Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
File: I2YsmpgK11hGUKuqNUW56pHT414.mft (raw, json)
Hash identifier: v3+GsxquvgYpd7tlPc5g8+je6iqPjoAyLow11fQ/qW4=
Subject key identifier: EF:6E:0F:F1:C2:0A:03:DB:DD:B5:93:39:63:43:82:BE:62:C8:2E:42
Authority key identifier: 23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
Certificate issuer: /CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Certificate serial: 019A225249A84FBBF129A04213BAB4874D3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
Manifest number: 16F7
Signing time: Sun 26 Oct 2025 21:00:09 +0000
Manifest this update: Sun 26 Oct 2025 21:00:09 +0000
Manifest next update: Mon 27 Oct 2025 21:00:09 +0000
Files and hashes: 1: C3a8w3EA0yZf6c0xKrOAJTxFR18.roa (hash: LNpEHJw7nSfysWTvnjy399UaYBj+VVtM2qrA/gSp1Ss=)
2: I2YsmpgK11hGUKuqNUW56pHT414.crl (hash: p54pv7bhc+KNAtXB+RIq3HMJ7yfghFeWV2gHEm8Rhko=)
3: SVlLEhHqyoa8VmAwyeAz-eO7tmk.roa (hash: 3GqZDoa/8luHJb3c9fM/8sF9/CWphehWtTWgxsoVdy8=)
4: m-Ncfpuw9lyFAGvhN6SO1U82ZPI.roa (hash: /M7ImEM1ZD0v5nu/Nb9bLOvnyebMcwld8IBc6QoNAjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:52:49:a8:4f:bb:f1:29:a0:42:13:ba:b4:87:4d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Validity
Not Before: Oct 26 21:00:09 2025 GMT
Not After : Oct 27 21:00:09 2025 GMT
Subject: CN=ef6e0ff1c20a03dbddb59339634382be62c82e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:25:b1:86:d8:e7:8b:cc:be:0f:6e:b3:15:e6:
0b:6a:f1:f7:60:62:3a:35:a9:ca:76:cc:a9:2e:94:
e7:2c:b1:23:2e:88:fa:a3:bf:10:e8:71:66:bb:92:
88:21:22:2e:84:4f:97:62:94:ca:c6:43:f6:65:29:
bf:e1:50:b3:dc:4e:33:0d:b9:4d:b7:9a:6f:3b:9f:
26:c6:8a:74:20:f7:05:52:f0:82:43:78:e8:ad:85:
76:4c:2d:88:1f:13:32:38:c8:18:91:a7:25:a5:65:
15:b2:ac:04:91:d9:74:4c:8d:6d:a3:32:1e:57:1f:
dd:6a:24:d1:af:76:e5:18:29:23:fb:e3:ec:24:4c:
61:7b:ec:79:eb:31:a9:d4:c9:66:ec:ee:03:a7:d0:
51:d5:30:a0:a2:3c:1c:c2:33:b1:98:c2:eb:f6:ee:
29:31:30:28:c5:50:a2:c9:a4:6f:fe:c1:81:00:9e:
06:6d:93:f2:12:9f:4a:5f:7a:04:96:a8:fe:42:51:
7d:d2:85:16:65:00:83:fe:c2:af:86:a6:af:86:05:
12:c3:de:71:bb:99:a4:6b:fc:a9:e3:48:ac:04:ff:
93:98:3d:30:1b:a2:a4:88:87:02:0a:5e:f0:92:bb:
e3:16:83:e1:81:9c:c2:cc:bb:a7:af:a8:bf:c9:0f:
b6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6E:0F:F1:C2:0A:03:DB:DD:B5:93:39:63:43:82:BE:62:C8:2E:42
X509v3 Authority Key Identifier:
keyid:23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:40:a6:84:4d:a5:53:15:b9:68:10:df:ff:61:21:67:54:50:
45:0a:dd:d8:b9:a5:31:fa:26:f5:30:cb:7e:e5:bc:8d:37:95:
0a:13:ec:09:1e:84:07:89:ca:ef:1a:48:15:06:cb:89:ff:bd:
84:a4:dd:26:1a:0f:63:e5:51:4a:d3:c3:c8:e7:81:71:00:3c:
43:f5:3f:b1:52:e3:07:4b:cf:09:bf:d5:e9:1a:b1:7b:f2:4f:
d5:4c:aa:c6:ba:01:5d:da:32:19:a2:6f:1f:ac:35:c4:4f:63:
16:80:c6:88:a5:a0:b2:4d:0e:86:a8:2e:3a:a6:64:7a:01:10:
fd:71:33:c8:6a:4b:61:3a:ed:b9:dc:0a:3a:ab:93:3e:2a:cb:
de:17:3c:f0:ac:11:cc:5e:ed:7b:0a:25:e9:05:e0:97:88:47:
f6:5e:9e:7f:a1:49:2c:54:34:eb:f1:57:e9:cb:f5:eb:45:d5:
73:5b:c8:f2:7a:4e:ee:d0:f0:79:08:a4:59:00:3b:40:d1:c7:
51:ff:01:e2:5d:42:22:7b:fb:81:9e:9a:1a:6f:aa:90:98:44:
5c:ee:79:01:db:4e:d0:7b:fd:f1:2d:4f:5d:12:d8:d9:52:6a:
10:25:2c:df:2d:42:44:8c:b6:48:52:da:37:56:d7:12:12:18:
0d:a0:ba:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:46:38 2025 by rpki-client