/gA=)
2: IpCJGLN8WNm4ASMIxNnGZPuEtp4.roa (hash: nrrSBtVL1+LxQy+ccPed0KobnXytQAq3RiSJBLbBVIg=)
3: NfNd6pjqYOF2P-1csZDDcYiiQ28.roa (hash: iQWQfc6lD74rDEabgsCAVeBcixywrixRVP1KpMFN48o=)
4: PJBAejzPvEvF3ZoupzGWVEj1Og0.roa (hash: BFJtqcfNldj6Jrfn0Y0+mOBk6xT0n483gTjn5ogYiu8=)
5: aCUjIUK5OOSaycrn7_ksP5SjmPw.roa (hash: O1lgV6htb/Z9+mSwOsrU/V0sb4jZo6xRqeghVOqs13I=)
6: dSYYIsgqOPsPCWRb8n6bjaKooRw.roa (hash: Pvqr/OOkaqypvOSknbbOn2J0oHNnn5WhmVz2GaH3aXU=)
7: quZyu716dxS9mdBeGNCJZ1sGIZM.roa (hash: MPvLxa0c+riXjzyelLJV18hBBvFNCarL2WtEM/bk6Os=)
8: sx8Ag2ZkbPORNb5IpKGaIu2_Dqo.roa (hash: ZFFpoBJ2SvC/bg4XtAEwmcSclBY/i+xRWcdnLVCOAss=)
9: wUsJ3Y8bKRlwOlXMA6Qttd1Brps.roa (hash: zuU1UQuoYfDo2IQVUCO8dMMln85NIWVqpAhKwg/ayj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:78:72:85:a2:5b:2b:64:46:c2:34:f9:5b:e1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Validity
Not Before: Oct 26 22:00:25 2025 GMT
Not After : Oct 27 22:00:25 2025 GMT
Subject: CN=87e865b72efaad7babc09681394bf07bb9817b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9d:78:8c:d8:61:66:7e:96:12:a1:00:09:03:
69:63:93:24:c0:f6:63:b1:63:bc:96:b1:d5:81:05:
a6:87:9c:75:ce:41:3b:2b:10:5e:0b:4d:71:7b:bc:
c8:a5:d8:db:84:ad:f4:19:2b:af:52:29:31:96:42:
4e:83:68:86:3d:94:67:97:f9:bd:84:5e:dd:7d:32:
d1:8e:23:d0:d6:ed:67:ab:38:ab:d0:d8:ca:ad:88:
50:e9:95:b5:0a:8e:83:63:d5:5d:c5:38:9a:0d:ee:
e4:62:1e:8b:44:9b:f1:04:c6:ab:d1:12:86:11:81:
3a:51:dd:a2:ae:5e:a2:80:30:fb:3a:22:df:c8:14:
74:d8:f1:e7:b1:22:61:31:83:36:f9:74:89:46:bf:
ed:cc:7f:0c:0a:7c:d8:22:a8:86:2b:28:4a:23:20:
2b:c8:42:0d:bc:8a:ed:96:1b:d3:1a:d1:17:05:7f:
de:45:40:31:10:00:fa:0d:b6:e9:98:b9:2e:7d:78:
3a:8d:74:b5:51:44:a5:ba:3c:67:df:86:9c:cc:89:
ff:e0:3b:09:4a:56:68:48:04:ee:f4:47:f4:fb:da:
ac:61:48:24:10:a3:65:92:59:79:3d:62:b2:a5:32:
86:10:e5:76:6d:a1:81:a4:86:42:d7:45:aa:80:52:
f1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E8:65:B7:2E:FA:AD:7B:AB:C0:96:81:39:4B:F0:7B:B9:81:7B:3A
X509v3 Authority Key Identifier:
keyid:20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:6d:34:d1:0b:1c:5d:cd:04:be:a8:8f:05:dd:de:25:c5:f5:
58:80:95:5a:3e:61:6b:10:70:af:a5:46:3f:77:a4:be:e1:64:
4f:e4:ec:19:bd:f7:b2:79:4e:e7:c9:34:c4:ac:9a:99:e1:ae:
d0:cf:19:73:1b:e4:3b:75:95:8b:fb:d6:5f:cd:d1:47:1d:8b:
89:00:ed:24:97:da:e7:a2:f9:ef:43:47:57:34:87:b5:fb:35:
12:78:16:9e:c2:c9:16:e5:07:8f:02:b7:ae:83:cc:9a:58:eb:
75:7a:ac:1a:1f:ea:df:25:c6:59:a8:21:78:e8:73:d5:9c:7d:
38:f5:bc:f6:2c:39:d2:91:15:11:48:92:8b:d5:60:c8:80:61:
3a:41:d0:15:d6:46:9b:56:64:51:44:a8:60:d9:b0:ad:57:d7:
6f:3a:58:9e:70:ba:5b:ab:62:e8:5e:38:41:e9:2f:ad:45:bc:
1c:c6:65:24:f5:b5:b2:82:63:da:31:f5:93:34:d7:03:7d:c5:
09:81:fb:75:42:c1:a5:6b:60:7d:ea:04:82:fc:3b:78:04:3a:
a7:8f:d3:b5:1f:26:57:05:53:b7:49:04:1e:19:15:db:4c:79:
f3:4b:61:f8:83:ed:66:7c:00:e6:f2:89:32:b0:b5:7b:34:94:
31:33:31:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:40:53 2025 by rpki-client