Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
File: IBjvCLVd2yDIgWpiGkWc25J7MgE.mft (raw, json)
Hash identifier: 43eS9BWRC1cmmvKjq0GwYBOXzVeLXYWoMrXcBzFGWfo=
Subject key identifier: A6:22:E9:97:60:AE:04:2E:96:3A:35:38:87:7B:86:95:95:DA:DB:99
Authority key identifier: 20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
Certificate issuer: /CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Certificate serial: 019A71B76F66177C122558D0C7310B1B9655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
Manifest number: 16B2
Signing time: Tue 11 Nov 2025 07:00:38 +0000
Manifest this update: Tue 11 Nov 2025 07:00:38 +0000
Manifest next update: Wed 12 Nov 2025 07:00:38 +0000
Files and hashes: 1: IBjvCLVd2yDIgWpiGkWc25J7MgE.crl (hash: 7MOeAFOSVgUa7SHFJ4L8QEamALDM5skXymR8Sqq9fMg=)
2: sg6Ke3Csa6eOc_sincTW9jDFk9g.roa (hash: JJ9uMfjWarSgHm6HNb7BDGcOt4jlyu+d939+XIEHnuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:6f:66:17:7c:12:25:58:d0:c7:31:0b:1b:96:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Validity
Not Before: Nov 11 07:00:38 2025 GMT
Not After : Nov 12 07:00:38 2025 GMT
Subject: CN=a622e99760ae042e963a3538877b869595dadb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:bc:1d:39:10:7a:97:a9:5a:74:d0:fa:39:
91:70:3a:f0:26:b6:86:34:2a:55:70:a6:99:2f:a7:
fe:0c:7f:e9:5d:ab:d4:b8:eb:ac:22:6a:80:c6:65:
32:53:95:d7:6a:e1:a1:93:b6:ad:29:5b:20:fb:56:
60:6e:d6:36:7b:65:bc:81:8b:d6:cc:f3:bf:c7:cf:
b9:ff:67:cd:c1:04:60:15:28:d1:52:a0:ea:fe:28:
0b:8d:5d:e5:10:5a:86:41:97:95:e3:da:14:cd:ea:
a3:9a:2d:30:5f:79:e0:5e:f4:a7:2a:42:4e:4f:d6:
91:9c:82:b1:df:1b:d9:07:28:64:8b:c8:c5:e7:f5:
92:fd:d1:d6:76:1d:07:a6:c0:52:3a:9a:a0:6d:52:
80:b2:fc:e2:67:28:65:93:ef:44:84:b3:6a:ac:af:
21:c7:c0:e5:5f:b2:0a:a4:7f:f1:21:0b:78:5b:7f:
c6:7a:ae:16:76:a7:5f:f9:06:bd:df:bb:8c:55:5e:
18:df:35:c5:05:66:d2:53:4e:4a:c4:ae:51:f3:ae:
12:57:d7:4f:f2:31:c2:e3:e2:ad:51:3a:0a:7d:94:
f0:a8:c6:2a:3d:47:e8:9e:58:d2:80:c3:93:b8:4d:
da:14:b0:47:74:1c:63:fa:a6:06:db:45:b4:a6:c5:
91:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:22:E9:97:60:AE:04:2E:96:3A:35:38:87:7B:86:95:95:DA:DB:99
X509v3 Authority Key Identifier:
keyid:20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:9c:b4:dc:bb:aa:26:a7:af:2a:4e:a7:a3:88:9f:6b:fe:42:
2d:22:b3:32:c3:ed:24:72:2b:ab:31:6d:70:65:16:29:e5:ce:
fe:ec:3a:86:b3:75:e2:50:b2:ea:c6:5b:3f:e3:43:cd:c6:e2:
bf:5e:a3:24:55:7a:b5:2c:04:d2:b2:f0:7d:8c:94:0f:f4:17:
e5:34:dc:05:f7:14:79:69:13:09:b2:83:1b:bc:4e:d5:5c:b9:
70:79:f5:9b:5e:51:12:c1:e7:ed:2b:58:2d:dd:1a:75:af:ae:
5e:4c:b4:36:1a:45:c3:56:bf:50:64:ab:46:0e:84:db:f7:be:
94:9f:e5:df:b9:80:fd:af:30:4a:1f:8e:54:6b:23:0f:33:26:
36:33:b9:a1:ab:c5:d6:de:aa:36:6b:5b:97:c9:6d:7b:f7:38:
a5:61:06:d1:b0:1c:5d:37:d9:f2:0b:86:ad:86:bf:59:de:0a:
64:59:9b:32:fc:f1:2b:a4:62:32:06:32:a2:28:9b:8f:02:19:
e7:7b:15:2c:22:87:f9:e3:3f:60:07:02:95:b2:8f:22:c1:f1:
cb:d6:7e:b2:b1:df:03:3b:da:54:e9:af:bc:2f:3c:db:66:cf:
06:e8:36:34:c6:99:51:78:23:d7:4e:ab:37:fd:cc:eb:11:34:
21:c5:c9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:29 2025 by rpki-client