Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
File: IoNxG9erE9o9EfJbtXpPSDwfmaw.mft (raw, json)
Hash identifier: DncXo9kfRTMLjNVX8mpoh2D/epBxFjTo0v5snQ9P+HE=
Subject key identifier: B2:87:50:DC:EE:67:9E:24:4B:4A:BB:E7:B0:63:EC:93:9D:DC:43:F4
Authority key identifier: 22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
Certificate issuer: /CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Certificate serial: 019A2A79A8DAA6F7B6A49EEE97FC682521D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
Manifest number: 16FB
Signing time: Tue 28 Oct 2025 11:00:07 +0000
Manifest this update: Tue 28 Oct 2025 11:00:07 +0000
Manifest next update: Wed 29 Oct 2025 11:00:07 +0000
Files and hashes: 1: IoNxG9erE9o9EfJbtXpPSDwfmaw.crl (hash: RjpCI/njL7y/oxAEbmr/TONhmVvAXedsUQ+Hklwzuds=)
2: UsxT3pcVojJYP9Cu4db5XHBOA_A.roa (hash: IuC4o8xqUNTxh+TkbcEBFveFUP/SyyaXqWJ5U0z84Vw=)
3: uCJs3VfOd9XlMzz8RlxYwm6JR8g.roa (hash: aQ8GGeLzceXoLXJ/X0KURkE7J4DP5Ck+ioxtdgiJTwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:79:a8:da:a6:f7:b6:a4:9e:ee:97:fc:68:25:21:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Validity
Not Before: Oct 28 11:00:07 2025 GMT
Not After : Oct 29 11:00:07 2025 GMT
Subject: CN=b28750dcee679e244b4abbe7b063ec939ddc43f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d7:df:0a:65:14:25:15:c2:c2:6f:44:c4:a6:
95:cc:2a:2d:10:d8:d2:c1:76:c5:a0:88:a7:c4:30:
d7:d0:23:68:79:de:40:13:62:ea:82:83:3e:b7:8e:
98:fa:0f:d1:96:79:84:cc:1d:29:24:e7:dd:6b:62:
8c:5d:0e:63:d9:cd:c2:50:26:66:1e:99:e3:f9:d2:
34:dc:d6:f0:1e:55:e9:3e:24:18:51:da:53:d9:f4:
52:2f:61:12:f2:e3:de:a3:99:74:36:68:49:21:a6:
f2:5b:b2:f8:b1:fe:3a:b6:8b:e5:25:5d:0d:a0:6a:
68:32:e9:5d:d4:8e:05:83:87:42:94:63:57:e4:2b:
71:17:86:9a:c0:8a:f6:f5:72:3a:65:c4:28:be:f5:
81:72:f1:f7:a8:8a:87:4c:81:d1:ae:dc:56:6e:1d:
42:24:7d:5f:33:a9:f9:66:69:f8:f4:20:1a:9b:52:
e9:8b:a1:ed:1c:8d:99:89:a7:5d:72:07:92:33:2f:
70:66:ed:1c:04:1e:b2:cd:33:0e:7f:69:77:e9:e3:
59:ca:db:bc:8b:3d:ee:59:00:0a:7c:13:e8:69:e9:
a0:78:e0:e7:68:7b:13:95:ef:4b:28:40:d1:f8:29:
a6:a0:33:46:74:92:46:b2:5d:b8:e7:13:0e:95:9a:
67:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:87:50:DC:EE:67:9E:24:4B:4A:BB:E7:B0:63:EC:93:9D:DC:43:F4
X509v3 Authority Key Identifier:
keyid:22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:9c:e6:81:c3:76:e0:41:37:83:ef:e5:67:37:6a:31:ad:3b:
0b:1d:d1:1c:b2:56:11:a1:25:68:fc:38:ea:a3:3b:6b:10:0e:
78:14:61:62:53:cd:d3:37:1a:6b:08:d6:56:de:19:6f:1c:27:
df:a9:9e:8a:b7:67:e8:a3:bc:1b:63:4c:3d:55:2f:0a:75:e3:
47:e2:08:a6:b8:6a:82:8b:ce:6b:0e:92:b4:e4:e0:a2:14:70:
17:aa:ad:46:f1:0b:22:4e:67:42:1a:5d:a6:14:b1:1e:ba:65:
51:81:9d:f3:e7:9f:b6:9a:4b:44:df:6b:6a:75:1b:70:03:ef:
f8:cb:22:d1:18:39:80:00:e0:33:98:05:9e:81:d5:86:11:04:
fa:a0:04:e8:29:9d:44:1d:9a:aa:0e:e1:9b:fc:1d:ee:9c:3a:
c1:a5:73:bd:ee:3d:f7:ce:3a:e6:c5:cc:7c:30:d5:7f:56:3f:
b9:78:fd:b8:83:1c:58:29:e7:32:7f:05:20:7e:1b:12:46:03:
46:54:6b:b2:56:9b:f3:62:e0:9d:64:48:23:bb:09:f0:a2:b8:
40:56:cf:ff:8a:89:46:3a:72:e5:97:5e:b7:b6:01:04:92:e9:
22:81:b0:66:1f:d9:94:90:0c:a0:58:99:77:3c:05:4d:f9:02:
2d:26:6d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:03:20 2025 by rpki-client