Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
File: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft (raw, json)
Hash identifier: 4jRvt6Wma2Ffh9k0MIvFs3tGKnnfVj4jpccjwNSyyLw=
Subject key identifier: D3:A2:88:E1:43:61:65:05:15:A9:E2:F6:18:26:3E:5F:7E:8A:8A:B2
Authority key identifier: 22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
Certificate issuer: /CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Certificate serial: 019A0110EB87F14BF6D833E800FF3DD89234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
Manifest number: 16EA
Signing time: Mon 20 Oct 2025 10:01:17 +0000
Manifest this update: Mon 20 Oct 2025 10:01:17 +0000
Manifest next update: Tue 21 Oct 2025 10:01:17 +0000
Files and hashes: 1: DE9IUhyQDVKAZFd3LetU9Q2xs6k.roa (hash: 4yKIJoSmqEpGXf1pIollJ7FnnZ1pkmaGTlVLtjz3pSc=)
2: H8-4BKw4Tio0v7fBDDkOvu0xYf0.roa (hash: KAd/cINuj3Zmkb8yZBl9rfV147mzpewaBmWKPtSwHrI=)
3: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl (hash: yhlZRfGEqTGxQuo/GF6GamGqpFsJI9LiBWpsig2kfKE=)
4: j_UhRom1_CjoZ8ktPpSsCzemlX0.roa (hash: p3RE9tXJ28D2EkcXNDeylKcBqqXVLJJQRP9qM16ttXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:eb:87:f1:4b:f6:d8:33:e8:00:ff:3d:d8:92:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Validity
Not Before: Oct 20 10:01:17 2025 GMT
Not After : Oct 21 10:01:17 2025 GMT
Subject: CN=d3a288e14361650515a9e2f618263e5f7e8a8ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:e5:bf:fc:b4:bd:54:06:3e:85:a2:d4:f0:
04:d2:f3:91:f0:ea:9f:d7:0c:c0:73:f2:73:0d:55:
0b:79:2e:69:65:ad:25:77:12:08:01:c6:9d:d3:3d:
c9:9e:c4:73:53:81:a7:46:bd:33:c6:97:a3:af:42:
fe:39:1d:79:df:5e:2f:37:53:d3:d9:fd:c0:65:5b:
3a:df:54:12:7e:4b:68:29:9e:1a:ea:1d:73:23:a9:
ae:2d:f3:08:ac:1c:33:5b:6d:76:4b:98:2f:b9:46:
07:af:4d:c3:82:02:bb:68:54:ff:14:e9:5b:b1:ce:
5d:c5:70:a1:cc:9b:49:8c:d9:52:68:59:da:49:1c:
a6:91:e9:61:60:12:e1:1f:db:87:85:48:e7:ce:85:
c4:de:08:f5:02:04:74:7a:75:81:0b:c4:c7:dc:fd:
ab:9d:23:62:b9:40:40:57:df:69:c6:45:10:3c:08:
7a:99:a6:08:44:74:fd:7e:e2:d3:26:da:ad:8a:75:
64:6d:3a:a3:bf:ee:c4:53:d1:f3:2e:08:34:06:38:
09:21:a3:af:94:90:6b:7f:3e:27:c8:79:0b:79:d6:
87:73:77:f5:3a:00:6f:ff:96:e2:2f:24:05:a1:9d:
c2:45:82:21:f0:ac:fe:00:15:c0:8c:4e:5f:67:fc:
2e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A2:88:E1:43:61:65:05:15:A9:E2:F6:18:26:3E:5F:7E:8A:8A:B2
X509v3 Authority Key Identifier:
keyid:22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:41:09:dc:40:5b:62:30:2a:15:aa:08:34:07:10:69:e3:80:
83:06:1f:86:f8:8d:88:42:a7:86:5f:84:ad:c7:f9:f0:4a:5d:
af:95:fe:22:2a:78:68:1e:e1:5a:1f:cf:5f:91:05:92:8d:a9:
58:06:44:75:93:48:6a:c3:62:c1:6c:1a:b4:b0:6b:66:88:09:
24:73:65:d2:df:49:0e:4f:3b:50:e1:19:25:38:ea:6a:e8:90:
14:de:1a:7c:f9:da:55:03:f8:92:56:79:46:12:e4:5e:71:74:
6e:d3:f5:33:8e:31:ea:45:4a:52:60:91:9f:24:d6:ae:6d:e2:
35:71:06:ff:9a:49:08:64:19:88:54:ee:ee:37:da:bd:fc:5f:
94:b8:57:29:bf:12:9d:db:21:4c:1b:2c:c8:d8:34:c5:69:e6:
73:f1:85:ef:81:6f:44:e2:cd:26:89:18:97:a9:e5:26:c8:ee:
9f:7c:13:73:ca:8c:ca:e6:f5:3b:39:25:60:9a:07:c8:5a:e4:
ba:87:88:0d:23:66:38:36:67:c1:b8:6b:5c:aa:06:03:15:b6:
07:7d:7c:19:2f:f9:2a:59:cf:db:7c:1f:82:a6:07:fc:e9:dc:
ca:8e:4d:9c:1e:16:d0:da:8c:50:cd:3f:65:88:27:30:cf:52:
c7:de:38:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:15:29 2025 by rpki-client