Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
File: I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft (raw, json)
Hash identifier: 2Yf5e0Z/ZqrTX4+6kHKUPfQQmCZ1q7cKQWMhVRkjKH4=
Subject key identifier: B8:01:B8:A5:5E:DE:89:46:EC:DB:C3:8C:70:92:9D:8F:12:7B:4E:C5
Authority key identifier: 23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
Certificate issuer: /CN=238857660dc7fa60846f765b94cb69576255adb6
Certificate serial: 0199C83445E2B2648437BA72D7BC7C29421C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
Manifest number: 16CB
Signing time: Thu 09 Oct 2025 09:01:32 +0000
Manifest this update: Thu 09 Oct 2025 09:01:32 +0000
Manifest next update: Fri 10 Oct 2025 09:01:32 +0000
Files and hashes: 1: I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl (hash: B6Fgn70sVlKZpXQnXVXgm+tSZ4sywXYgBcB/37S6VLk=)
2: XHfhEGwfsHA5Cy6rVzKyCX0VS7I.roa (hash: r0CY6B9tn8PTb3kJeN+vQ/cBCfQUrTHL37aoDlJepRA=)
3: tcPEvHuX8bqS2YKyM4C5K4tHwxk.roa (hash: rKNoYxngd5L4bRt06ua2/XaA1SqXHMSPI/cKc0JvWoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 07:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c8:34:45:e2:b2:64:84:37:ba:72:d7:bc:7c:29:42:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238857660dc7fa60846f765b94cb69576255adb6
Validity
Not Before: Oct 9 09:01:32 2025 GMT
Not After : Oct 10 09:01:32 2025 GMT
Subject: CN=b801b8a55ede8946ecdbc38c70929d8f127b4ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d9:99:fd:a6:66:78:dc:33:5e:3d:4d:c7:4c:
b0:dc:9c:0c:d9:89:aa:c2:91:df:c6:41:63:36:a6:
bd:44:4b:7a:80:54:ca:b2:4d:4b:a8:ba:a6:00:ad:
1e:01:6c:69:16:2e:60:40:15:6c:ed:2b:39:12:c9:
94:74:64:0a:83:23:00:64:f7:b3:ae:3d:92:ca:a9:
4c:00:9a:22:91:2a:80:ec:ec:88:d0:29:43:6a:d8:
ea:f2:ea:96:51:3e:df:2b:60:ca:b7:d4:62:e6:b2:
a8:ce:01:98:9a:af:93:ab:13:67:d6:86:97:0f:89:
05:b0:ba:d1:c2:b0:25:e3:99:96:ba:eb:64:59:78:
22:8a:79:79:96:26:d7:3e:8e:8c:8e:68:d7:bc:86:
1f:ee:63:be:a4:33:0f:c0:13:87:fa:9b:c9:62:4f:
0b:b7:28:d3:5d:94:31:1b:22:23:a9:2b:ed:d1:c8:
79:a6:90:56:a8:70:f2:69:ae:b0:53:a6:a2:06:71:
b8:d1:a4:63:d0:08:18:18:23:da:96:6a:86:2a:5c:
2f:e2:cf:9b:be:cd:29:0f:7c:4e:56:22:2b:58:9b:
e1:ed:04:91:85:e7:c5:a6:b5:c7:e4:ea:33:8a:ac:
65:d9:6c:74:db:70:ea:63:fc:47:93:10:ad:73:63:
1e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:01:B8:A5:5E:DE:89:46:EC:DB:C3:8C:70:92:9D:8F:12:7B:4E:C5
X509v3 Authority Key Identifier:
keyid:23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:41:80:25:0e:7e:d0:72:e3:94:d9:46:de:28:07:a5:8d:2a:
6d:54:8b:4c:7a:ec:1c:09:26:b1:82:22:c8:cb:a9:08:61:fa:
24:d1:ac:f4:66:d3:59:43:24:f6:19:5a:a9:e4:81:6e:a0:d8:
fa:af:aa:ff:ea:76:7c:05:1c:cc:8d:cb:f5:ae:ce:2b:56:01:
92:10:8f:2a:96:ff:af:23:d6:82:d8:67:0c:b8:cd:f0:5f:33:
a7:85:11:15:3c:ee:43:ab:cf:2c:91:84:80:7a:ff:57:86:e8:
2a:8d:7f:12:29:4e:dd:9a:6a:a5:84:71:22:c8:7b:9c:01:14:
46:de:d3:95:d0:ad:ff:f5:78:10:49:a2:19:55:b8:f9:fc:85:
6a:06:d2:6b:36:74:e9:9b:48:87:bd:d0:85:d8:27:e9:13:c6:
b1:b5:f0:e1:55:fc:53:1c:ad:d9:1b:ac:7a:50:e0:00:22:e9:
e1:93:b2:07:a4:27:dc:48:dc:26:19:cb:98:a6:57:88:bd:f5:
85:0a:a5:6f:90:86:a4:e0:97:bc:31:2d:39:f4:15:fb:59:f8:
b2:45:3b:8f:4b:06:74:62:e0:7a:7e:9e:97:ac:13:76:c7:c3:
8c:52:f5:e6:50:0b:6d:6a:c3:90:86:5f:65:e0:80:85:a1:21:
23:71:6c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 14:26:58 2025 by rpki-client