Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
File: IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft (raw, json)
Hash identifier: QwVtvXfkvXV3UZsPdHc5G/g3UUCH80NpDe/j/Yb1Q/U=
Subject key identifier: 17:73:FA:4C:DE:1C:6B:70:E5:A7:12:55:5B:1B:13:0B:60:DC:94:5A
Authority key identifier: 20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
Certificate issuer: /CN=209faf93524bb80774ffce9341f495a8fb318f10
Certificate serial: 019A258A344F708D14D0E6C0E4A3C17873D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
Manifest number: E1
Signing time: Mon 27 Oct 2025 12:00:05 +0000
Manifest this update: Mon 27 Oct 2025 12:00:05 +0000
Manifest next update: Tue 28 Oct 2025 12:00:05 +0000
Files and hashes: 1: 6q7TVMacTBaYR4P4ix3oetf6VRE.roa (hash: uLRq0asuqIHTiwS92wqc71gnPUUH1B7QJ0+2fDVufHI=)
2: IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl (hash: JC64elikta5+BoYKFwIMAjZO58zPmtVaCKYVIWTaWZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:34:4f:70:8d:14:d0:e6:c0:e4:a3:c1:78:73:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209faf93524bb80774ffce9341f495a8fb318f10
Validity
Not Before: Oct 27 12:00:05 2025 GMT
Not After : Oct 28 12:00:05 2025 GMT
Subject: CN=1773fa4cde1c6b70e5a712555b1b130b60dc945a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a5:46:9e:d8:db:30:2d:81:08:31:05:26:a2:
3a:35:da:7d:0f:3a:dd:c4:cb:04:d8:76:8a:78:15:
49:19:56:6d:3d:d2:bb:84:3c:ee:b7:6c:a4:30:bf:
92:7d:6e:86:48:98:76:b0:35:f4:c2:fa:64:ee:e5:
9c:1d:fc:b2:09:fc:65:46:6b:2e:5b:fe:94:a4:cc:
cc:36:c4:cb:4c:9b:55:be:85:1c:46:c5:ae:e2:27:
82:d7:97:94:af:2c:4b:d0:8f:af:2e:96:b2:ba:be:
85:14:1b:04:22:44:5c:98:3f:21:21:bb:23:8f:69:
61:36:81:f5:a7:bf:92:5d:27:5b:2d:1c:ba:c4:17:
af:6a:6e:41:38:bf:94:d4:33:77:e2:80:06:8b:f5:
c1:cc:e0:fb:6b:03:0f:7e:bc:8e:23:b5:51:e7:b9:
09:6c:7f:37:76:45:61:1d:77:9c:f5:63:5f:df:35:
ed:22:9e:a3:51:8d:68:e6:7c:78:40:91:02:b3:2c:
16:78:3a:14:14:07:24:e4:6d:fa:2a:78:a5:30:13:
e1:a0:96:d8:a7:e6:fd:cd:1d:98:91:1e:fb:75:3e:
bc:eb:35:0f:67:27:0f:fa:f6:ae:79:fc:83:80:d2:
1e:bf:2b:0f:70:d8:35:2d:65:e0:51:b3:23:2d:8c:
80:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:73:FA:4C:DE:1C:6B:70:E5:A7:12:55:5B:1B:13:0B:60:DC:94:5A
X509v3 Authority Key Identifier:
keyid:20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:95:e8:26:de:23:4e:fd:dd:47:00:d2:82:1c:50:44:13:d4:
ed:2b:06:16:73:3d:01:22:26:69:4d:77:cc:78:57:02:b5:22:
dc:cb:43:77:aa:0d:9f:1c:22:99:fb:35:0a:bb:1f:fe:7c:15:
c7:9a:04:ba:ca:8c:da:79:0e:65:ff:3e:d8:e5:b4:ff:13:b2:
32:6d:5a:69:dd:dc:b2:05:60:99:8f:17:1f:1e:41:69:58:8b:
6b:73:22:a8:82:e9:0c:54:d6:22:cb:3d:59:c1:2c:8d:9c:2b:
b4:2c:36:20:bb:27:0e:6b:34:b5:ce:69:7d:1f:53:4b:55:b9:
f7:92:dd:72:af:41:e2:6a:29:79:48:8f:27:ff:e7:88:d9:22:
27:46:75:4a:35:b1:53:36:bf:ee:0b:eb:9d:29:5f:16:67:53:
aa:d4:63:df:fe:23:e8:8d:a4:f0:3f:20:73:d4:1b:1b:95:29:
dd:51:b1:4b:e1:57:90:20:83:c3:2f:4b:36:24:02:2a:15:4a:
63:73:2c:c2:5e:7d:bc:6b:d5:a0:4c:50:30:12:66:11:86:23:
51:3c:06:18:d7:0d:b8:a7:98:7a:6e:4d:8b:2a:67:bb:65:6d:
ed:1c:5a:00:28:6f:47:9d:b6:2f:7a:4f:20:61:df:35:ee:76:
0d:ad:73:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:05:12 2025 by rpki-client