Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
File: ifKArlGVUMen9JU6sn16593rE0E.mft (raw, json)
Hash identifier: FUT23TIkWRMck+RavK1awnhv9NP3fkqDBPIWlpu3NXY=
Subject key identifier: DB:4C:83:ED:2E:7D:EF:4B:AC:1E:99:7D:BF:F9:26:C7:D9:85:A5:EF
Authority key identifier: 89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
Certificate issuer: /CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Certificate serial: 01992E22CD7A04FF01D62B7C528D26D8A625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
Manifest number: 1609
Signing time: Tue 09 Sep 2025 11:00:56 +0000
Manifest this update: Tue 09 Sep 2025 11:00:56 +0000
Manifest next update: Wed 10 Sep 2025 11:00:56 +0000
Files and hashes: 1: 9dTi4wdiI3Tu8z52gakpEQiMUok.roa (hash: 4zYsVsn8fJnXPhGX6xQByXU2W5bf/FC7mJXJpk5+gzY=)
2: ifKArlGVUMen9JU6sn16593rE0E.crl (hash: ahGk3aHiwJgO0r7KjLktGvAZb63hRh4/OiBmmmHLXwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:22:cd:7a:04:ff:01:d6:2b:7c:52:8d:26:d8:a6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Validity
Not Before: Sep 9 11:00:56 2025 GMT
Not After : Sep 10 11:00:56 2025 GMT
Subject: CN=db4c83ed2e7def4bac1e997dbff926c7d985a5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1f:ce:df:79:9e:73:5c:6d:b3:15:11:d1:02:
a3:37:0b:37:79:22:3f:8c:46:d8:0c:cb:79:5d:ba:
a6:da:b0:e4:cc:59:78:05:c8:e4:2a:8d:15:d4:4a:
da:3f:74:ad:d5:35:49:a6:b8:a5:fc:53:e7:6c:e2:
07:db:51:e6:e8:72:de:a0:9f:48:6d:05:c4:36:c9:
82:78:82:95:b9:a5:92:b0:05:b1:68:94:80:de:86:
16:70:cd:14:64:df:22:b9:9c:f6:d9:26:40:57:ec:
4e:7f:6e:04:62:2e:37:77:a5:f1:a3:08:9b:41:cf:
da:4c:a0:17:fd:e3:28:80:54:a9:aa:a3:94:0d:5f:
5e:05:79:ad:2d:78:9f:9e:c7:c9:b5:49:60:48:af:
17:12:c9:ab:2c:12:9b:ef:da:9f:51:9c:6a:82:74:
ed:76:fb:16:02:d7:13:11:4b:fd:23:79:02:2d:59:
cb:ea:91:0f:ca:77:42:0b:52:55:a3:8d:c1:74:8c:
a9:b3:61:f6:3b:49:d4:4b:88:62:7e:15:42:09:70:
41:85:7b:77:2d:88:fb:c1:90:bc:6f:1d:3c:71:23:
c2:4e:c1:5a:9f:e1:19:42:ee:da:ce:55:3c:c3:4d:
e7:26:8a:a4:08:15:b1:57:08:6c:a0:5f:19:93:f5:
f2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4C:83:ED:2E:7D:EF:4B:AC:1E:99:7D:BF:F9:26:C7:D9:85:A5:EF
X509v3 Authority Key Identifier:
keyid:89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2d:1e:4e:ad:3c:94:a8:84:54:e0:e9:c0:46:8f:21:b3:8e:
ae:7b:89:31:45:17:86:29:d5:e7:e3:06:62:04:49:a4:33:77:
68:62:eb:7a:2d:6f:21:8d:3b:2c:e0:0c:5e:17:b1:62:5a:25:
77:a7:c4:31:c0:3f:52:e5:72:2b:a0:50:4f:5b:e5:ed:e3:8b:
27:00:82:da:33:22:da:a0:c4:0d:26:7c:c9:1d:c6:36:4a:a9:
85:10:5e:91:33:eb:4d:3a:71:8e:c7:1e:01:b6:b4:ac:c7:75:
88:73:ca:3a:ef:4c:bc:d4:f1:68:77:65:c2:82:14:ec:c7:bf:
cd:52:bf:aa:7c:be:43:bf:d2:93:76:9c:e2:68:c1:e9:82:a2:
a8:7b:0e:31:cb:f6:ae:ec:69:9d:50:04:e6:fb:85:c4:69:6f:
44:34:a4:f3:e2:ec:dc:32:52:10:5c:4c:a9:f4:f5:80:f8:4b:
c7:94:0a:a6:1e:9b:f7:2c:aa:38:ca:65:ec:9f:41:ff:28:c3:
d1:21:59:9e:98:3a:81:7c:81:01:91:27:7d:51:2d:2e:68:2c:
b2:2f:ba:46:d2:6d:a6:39:fd:91:ee:43:e4:3d:0f:fc:f5:03:
9e:4b:9f:ed:77:13:6b:5a:6b:29:5e:51:80:4b:5a:c6:38:e2:
02:1b:99:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 17:33:57 2025 by rpki-client