Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
File: IjbtX1Yj7et5EKzTHV9u6B5csX4.mft (raw, json)
Hash identifier: 98N/sd7rCGheYhNHsqDpmhKAVjjBf6T2bjqOStKjLCg=
Subject key identifier: 14:C3:30:A8:B9:72:06:38:3B:40:CB:77:21:66:F3:69:E4:16:59:8E
Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
Certificate issuer: /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Certificate serial: 019951F923B5A69BE5B9210DB6788D640FDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
Manifest number: 0E6F
Signing time: Tue 16 Sep 2025 10:01:45 +0000
Manifest this update: Tue 16 Sep 2025 10:01:45 +0000
Manifest next update: Wed 17 Sep 2025 10:01:45 +0000
Files and hashes: 1: DY_YBD7dUEwRu5f1VApN2Xto06Y.roa (hash: kRig8nqc2JDYyWblKNLJUeoM3OkrL2nvfEXQMIcNjPI=)
2: IjbtX1Yj7et5EKzTHV9u6B5csX4.crl (hash: hzRoDsp70do7rnn6N11PR19uVdPB6VQ40rRxZj86RrA=)
3: l9Ip7JI4fAFd10Cj77KHHSrnVWw.roa (hash: SkELgqgLspURpsKcvlJgINn6NNXlC7+9EjVyn8WnT2A=)
4: oxqh0Vlunc9_jJzsSDgtivZ6iaI.roa (hash: O+sbnF0yUj4wLiTH2KtiKCTxn2FjAX1wiARhxbkhBM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:51:f9:23:b5:a6:9b:e5:b9:21:0d:b6:78:8d:64:0f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Validity
Not Before: Sep 16 10:01:45 2025 GMT
Not After : Sep 17 10:01:45 2025 GMT
Subject: CN=14c330a8b97206383b40cb772166f369e416598e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:49:4b:f5:9d:e4:a0:e2:ec:a7:51:e4:b6:6e:
a2:b8:6d:ac:03:96:20:a0:50:2a:a8:a8:f5:8d:32:
34:4f:bd:9f:94:64:56:d2:bb:e2:e4:e3:24:16:e5:
a0:75:0d:e9:bf:5b:bc:5d:90:8e:b8:9b:32:01:53:
c5:f3:25:3f:57:94:b2:79:89:ea:3e:82:8e:47:e3:
87:e0:d0:62:9d:3f:3c:b2:b2:68:1b:02:e7:72:9d:
cb:f9:6c:65:21:58:51:56:cc:d1:58:be:c5:7d:21:
98:85:d5:d6:f0:c1:ce:aa:e7:f2:f4:15:2b:e2:c9:
59:98:19:60:41:c6:d8:5e:43:be:15:39:11:77:5c:
45:bc:e3:a8:b6:3b:31:be:55:ae:92:77:c4:96:22:
98:f8:66:f3:61:85:d8:a2:dc:c7:74:54:57:ea:d9:
b1:fc:99:ae:2c:04:34:ed:f8:bf:08:f4:e2:f1:4a:
87:59:cd:da:cd:30:4a:b7:27:c1:b1:df:9c:8e:cf:
10:27:f8:88:2d:a7:65:17:6a:19:78:91:00:c3:9a:
7d:d5:64:f3:fa:80:31:eb:b1:67:eb:30:52:ca:77:
20:13:a5:99:9f:8b:27:63:19:5b:48:e1:b6:6b:b7:
7f:cd:cc:2b:5e:7f:d5:3c:e6:9f:4c:dc:59:a8:fc:
c3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C3:30:A8:B9:72:06:38:3B:40:CB:77:21:66:F3:69:E4:16:59:8E
X509v3 Authority Key Identifier:
keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:27:69:32:b7:df:71:bb:ab:7d:76:64:54:42:3a:68:d1:db:
38:6a:ea:a9:f0:2c:0d:da:65:c1:4e:d6:6d:0c:51:f1:b9:be:
6b:10:c6:12:6a:d6:6f:ab:50:3f:cb:f2:14:6c:b8:df:9d:61:
c0:fc:59:02:07:b0:6b:90:fc:d5:f1:82:8c:a2:36:88:50:2c:
e6:4e:b9:a2:56:97:f9:5e:86:c1:71:a7:49:e8:27:9e:5f:8c:
59:78:13:38:ca:82:60:57:9c:67:f3:50:11:eb:9b:a2:9f:1d:
a3:53:0f:c2:b8:75:63:5b:fb:6a:0e:01:12:e2:6c:6e:2e:c1:
91:ff:a0:f2:5c:f2:5f:72:a4:7a:0a:12:6d:24:b3:65:b5:82:
7a:d5:79:2b:32:2d:97:56:3a:bc:67:00:c2:27:06:58:ca:23:
ff:92:bd:8e:15:8e:f9:a5:f4:cf:89:6c:12:71:ef:27:4d:97:
2b:70:34:7b:62:0f:bf:de:23:83:88:86:53:ea:74:cb:ba:61:
31:7e:86:4a:75:b8:c2:56:00:5f:75:28:e5:f2:f0:b1:5d:68:
44:56:f0:6f:54:94:53:8d:9f:54:96:d1:45:d7:06:3c:c9:0a:
b8:ab:60:a7:e3:98:0f:49:c0:05:1a:8b:c6:3f:b8:65:d8:45:
6f:74:bc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 12:22:46 2025 by rpki-client