
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
File: IWmMHNxm3ChdD4B2KcRiYaiLLec.mft (raw, json)
Hash identifier: 0OhVK9XPajSt11WUZXqFkeBIE+oEW9v85P3AhSqc6nU=
Subject key identifier: 0A:60:1A:D4:F1:95:8C:25:65:3C:55:70:D8:E1:DF:0C:FC:6D:A3:53
Authority key identifier: 21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
Certificate issuer: /CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Certificate serial: 019A221BE2D62F410B81553A82D21F1B7A84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
Manifest number: 16FA
Signing time: Sun 26 Oct 2025 20:00:44 +0000
Manifest this update: Sun 26 Oct 2025 20:00:44 +0000
Manifest next update: Mon 27 Oct 2025 20:00:44 +0000
Files and hashes: 1: CMn2soeES3hR-sK_8HvrSujpCpQ.roa (hash: VTuRr4KfXEripqS9AelciewMmdMPiSyij0Vs8ogbZ90=)
2: IWmMHNxm3ChdD4B2KcRiYaiLLec.crl (hash: Mm2rkCVRqOXS6qZsonoLwBOLUBPedSJ3drOGQ+Rbq6Q=)
3: Yn3cTmXIbvNO5rDZUMkU20vEcu4.roa (hash: iGrYsnlws/ojR0+NVYUlir1CfMVL/ZNyCA/PzakH0rc=)
4: Z_2-Zbi4vsdnVpg2d_lnWwbhvN4.roa (hash: 8GDUJ7ZhRwTXBlYLdtF6LAMc571ge2c8D8UbSUf3lg0=)
5: gKn9w2HjuJeDuvDGB4i7KMCUEOw.roa (hash: 9RL0o8ItMk9D70n/zJYOrxlmErXzvmrmjIlOb2QhCXA=)
6: vobE3yEGfIGL1cB1AJTldnCRmXE.roa (hash: wMXrPRBz6jhuzSeDkQhA2W+belZhJmWY3V+ZCFJ8/9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:e2:d6:2f:41:0b:81:55:3a:82:d2:1f:1b:7a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Validity
Not Before: Oct 26 20:00:44 2025 GMT
Not After : Oct 27 20:00:44 2025 GMT
Subject: CN=0a601ad4f1958c25653c5570d8e1df0cfc6da353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4e:11:b8:de:ce:82:91:9c:2e:96:09:d7:57:
fb:3c:5d:1e:1f:b4:bc:60:c2:e5:6d:ec:7a:fd:00:
52:91:43:b4:d8:ba:84:97:59:ec:95:78:67:88:04:
dc:8c:d6:5a:4b:aa:9e:e3:d8:87:93:cf:d3:76:37:
82:b4:5c:0b:99:3e:fe:47:6d:37:62:17:2f:1d:d1:
12:84:b0:0e:cb:74:71:74:3d:77:c1:24:28:1c:67:
9c:5e:82:2b:7e:71:0a:17:59:05:47:ea:83:b2:2a:
a6:4c:c6:40:f7:87:22:51:1a:61:d5:25:75:dd:27:
6d:cf:97:ae:12:d2:b9:30:0a:26:bd:4d:08:c7:35:
57:c9:3b:e6:89:7e:95:6d:9a:b4:41:37:44:4f:fb:
cd:ad:43:12:89:72:23:5e:af:d1:e0:d0:48:6d:4e:
8d:f4:ef:7d:88:eb:1c:b2:13:4e:dc:bb:52:d5:e3:
c9:77:ad:5d:c6:eb:f0:e8:96:f5:ef:db:81:ba:2c:
fb:e5:ed:36:03:1a:54:31:ea:cc:b1:1f:f4:55:3e:
95:72:40:c0:0e:f0:95:0f:16:9f:3e:d6:fc:b0:95:
4c:b6:66:8e:10:f1:96:37:90:fe:03:f4:c9:a8:e9:
9c:40:5a:59:3c:db:b1:c4:b4:18:83:00:a5:14:84:
39:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:60:1A:D4:F1:95:8C:25:65:3C:55:70:D8:E1:DF:0C:FC:6D:A3:53
X509v3 Authority Key Identifier:
keyid:21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ed:27:a3:65:4d:8c:0a:a8:06:fa:6c:b1:1a:92:d3:c2:98:
a7:27:82:45:bf:72:08:18:42:e8:22:1c:f4:22:ee:9a:ae:94:
e6:77:6c:42:69:46:89:0a:38:ba:83:65:27:94:ed:f8:97:62:
b8:36:c5:e9:c7:f9:01:81:3f:8b:b2:af:a9:9b:39:be:ca:dd:
b8:01:56:0b:b7:37:28:a3:44:4a:f4:76:8a:87:c9:5a:89:b1:
ed:e5:6b:4d:6b:4d:48:48:e3:a8:9d:e5:a7:f7:6c:82:7f:f1:
46:94:10:d7:66:f5:26:24:3a:b6:13:06:d5:dc:6f:f3:32:14:
88:f9:f7:95:fd:38:4c:5a:e7:76:64:23:29:00:e0:6c:02:b4:
53:70:65:2f:e5:de:39:0b:bf:62:d4:4c:68:6e:f9:e1:4f:b8:
69:df:b1:fc:67:1b:2c:65:19:3f:99:56:99:bf:3b:c6:fc:1d:
70:4b:d1:e2:3f:a8:6b:ef:b2:79:b8:1a:6c:0f:77:b5:ff:3f:
04:ea:f5:cd:47:e1:4c:2f:f2:e4:76:6d:03:04:f6:69:cc:80:
17:a2:01:0f:69:e6:91:4e:83:d3:df:99:6a:48:eb:49:d3:b1:
81:68:22:92:97:5e:50:22:c3:54:3a:fc:da:68:87:96:c4:90:
e7:7e:e9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:42:14 2025 by rpki-client