Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
File: IoNxG9erE9o9EfJbtXpPSDwfmaw.mft (raw, json)
Hash identifier: BNcEZ8vfz2DBBt4jdtP1hgqz0cPBn+UOYdhtrl9FBxk=
Subject key identifier: 26:C2:5C:2E:73:E5:6D:03:5E:EF:D9:50:6C:93:B1:E0:2F:D5:1F:16
Authority key identifier: 22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
Certificate issuer: /CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Certificate serial: 0199315B0442A89141AA3675CFA7B45118C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
Manifest number: 167A
Signing time: Wed 10 Sep 2025 02:01:12 +0000
Manifest this update: Wed 10 Sep 2025 02:01:12 +0000
Manifest next update: Thu 11 Sep 2025 02:01:12 +0000
Files and hashes: 1: IoNxG9erE9o9EfJbtXpPSDwfmaw.crl (hash: KZ0+JW7QUOvU2uwhD8HtGJh1Tdrn+39GjBqWhaVmHw4=)
2: UsxT3pcVojJYP9Cu4db5XHBOA_A.roa (hash: IuC4o8xqUNTxh+TkbcEBFveFUP/SyyaXqWJ5U0z84Vw=)
3: uCJs3VfOd9XlMzz8RlxYwm6JR8g.roa (hash: aQ8GGeLzceXoLXJ/X0KURkE7J4DP5Ck+ioxtdgiJTwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:5b:04:42:a8:91:41:aa:36:75:cf:a7:b4:51:18:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Validity
Not Before: Sep 10 02:01:12 2025 GMT
Not After : Sep 11 02:01:12 2025 GMT
Subject: CN=26c25c2e73e56d035eefd9506c93b1e02fd51f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:5f:7e:3e:dd:92:46:cd:f7:b3:a3:9a:88:
10:35:1e:e5:85:6e:ee:77:74:3d:9c:e1:49:5e:ea:
e7:7d:74:33:4b:e2:92:45:b7:d7:6c:94:5e:5c:38:
2c:14:e5:ac:40:e5:93:0c:7f:66:8e:b6:b5:30:d3:
fb:77:86:cd:03:10:a1:cf:73:8b:74:a0:e4:63:80:
06:52:01:c0:10:3e:09:6a:81:0a:14:d0:27:f7:06:
5e:27:58:eb:52:9c:cc:22:77:91:d7:dc:c2:d1:ff:
c3:60:e2:1f:0e:24:f8:d8:ea:e4:1c:49:1c:9d:ec:
df:83:34:c7:1d:34:25:7a:eb:f5:b5:f0:5c:81:64:
74:6c:45:5c:c5:87:c8:28:e3:a1:be:6b:b3:36:fa:
19:cc:55:5f:f5:21:93:7c:2e:77:17:6c:89:8c:a6:
3b:96:3a:a1:9b:7b:85:08:4d:41:e4:3c:48:11:8b:
22:62:b4:06:d6:22:4c:49:d9:86:9c:8a:39:69:c2:
27:ac:17:3d:37:64:5b:3e:0d:6b:1a:9d:4f:af:86:
e0:74:43:72:2a:f9:5b:cd:6c:91:89:7c:7f:d2:c0:
a8:2d:2a:c4:33:4b:e9:71:8d:82:83:2b:e5:f1:d1:
89:48:59:93:88:7d:bd:6c:fe:0e:0d:4f:46:2e:8b:
f3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C2:5C:2E:73:E5:6D:03:5E:EF:D9:50:6C:93:B1:E0:2F:D5:1F:16
X509v3 Authority Key Identifier:
keyid:22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2f:b9:4a:cc:c4:4f:05:05:4b:7b:fd:3a:43:dd:16:b7:f7:
d3:4e:24:0c:4d:bd:f9:35:17:eb:3e:68:bf:69:0c:59:a1:fe:
b5:c4:cf:5e:63:b5:f2:71:8b:93:a3:f3:38:9f:71:d1:5a:2a:
4c:14:c5:4d:2c:c4:3b:bd:31:e8:e3:f5:14:9a:1b:90:48:b7:
da:36:28:8c:32:51:b8:03:9e:80:33:f2:10:00:9e:5b:61:3d:
82:28:29:a2:e7:2b:44:3e:10:5d:0f:6a:c7:b5:b7:d7:30:03:
a1:71:bd:ec:9f:4e:8f:7d:ef:52:a4:be:f6:cb:5d:5d:74:e1:
a8:fc:42:96:28:f9:8e:dc:af:b1:a1:ca:df:27:b3:5d:e2:e4:
15:b1:39:d8:66:79:06:02:8b:3f:06:80:d1:4c:fc:0d:c1:b0:
e1:91:ba:42:b0:fc:9d:54:35:05:f7:7c:76:8f:97:38:48:17:
80:32:25:66:e0:ac:ef:0b:37:f2:ff:e5:c0:7b:7e:88:80:87:
65:3d:4e:24:29:9d:58:59:03:fe:6b:8f:07:e8:94:27:c2:8e:
70:ec:d1:db:7b:0b:33:f0:26:0c:3d:43:09:a1:82:0d:d6:cc:
73:ca:6a:6f:78:25:b3:6e:75:9b:77:1f:53:d0:23:9e:6a:09:
ea:be:18:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:57:27 2025 by rpki-client