
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
File: IB_jD8a0sND2204b-71QGV3KV1w.mft (raw, json)
Hash identifier: sjSDuTaBrUQinMQyYhFFZlad9f+hkOzMwc83WHX5eF4=
Subject key identifier: 09:9A:F5:86:5E:8B:A6:25:FD:E6:E7:A2:DB:31:D0:BA:D8:78:D6:99
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial: 019A20D2521B4E8EDD5C84BE7051DC8BAE13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
Manifest number: 1704
Signing time: Sun 26 Oct 2025 14:00:45 +0000
Manifest this update: Sun 26 Oct 2025 14:00:45 +0000
Manifest next update: Mon 27 Oct 2025 14:00:45 +0000
Files and hashes: 1: 4Gcae_TgkqRGfUsxPV5DJhfgyWI.roa (hash: paAdpC7qR+39s63v1lKKgqBwKLqwrzz8gisXlWTAmhc=)
2: 5E90rYIvCMDpGsIs3-NkraLYuv8.roa (hash: +YypfQeEbAGU3FeS2PhNIE1YSOJOl4GeH2O/62cFjDI=)
3: BhPcXGYnux6Htrr0geNPo2dWGdU.roa (hash: PTzfPxeNLPc/h/6D3ZpRk3JrHog5IaXB8oZUZl5iIcI=)
4: CV8BH6QqqPLT40ybYR57zHuITz0.roa (hash: wm6WquYdkguvcYg3PAEhLwWwYG/+gCf3lNo5BB9WLJU=)
5: HWr5mjO0pCI1Vd4EP8Vsj0SbdDk.roa (hash: +GccY64PF6EoLu4o0b6AELGvN60tAWxw+ayqy5DT/8Y=)
6: IB_jD8a0sND2204b-71QGV3KV1w.crl (hash: hNBMlrzkP2fASgp4euLnqHDqgwosZvObkQ7UzuoF3vg=)
7: IJfxzs2X4cnbV8oPCRMYN2tzTtk.roa (hash: AwHWst2zHFb3hOVHS8cOQNZo/ytidV4zeGK2ViUjB10=)
8: Jb3G42rmQZaFwwdUOSNnbExAB1A.roa (hash: 1th08y4K0FUm4z+TLV/vXPdjR8Ng5KU2mnpnZhL8EBQ=)
9: MVj7HeSBvInIalrqufIBH8fKRoI.roa (hash: DxnNzMl8A0PYv0GRWFqxaL90B+shZhnUh2ZmOg4PM8E=)
10: MewT8wuMGfdVhTwmRM4TncORW08.roa (hash: 6kSDhYAugYSl0WrTiw8QRQya1ahduQViXnb9qN2HSOY=)
11: OTrigJ7_aPNFptL9-1H351sJknI.roa (hash: K/oqf4mDjIXLt7R/zbvZCfYf4v02mbWbP2zavJ0lff8=)
12: P3f_XNSuhVmZyRxdAPRJ84YNlXA.roa (hash: lo7iZTplZ87A4iJ++BaieabRH6sKtCtDX2XXqRtA5yU=)
13: RrbTdF6fRUGHl3RbUer2JdR3V6Q.roa (hash: NjhRh9Ynh+xjxteJ6n1t1coSm8Ha5SNUei3SRsgIj9Y=)
14: TjSH3W6imQ9XDjdn4GvtR5L0ThM.roa (hash: oS+XHOTP0lr+oOSwM3Jm1wiP14cg9ppm8BuvyOD/XlM=)
15: XT5hbM3hN0uWeQo78-4wXcwwUT0.roa (hash: SvbDE43Viqioo219I0DAuxFJK4VGXf3/3TDJAtfLyTs=)
16: eWk2WvIGvufYh6GSD7WPRpEjVmk.roa (hash: 861KbddJZFU31BhF9p6+lRipwRX0U3jrOqqTaMuNKdU=)
17: ejzl0ofmzawIFodS3w9DT80Q_Sc.roa (hash: pqNkIe/f5LGm6clq4rxSpp7oiX85pDpRj/cIU4SqPjI=)
18: fWnPtpRNC8zgbKiXYtNqxhdRL6I.roa (hash: m/6fVl/bjmqyGI5dn716lOlRlKQjcsdkUb01DH+aLtU=)
19: js3FolXTNbl9FECoYSqnW-MLw0A.roa (hash: l+vnWLzEj6U/PJzE4BCRuD1dAjg4yzYHTVAeiPyP5AQ=)
