Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
File: Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft (raw, json)
Hash identifier: X2H18tx0Ln52NL0LUzJDvjxhzW6kfQYG2CDqLpqpV1g=
Subject key identifier: C3:04:79:83:A6:78:82:32:E5:DE:EE:33:D9:52:2D:31:58:FA:E0:67
Authority key identifier: 23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
Certificate issuer: /CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Certificate serial: 019A2E20BBD9244226CE2BE1627C39D61E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
Manifest number: 16FC
Signing time: Wed 29 Oct 2025 04:01:28 +0000
Manifest this update: Wed 29 Oct 2025 04:01:28 +0000
Manifest next update: Thu 30 Oct 2025 04:01:28 +0000
Files and hashes: 1: 1--lfY911D4o-n0x13kTzxgPAa1c.roa (hash: 7jYLrsmco67v6YLtE1rUNiJwEOZGyK+AZuLqYtKHcu0=)
2: 1-PLlhObhI2KvU31PH_oGB4eDG5U.roa (hash: h2JQLRGR8RDG0rSKaLT0jUCHodG0PW/TX0LlgI0i4Qc=)
3: Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl (hash: LAduCKuoWlMZDMns/nssr0tOnt50Fbf/DO/tvcEqwBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:20:bb:d9:24:42:26:ce:2b:e1:62:7c:39:d6:1e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Validity
Not Before: Oct 29 04:01:28 2025 GMT
Not After : Oct 30 04:01:28 2025 GMT
Subject: CN=c3047983a6788232e5deee33d9522d3158fae067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8a:55:e0:20:3e:0e:1f:c8:50:2d:3b:73:6d:
ce:86:90:a6:09:fd:21:ab:55:11:43:d7:30:09:e5:
75:26:4f:c3:fa:d9:fd:82:c8:44:62:65:c0:84:a2:
67:85:8c:1e:09:37:9b:20:82:2f:79:84:ce:d2:4b:
39:a2:a1:56:fc:b3:b1:55:3e:66:ed:0d:46:f5:2b:
21:e9:45:50:a1:34:dd:29:9d:74:5f:61:33:e3:f8:
8a:d9:8f:31:67:c0:64:c1:07:1e:ce:ad:a3:7e:7a:
df:c9:16:b2:fa:70:9d:eb:fa:0b:4a:bd:e1:b6:76:
b1:d3:79:76:8e:51:11:0c:e4:e2:43:31:1b:09:ce:
b4:cc:38:d7:db:52:6c:e9:ae:91:ab:5f:de:fe:5d:
b2:79:a7:5b:5f:c0:9c:6a:3a:c6:61:27:af:58:9f:
47:47:d7:eb:06:5d:98:17:82:64:31:26:84:c1:9c:
e2:8c:b5:75:53:e1:ab:a7:34:5e:f5:f9:04:52:89:
57:0c:5d:59:ae:af:a2:57:c9:a5:ff:22:8c:75:db:
17:c4:52:7c:82:a4:af:6c:f3:4b:7f:97:e1:f1:af:
09:e4:d8:20:22:f8:cc:65:a3:81:c6:7c:b9:01:25:
91:c2:5f:c7:8a:5d:75:bc:b4:77:9a:39:b3:0f:00:
08:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:04:79:83:A6:78:82:32:E5:DE:EE:33:D9:52:2D:31:58:FA:E0:67
X509v3 Authority Key Identifier:
keyid:23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:bc:84:2d:a0:60:64:7a:c7:b1:99:4e:1c:d2:f1:2a:c0:6e:
08:e2:c0:18:a6:92:22:6c:24:34:10:fb:cd:72:ff:d8:df:39:
0d:30:aa:c6:5f:dc:f7:44:55:f3:95:9a:0d:7a:79:9a:85:95:
d0:46:03:7b:24:7b:b8:fe:41:d4:c8:43:35:e1:c0:e7:d7:c0:
70:31:cf:b2:d0:cd:f2:95:04:b1:e3:d6:e9:3f:7d:9a:fa:df:
19:8c:1c:b5:7d:5a:ab:90:01:4a:0b:1d:c6:61:16:fe:59:db:
e9:df:76:d3:00:e7:28:28:07:c1:b1:b2:a1:d0:00:85:88:63:
5b:c8:1f:66:b1:60:a5:1b:41:9b:01:b9:f3:59:97:27:32:cd:
53:3b:1e:68:d0:7c:86:d6:50:c3:6b:c8:17:3e:19:71:52:49:
df:21:64:5e:e4:f5:5c:13:38:ba:b4:fd:55:88:26:a7:89:3e:
a7:cf:ca:36:8c:64:b4:b2:50:a5:e5:7d:1b:81:10:ca:53:2b:
db:02:b1:02:1c:eb:23:0e:23:e1:36:bb:61:27:c2:06:5c:b7:
ea:d2:8e:96:ed:16:67:bc:45:59:18:f6:07:12:f0:e4:4e:ab:
2f:ab:3b:28:d4:6b:d7:08:4a:48:cd:39:c7:f3:b9:e2:0b:62:
bf:92:03:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 05:31:36 2025 by rpki-client