Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
File: IxG6LbhgGYJqsQLhnyyoogkxaFI.mft (raw, json)
Hash identifier: tesXraQiVUASD8GSk4GlQule8bZDbnFIxYKl99oEbUk=
Subject key identifier: 30:81:F0:A3:12:4A:1C:D7:14:F5:A6:3B:56:B0:FD:D2:0B:2D:6F:26
Authority key identifier: 23:11:BA:2D:B8:60:19:82:6A:B1:02:E1:9F:2C:A8:A2:09:31:68:52
Certificate issuer: /CN=2311ba2db86019826ab102e19f2ca8a209316852
Certificate serial: 019A730162CC0DFF2A87084FC7BA6D4B053C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
Manifest number: 021D
Signing time: Tue 11 Nov 2025 13:01:01 +0000
Manifest this update: Tue 11 Nov 2025 13:01:01 +0000
Manifest next update: Wed 12 Nov 2025 13:01:01 +0000
Files and hashes: 1: IxG6LbhgGYJqsQLhnyyoogkxaFI.crl (hash: 8mnIuDweXxUO83oDrA894geHK8FkcwHq3ABvS+QObkk=)
2: VEacVgiUB2mSTjU4m54DaN-4dWE.roa (hash: 4yBoFANUnzxzanObGvRjvvX/EIqsjlCUPMYRv3xQRSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:62:cc:0d:ff:2a:87:08:4f:c7:ba:6d:4b:05:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2311ba2db86019826ab102e19f2ca8a209316852
Validity
Not Before: Nov 11 13:01:01 2025 GMT
Not After : Nov 12 13:01:01 2025 GMT
Subject: CN=3081f0a3124a1cd714f5a63b56b0fdd20b2d6f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8c:b3:f6:32:7e:7e:60:fc:da:5a:ba:4a:9d:
ca:63:db:83:3e:c4:f2:e8:33:5b:6f:f4:25:56:5c:
44:2d:2f:9c:9e:dc:71:43:e9:97:1b:f7:58:18:b3:
3e:3c:9a:53:e0:74:59:5b:0e:6f:9a:a9:22:98:df:
f0:69:0b:36:dd:7e:eb:10:50:bc:a0:1a:ff:9b:f9:
f9:32:2f:ec:3e:39:06:d3:22:fc:0b:69:13:02:ec:
da:67:c6:31:00:d9:a6:91:4f:b1:b4:0b:71:36:09:
05:10:2e:2a:f2:29:de:5d:d4:4b:ee:8e:b3:d5:2a:
88:53:4e:b7:18:27:ee:00:05:24:4f:eb:0c:76:df:
ca:2c:6a:83:8c:ec:43:e1:d5:83:30:38:fe:53:48:
65:a7:ad:5c:9f:80:86:b9:cf:3b:54:6e:ad:a5:4e:
be:4b:fa:09:de:11:15:cc:eb:6f:fd:00:05:2b:d3:
58:5d:48:11:ac:2b:6f:5d:2d:24:8e:3b:8c:84:58:
f1:a2:97:c4:7d:d6:f4:11:25:52:c9:c5:7d:56:45:
54:07:64:e7:a3:91:86:a3:3d:11:88:1f:c7:e7:f4:
cb:a5:aa:c0:e5:a1:f9:72:aa:1d:37:23:13:b0:d7:
61:49:dd:f7:91:7e:a3:4e:0b:4d:32:81:da:03:5b:
42:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:81:F0:A3:12:4A:1C:D7:14:F5:A6:3B:56:B0:FD:D2:0B:2D:6F:26
X509v3 Authority Key Identifier:
keyid:23:11:BA:2D:B8:60:19:82:6A:B1:02:E1:9F:2C:A8:A2:09:31:68:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:25:5c:0d:9c:ae:b9:ab:7a:e6:4b:c4:df:6c:95:97:80:f4:
39:ef:6b:06:7d:2a:0a:00:ce:63:55:32:6d:26:85:df:4b:4e:
a4:39:f9:df:6c:60:91:2a:9a:dd:ef:74:9c:49:65:23:20:3f:
e7:9e:25:d0:36:15:16:10:7a:03:2e:29:5c:e2:f3:c8:89:d9:
ed:3f:f0:d2:90:82:2b:9e:83:e3:15:98:9a:6d:a4:af:bf:01:
90:d0:12:2a:31:a3:ed:49:4b:94:f6:ca:19:1f:d9:ca:36:2b:
15:53:d6:40:e5:cc:01:d3:05:60:9b:1d:cd:a7:11:5e:f7:e9:
81:52:6d:71:d8:51:d4:74:10:36:64:4f:7d:24:51:0e:c3:8d:
30:3f:ca:72:89:8f:bd:14:f1:fd:8d:a6:41:a6:cc:ea:3a:d6:
06:d6:11:11:3f:5e:7e:73:c0:a7:ea:f6:85:2a:81:c5:dc:4a:
e9:86:cf:1a:7a:77:07:b1:37:97:f8:c7:91:22:79:6e:64:50:
91:15:e2:c7:22:5a:b3:57:0c:3d:a2:de:6c:2d:cd:42:c0:77:
55:f6:3e:c4:26:31:a1:36:de:53:1c:e0:4e:c1:ab:21:cb:f0:
20:55:83:37:c2:2f:de:1e:28:1c:84:cb:04:eb:eb:08:73:e5:
4a:6e:6a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:49 2025 by rpki-client