20: w_oxaJYBSRv6YGnAjIebPG-6n6g.roa (hash: sU92Ri+ayKRIGTYAdjVvh3Xj8xCFrEDz6vd3EC74pJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:d2:52:1b:4e:8e:dd:5c:84:be:70:51:dc:8b:ae:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Validity
Not Before: Oct 26 14:00:45 2025 GMT
Not After : Oct 27 14:00:45 2025 GMT
Subject: CN=099af5865e8ba625fde6e7a2db31d0bad878d699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:50:35:af:c6:e2:66:94:52:d8:a3:79:bc:8c:
5e:74:e4:04:61:f1:2a:9d:3e:07:42:40:ae:34:88:
ba:13:b9:7b:3a:14:2a:19:41:52:1c:df:2b:83:3e:
49:84:3d:96:3f:bd:62:cb:cc:d0:49:35:a2:77:92:
af:f6:8f:d2:54:6f:be:ab:2b:27:d7:67:44:77:50:
f5:61:f5:3a:54:55:92:30:69:e6:55:e8:87:c4:08:
38:4a:ea:d3:07:c4:de:6d:2e:9d:57:9b:26:0c:10:
9a:e5:a1:02:47:3f:f7:67:a5:21:37:ab:b8:1e:27:
e2:a0:4e:84:c5:37:e6:d1:cc:14:a6:d2:a5:13:9c:
c1:b7:c9:1b:73:17:55:08:47:b1:30:26:9f:e4:38:
f5:f7:34:c1:9e:a1:b7:c2:34:11:ac:9c:cd:50:73:
75:8b:f3:bb:fb:0e:f6:0a:28:31:09:ac:c7:af:e7:
f3:ef:d1:2e:e6:a2:e5:b9:08:95:0b:85:e8:4d:5b:
f7:cb:b3:e3:a0:a1:6c:0c:45:a9:40:d8:19:ad:be:
4f:af:aa:65:a9:dd:85:66:5e:ab:97:34:44:7d:79:
70:df:9b:4f:3d:46:a9:de:aa:11:72:98:e7:0e:39:
68:66:0f:66:90:b5:4f:19:d3:5a:2b:9f:08:04:4d:
75:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9A:F5:86:5E:8B:A6:25:FD:E6:E7:A2:DB:31:D0:BA:D8:78:D6:99
X509v3 Authority Key Identifier:
keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:79:c5:33:06:9d:49:8f:32:9a:a9:22:a2:0b:4e:35:4a:81:
d2:5f:be:d6:74:eb:db:35:83:ef:2f:df:44:2d:13:44:18:8f:
8d:f6:69:68:f3:4a:5f:2f:24:cd:59:4c:db:de:8a:c2:d5:d9:
70:8a:29:4c:a5:40:66:28:52:cc:c1:7e:41:35:42:06:2b:c2:
73:82:75:87:88:c2:df:f2:6c:1c:49:d2:ea:65:4b:df:84:e8:
9f:7c:ac:fe:76:d7:06:77:f2:43:c3:01:5b:b1:d5:7a:91:9a:
54:04:c5:a4:9b:12:9a:60:df:cc:96:45:bd:d2:06:24:34:9d:
38:fa:1b:08:76:e7:9a:43:75:b9:18:1b:22:8b:5b:5e:85:f6:
a1:63:a6:c2:e6:fc:59:0c:e3:b3:e5:7a:96:42:ad:89:75:92:
2c:41:42:0e:f5:e1:09:02:5f:65:c6:bd:d9:79:86:0b:16:a6:
c2:0a:f3:4d:09:2b:77:4a:25:9a:d1:d7:1f:6f:77:9d:26:ff:
f4:6b:b4:a3:3f:3c:fa:68:58:69:05:8f:c5:77:d1:b0:f4:12:
d7:59:58:9a:15:ed:a4:27:cf:f0:18:88:6c:5e:41:5d:9b:5a:
23:52:c4:19:07:7e:8d:00:6a:1c:a5:ff:15:4b:1a:e3:9d:fa:
15:83:30:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:37:54 2025 by rpki-client