Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft
File: I9FK_odQITwoDltovvsYhm95SX8.mft (raw, json)
Hash identifier: 9k7f4a5mpwUKGO/kV1OQyAatExLRxO5o5lZDKIj4cmE=
Subject key identifier: 1C:F3:FA:CA:CC:59:BA:7A:3A:C3:55:76:71:5E:D9:AE:0F:B6:B8:CB
Authority key identifier: 23:D1:4A:FE:87:50:21:3C:28:0E:5B:68:BE:FB:18:86:6F:79:49:7F
Certificate issuer: /CN=23d14afe8750213c280e5b68befb18866f79497f
Certificate serial: 019A24788817C71A3B93D74F918706B82800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9FK_odQITwoDltovvsYhm95SX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft
Manifest number: 0378
Signing time: Mon 27 Oct 2025 07:01:10 +0000
Manifest this update: Mon 27 Oct 2025 07:01:10 +0000
Manifest next update: Tue 28 Oct 2025 07:01:10 +0000
Files and hashes: 1: I9FK_odQITwoDltovvsYhm95SX8.crl (hash: SrGK68bkLWgDezzqPWUYkYJHIXl9PY298asb8XU+XjY=)
2: bfd_WpvacXpVJP__dq6vej5IyyY.roa (hash: /B+pNt8vIwVV5x8COrKPeKukz7hh0c0T1g3kvtIg6Z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9FK_odQITwoDltovvsYhm95SX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:88:17:c7:1a:3b:93:d7:4f:91:87:06:b8:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d14afe8750213c280e5b68befb18866f79497f
Validity
Not Before: Oct 27 07:01:10 2025 GMT
Not After : Oct 28 07:01:10 2025 GMT
Subject: CN=1cf3facacc59ba7a3ac35576715ed9ae0fb6b8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:07:89:b2:b4:ba:a0:cc:3e:e9:0d:e7:d5:57:
76:b1:c8:d9:aa:5a:fa:3e:00:d0:eb:42:b2:3c:7d:
ae:1b:e8:1e:5b:3e:d7:0c:4d:9b:d8:2a:1e:1e:a0:
32:59:12:e6:0e:cb:c9:a2:87:42:1f:77:3f:f7:3b:
04:0d:a3:0e:be:13:41:6a:80:00:4c:81:bb:40:30:
66:05:38:0c:21:60:87:25:4b:81:e5:ba:b8:fb:1a:
f0:56:6a:1a:12:b7:4b:69:46:15:bf:06:72:3d:6f:
4c:48:7a:90:61:3f:d8:9b:d6:fe:a8:e3:3c:42:0d:
bd:ea:2c:2c:1c:01:3b:bb:23:a0:f8:38:e8:e5:35:
5b:80:64:17:25:6f:ef:6f:0a:27:f9:d0:60:02:cc:
e6:23:1c:25:45:34:fd:4a:2a:c0:48:81:1c:17:3e:
cb:51:d0:13:0b:9b:09:69:fb:d9:5a:26:f0:a7:96:
5c:13:5b:78:b0:c6:b6:a6:0e:84:0e:14:ac:8f:10:
8c:18:aa:c4:d7:2b:6a:8b:27:7a:92:f9:b0:da:07:
35:b4:a1:b1:48:1d:79:f6:71:db:eb:58:04:1a:04:
e9:a7:91:9a:8e:c4:ec:29:cd:a3:bd:65:c9:25:ff:
51:29:4f:ee:03:f5:7e:04:9b:36:42:9d:b2:12:0b:
35:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F3:FA:CA:CC:59:BA:7A:3A:C3:55:76:71:5E:D9:AE:0F:B6:B8:CB
X509v3 Authority Key Identifier:
keyid:23:D1:4A:FE:87:50:21:3C:28:0E:5B:68:BE:FB:18:86:6F:79:49:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9FK_odQITwoDltovvsYhm95SX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c3:eb:0c:63:e4:f1:71:84:51:96:2a:28:1e:d3:95:a4:93:
ae:6d:d8:1b:86:18:80:ee:2d:7d:ee:60:6d:e1:d2:ac:b3:27:
6c:d4:a4:19:5a:84:98:cf:ad:c0:f5:2c:50:21:5d:07:3b:22:
f7:c1:eb:08:45:37:03:64:92:f9:e2:6b:59:96:68:51:11:9e:
c8:81:4e:5e:70:f4:3d:cc:d3:17:55:be:3a:75:a6:99:97:7a:
0d:0f:6c:31:cc:6f:47:28:a7:e7:ad:04:86:36:3f:c3:2e:e9:
06:42:3f:bb:c8:cd:9e:a2:5d:d9:55:ab:9e:25:e1:a2:b0:dd:
f8:25:4f:77:fb:7d:fb:c6:b2:23:37:47:63:a7:fe:48:fb:18:
99:fb:71:cb:7e:65:bb:03:57:72:40:bf:c4:ac:ef:0d:26:a0:
a0:fb:07:8d:3a:34:cd:3c:20:9d:00:16:3c:51:c9:3f:e0:6e:
ce:b8:83:41:f0:6c:36:78:30:94:cd:c5:25:05:9a:f2:e4:4e:
72:06:0d:81:35:57:12:ae:07:70:7f:a5:b6:3e:b2:74:c6:e9:
8d:13:24:77:01:51:7f:91:fe:63:da:2e:00:ec:60:e5:bb:48:
fb:81:09:e5:09:52:74:4f:8e:b9:dc:d1:12:20:ea:af:0a:77:
1b:9e:17:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:06:03 2025 by rpki-client