Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
File: IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft (raw, json)
Hash identifier: j+n4D2AsKwKPjhL6QCFUabWgk8CV+v93AgNKwI7Nak0=
Subject key identifier: 6D:38:C1:50:9A:09:61:8B:E9:9D:AD:57:6E:A7:90:8E:99:52:C0:7D
Authority key identifier: 23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
Certificate issuer: /CN=23051215f6f1bd227db7f40df748d64c106f84a3
Certificate serial: 019A2176AE7D6E1A167AC6813E7618A2CC97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
Manifest number: 0432
Signing time: Sun 26 Oct 2025 17:00:17 +0000
Manifest this update: Sun 26 Oct 2025 17:00:17 +0000
Manifest next update: Mon 27 Oct 2025 17:00:17 +0000
Files and hashes: 1: EuYflw2vpOToo9K8lFetTYAhWyo.roa (hash: SUT2OfNUp9WFMOp/u/f5+vrQyr/WoDJgwv8+U/p5Afw=)
2: IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl (hash: C5sSB842+w2FvbJnIyFxUwCV9B1lhZ26xtDH+RROMXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 17:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:76:ae:7d:6e:1a:16:7a:c6:81:3e:76:18:a2:cc:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23051215f6f1bd227db7f40df748d64c106f84a3
Validity
Not Before: Oct 26 17:00:17 2025 GMT
Not After : Oct 27 17:00:17 2025 GMT
Subject: CN=6d38c1509a09618be99dad576ea7908e9952c07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:72:df:a1:b6:f4:d3:60:e2:b2:85:41:97:2a:
51:83:8f:0c:fa:c4:5d:df:f7:f1:e0:33:9e:c0:54:
53:23:9b:5d:08:fc:c0:0d:e5:72:06:f4:1e:e9:6f:
f1:ca:d8:cf:3a:cd:b7:13:9f:67:b5:d4:ab:47:8c:
45:fb:20:ad:71:7d:5c:53:5a:f6:30:3a:c4:6f:0a:
18:1a:c1:5a:01:ab:9a:d7:f4:42:47:36:78:c4:3c:
8a:06:90:96:89:9c:de:65:fc:f2:5d:a7:0e:25:22:
24:8a:11:e4:b2:d9:0c:f5:f6:94:4b:a6:11:bb:d6:
a9:1b:18:5b:6c:35:3a:ef:72:a3:4a:0a:c8:66:2a:
09:0d:c9:3b:93:34:7e:58:3c:f2:9c:0e:6f:c1:02:
6f:cc:bf:fc:04:29:cd:9d:40:05:db:03:9a:6b:02:
f8:de:39:51:98:cf:9b:9e:82:70:4d:53:59:ac:85:
ef:0a:72:4b:63:e1:13:ad:6b:7a:25:e8:7d:3a:f3:
c8:ce:a2:45:0e:1c:e3:29:28:a5:69:52:9d:02:0b:
cc:52:35:90:d4:13:5c:93:f5:51:6c:33:54:3e:3e:
0d:40:51:1d:41:cd:82:dd:19:3d:b8:8a:8a:72:4f:
b9:16:65:00:c9:cd:1d:97:20:37:77:f5:57:32:7c:
5a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:38:C1:50:9A:09:61:8B:E9:9D:AD:57:6E:A7:90:8E:99:52:C0:7D
X509v3 Authority Key Identifier:
keyid:23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:cd:29:6b:87:cb:21:2c:f6:66:b3:51:17:70:e3:7f:ba:4b:
a9:1a:21:3d:9d:a8:85:0d:68:56:d1:80:27:e5:90:e3:32:d4:
b5:b3:36:44:d3:ba:ad:ae:f8:60:ef:6a:da:90:79:06:c8:ed:
93:8d:d9:9c:9f:8b:c6:25:02:ab:a2:f3:57:b5:ec:f4:1d:08:
71:35:dd:72:f6:ce:6e:0c:92:59:a4:82:0f:03:10:35:88:3b:
d3:01:f1:58:77:fe:3a:96:ff:86:33:3d:26:40:23:91:53:0a:
49:c0:2d:e8:ee:b1:e7:b2:24:fa:56:86:d1:4f:36:c8:c8:00:
c4:f9:22:af:05:d9:9d:db:06:2d:e9:5c:8f:9e:e5:5f:da:a4:
40:3f:26:40:c7:f6:dc:a7:50:f8:3c:af:06:6a:25:d5:9a:e2:
ef:ff:bd:3f:c3:b6:e2:60:13:0d:44:23:6d:7c:ad:36:b5:10:
5b:45:10:32:ef:ba:4a:d2:c1:0b:ef:98:43:dc:19:b1:35:69:
26:0e:5e:03:90:aa:c6:c3:2b:70:d5:d0:1a:72:31:65:1d:17:
c5:95:d7:97:e5:57:6b:fe:14:a1:a1:87:5e:7b:09:23:6d:a6:
54:61:ee:a8:53:69:84:3d:c8:2c:8e:54:6c:d5:9e:b3:d4:21:
95:23:b2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:35:34 2025 by rpki-client