Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
File: IPpO3bIfCQGSPBifQej1x0mmWCk.mft (raw, json)
Hash identifier: H9PqvqayAeJeYv/YrohnzvsFIRWdNDjRzb2Jb1CLbyw=
Subject key identifier: A3:D4:3F:FF:2D:13:38:D1:EB:86:63:99:D8:EB:97:51:9F:05:03:F7
Authority key identifier: 20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
Certificate issuer: /CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Certificate serial: 019A0CA6D24438CB26C51831B0D9AACCFAC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
Manifest number: 65
Signing time: Wed 22 Oct 2025 16:00:50 +0000
Manifest this update: Wed 22 Oct 2025 16:00:50 +0000
Manifest next update: Thu 23 Oct 2025 16:00:50 +0000
Files and hashes: 1: IPpO3bIfCQGSPBifQej1x0mmWCk.crl (hash: Nz7j79dS+OI/+0d2sE0DhrYHMcWOIWHYS2JaZ/5iQdA=)
2: Y_oYNTABqXVE9GTLe20SGiBKmm8.roa (hash: oNuhka5sSAjP9HueZy64ACfp5Ut+NkJyfMXj1b7/13Y=)
3: efy5oJUo9vlNOp71j63zeVEmmxU.roa (hash: CC82OGeCqrXuJ1H3eqUShF4IKs0H5muAyFZDrElp2iw=)
4: gfJqz6llA6HPBbhUclOoBOQtzwA.roa (hash: RevaPA0FwqLm6G8w6EGXV/kc0l56ywZoZvqxJEm3YF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:a6:d2:44:38:cb:26:c5:18:31:b0:d9:aa:cc:fa:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Validity
Not Before: Oct 22 16:00:50 2025 GMT
Not After : Oct 23 16:00:50 2025 GMT
Subject: CN=a3d43fff2d1338d1eb866399d8eb97519f0503f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d8:4b:d3:16:05:6d:d8:84:d0:89:b7:20:88:
ee:67:b5:32:28:1c:76:ad:57:a4:a4:f2:e4:91:8a:
90:2f:93:4e:06:70:1c:a1:a4:03:8e:80:62:1a:c4:
0f:1c:35:10:68:0c:52:a6:2a:c4:f0:c0:a3:25:ec:
36:d7:c9:f9:c7:9d:b4:80:f6:f0:ea:9c:0e:bd:f3:
f2:59:85:2a:0a:58:12:e5:e4:89:ad:59:bd:61:11:
79:7f:62:10:00:b8:8f:8c:a7:6f:a8:7b:5f:e2:68:
f3:6b:10:dc:ab:20:4e:33:14:a1:62:57:6b:d4:0c:
0e:77:46:40:ae:d3:53:e4:08:b2:8a:ce:b5:95:ca:
4c:e8:fa:e4:fe:57:f4:6a:1a:30:7f:70:67:8b:1f:
ce:1e:4f:b9:2d:1e:62:eb:ae:46:0c:58:17:6b:d9:
4e:37:10:31:40:9a:c5:8d:c2:ca:21:78:4b:c2:de:
9d:71:73:ec:bf:3d:b9:aa:05:30:ba:56:7c:33:5a:
95:75:ac:26:03:5b:1a:70:fd:2d:7f:5b:11:c4:de:
54:f8:86:30:40:27:07:81:dd:a5:dc:f5:ac:a4:0f:
df:51:77:ea:15:22:50:89:0f:18:de:1a:ed:a5:d3:
bf:e4:ce:15:0d:ec:5f:6c:0e:6e:9d:c7:e6:b9:2b:
2d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D4:3F:FF:2D:13:38:D1:EB:86:63:99:D8:EB:97:51:9F:05:03:F7
X509v3 Authority Key Identifier:
keyid:20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:98:43:4b:82:03:86:96:05:9d:e4:30:a9:c3:10:32:05:2c:
53:8f:f0:09:2d:99:31:e3:86:f3:cc:08:d8:a6:e9:28:96:44:
6b:c3:24:aa:65:1e:2f:42:89:c5:b3:9f:02:66:7d:ae:37:a7:
14:d6:dd:3c:c7:21:71:9b:ae:69:68:14:8c:9d:1d:1c:18:fa:
53:b4:6c:62:80:9b:34:4d:89:28:0d:eb:84:c1:56:54:40:1b:
22:c7:e5:fd:a8:a9:4f:bd:71:1d:08:eb:64:18:84:71:13:c7:
8e:b4:63:f0:6d:c4:da:6f:10:cf:c0:46:64:53:b8:6f:5f:4c:
c7:2d:cd:9d:8c:e5:21:d8:40:39:41:ee:dc:4e:b5:d9:41:b5:
92:50:45:c1:8b:88:be:83:2d:15:86:02:63:88:88:1f:bf:8b:
13:c8:31:b0:95:fb:22:c9:8b:77:ac:81:b3:a5:e0:5f:02:cb:
6f:cf:e6:9c:82:d8:c2:e5:99:29:19:76:99:97:ca:a9:01:f7:
69:e2:cc:bc:c6:a7:b2:40:21:2f:cf:d9:71:b6:7b:2c:d8:c1:
b0:6e:09:c7:86:e1:b4:36:32:8c:69:33:2c:2b:14:22:bc:e2:
c1:27:31:14:65:f9:de:3e:83:9b:aa:fc:ea:93:7b:e6:a2:aa:
45:2f:a9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 21:18:51 2025 by rpki-client