Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
File: I9j2IJmVBsyG11SOpygrsSnwLWg.mft (raw, json)
Hash identifier: dR4GW8vtQNrMvdMg0Q4oJEQpYsBQdn8tRcpNr8ok7iU=
Subject key identifier: D4:E9:00:5B:CD:20:18:4B:DC:58:AE:D0:E5:41:AE:40:18:DB:3C:4C
Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
Certificate issuer: /CN=23d8f620999506cc86d7548ea7282bb129f02d68
Certificate serial: 019A7149F5BB298579E84BB75552B2EFD6B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
Manifest number: 130B
Signing time: Tue 11 Nov 2025 05:01:03 +0000
Manifest this update: Tue 11 Nov 2025 05:01:03 +0000
Manifest next update: Wed 12 Nov 2025 05:01:03 +0000
Files and hashes: 1: Ai_jhfn0i9Wvxs1dcGNuIQFRbQw.roa (hash: Gw+sAwziSiWdDJ9jEjQB+Xypl/VPbgg3IFN9iDAN1Ok=)
2: I9j2IJmVBsyG11SOpygrsSnwLWg.crl (hash: CvL15kvPzLWdu2CgNI/6X0+aTkdP3W+48Q433XsqJVM=)
3: U3XsaJj-IFBktG-dXYEuz5kV62s.roa (hash: kenyyNekJ/vibROkcjE9SyGPN68bhSkOSO66LaGuIH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:f5:bb:29:85:79:e8:4b:b7:55:52:b2:ef:d6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68
Validity
Not Before: Nov 11 05:01:03 2025 GMT
Not After : Nov 12 05:01:03 2025 GMT
Subject: CN=d4e9005bcd20184bdc58aed0e541ae4018db3c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:8b:5b:19:b2:49:00:52:f8:72:bb:b5:17:
58:c5:3c:9f:9e:21:49:75:ac:a2:b9:e6:9c:70:56:
1c:d7:e9:4d:81:a5:0d:f2:b7:ba:36:f3:29:1e:81:
72:c1:21:43:0d:5e:49:f5:d2:ee:cf:6b:3d:72:4c:
cf:78:23:0b:c3:e2:7a:f3:e3:2b:72:71:53:23:6b:
50:f4:6f:b8:40:17:42:b8:1c:8b:f6:d8:b9:4e:ec:
c2:26:4a:f3:22:ef:d9:21:82:9e:17:5b:db:8a:7b:
29:cd:8e:9c:06:9f:b7:c1:da:cc:47:9b:35:27:0c:
9f:42:7d:7b:ff:82:35:53:d0:b3:04:2c:8d:5f:4c:
14:f1:e4:0a:03:66:2e:65:7f:c8:50:ac:c3:e2:8d:
d1:0e:dd:17:c7:33:cd:bf:d2:71:6e:26:5a:b8:5f:
1a:58:e9:6f:d4:d5:3a:d0:2a:ce:5b:a8:69:9b:2f:
10:7d:68:81:8e:d8:8c:6a:b9:dd:74:d3:b4:48:19:
51:ff:2d:c4:f2:11:39:18:23:3f:0a:44:45:eb:fc:
f1:4f:2f:de:b6:6e:30:c4:fb:54:7c:07:ef:56:26:
28:ff:62:cf:76:da:e8:46:cf:b0:76:ed:93:ab:25:
ce:67:dc:57:f4:4f:f7:0e:cd:99:cf:8b:86:f0:ca:
0b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E9:00:5B:CD:20:18:4B:DC:58:AE:D0:E5:41:AE:40:18:DB:3C:4C
X509v3 Authority Key Identifier:
keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:07:07:3e:31:75:44:ef:61:e7:6a:e8:70:2c:e2:3d:0a:81:
60:9e:9f:e4:a5:99:bc:85:b6:cd:8a:2a:b7:20:5e:d0:90:79:
b8:fe:79:8b:85:f6:c5:a4:ef:23:1c:46:c0:39:ca:dc:5a:51:
fd:59:58:a7:f6:9b:be:3d:bc:62:97:2a:12:c8:2a:74:5c:47:
53:d6:ca:64:29:d5:b5:8b:33:b6:d5:9f:0e:63:5b:94:be:4a:
5e:0a:ac:47:4d:cd:4b:7f:d4:75:06:5e:bd:72:db:a7:1f:f5:
f1:7a:fb:65:f0:c2:9e:81:f6:4f:9d:aa:44:be:12:e4:cf:71:
e5:cc:3f:31:ec:1e:00:25:17:8d:58:27:5a:04:6b:32:65:99:
97:61:4d:75:7c:2d:c4:fb:a3:0e:cd:e9:03:44:c3:d2:2c:a5:
04:5c:84:63:d9:85:37:55:5d:d2:ea:af:fa:57:97:0b:87:f2:
8a:8a:5d:dc:62:eb:9c:95:c7:3c:d2:76:ad:3e:2e:48:7e:1b:
25:77:80:c0:af:c1:5d:33:4b:7a:16:54:a4:6e:f4:ec:d8:78:
a9:56:7f:68:b8:c1:cf:45:aa:11:6e:5a:0c:f7:55:f3:31:17:
cb:75:fd:48:a0:99:e6:8d:a3:c9:2b:0e:28:1e:4b:87:4b:54:
61:51:28:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:31 2025 by rpki-client