Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
File: iX2mABsSODBo_nGjD4zyhcZoMP4.mft (raw, json)
Hash identifier: OR/2F1n/o80CTRoiUkgNhqWhplSo4flShSvj0Cm9RrY=
Subject key identifier: A8:0A:17:8E:5C:5F:95:0C:1F:C8:04:41:86:17:62:4A:58:F2:16:2C
Authority key identifier: 89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
Certificate issuer: /CN=897da6001b12383068fe71a30f8cf285c66830fe
Certificate serial: 019A022370931435440DAF818E52122D01AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 15:01:08 +0000
Manifest this update: Mon 20 Oct 2025 15:01:08 +0000
Manifest next update: Tue 21 Oct 2025 15:01:08 +0000
Files and hashes: 1: 9Xk925SUUXfLnbw9FBp9N3qLdfo.roa (hash: Ly02I9+k8vuMGWxnQ136VFvx8sd3hejXT82bKGKV7BM=)
2: PHa1bwg0jlW9wU-ZxMrg4KmG4Zc.roa (hash: sT+3KqlrpBwNw2te0UajmvKsMUapvIEs9YfpHeq4XGU=)
3: iX2mABsSODBo_nGjD4zyhcZoMP4.crl (hash: 7DouMiP3yLed1ZB4GDBY6ODRrsvCUl47F8ZxAlQmdtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:23:70:93:14:35:44:0d:af:81:8e:52:12:2d:01:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897da6001b12383068fe71a30f8cf285c66830fe
Validity
Not Before: Oct 20 15:01:08 2025 GMT
Not After : Oct 21 15:01:08 2025 GMT
Subject: CN=a80a178e5c5f950c1fc804418617624a58f2162c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7b:0b:40:7e:4b:ba:64:06:10:6d:bb:bd:8a:
4a:a2:c1:a8:81:29:6c:ca:92:22:d3:b2:82:8f:e2:
9d:d1:de:60:57:cb:3c:94:ad:5e:e2:ac:42:1e:d0:
f5:28:18:5f:5b:8b:22:48:d2:58:02:95:20:ff:09:
9a:d3:74:04:fb:33:40:fb:03:85:ec:e4:2c:f1:0f:
13:6a:2e:d7:6b:75:be:72:d2:e0:13:b4:71:07:64:
ad:37:10:c1:62:e3:a2:0c:fb:04:db:24:60:f8:9a:
bc:8c:9c:ff:0e:84:ae:c3:6a:62:a5:39:8d:2c:1c:
3f:41:68:83:20:59:46:a2:95:4d:11:19:83:69:2a:
2e:8f:ed:e2:9c:1d:0e:fe:21:bd:c5:9d:cf:eb:73:
b3:bf:d3:70:40:7e:e8:7c:3b:25:46:ef:b5:67:9b:
3d:ce:fa:05:d0:3c:f5:9a:bd:c0:7b:05:b0:24:ef:
41:7f:8c:15:cc:d6:40:35:5f:06:85:5e:57:cb:2e:
d7:34:5a:8b:34:29:7f:60:a6:3e:89:ac:58:ff:55:
3d:45:aa:0e:d9:03:43:a9:97:a9:1e:7b:b6:af:31:
b6:20:c5:02:89:51:20:c9:55:cd:d6:ef:f5:e2:f9:
79:cf:97:5c:86:43:e6:b8:63:d7:ef:aa:ee:d5:2d:
c5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0A:17:8E:5C:5F:95:0C:1F:C8:04:41:86:17:62:4A:58:F2:16:2C
X509v3 Authority Key Identifier:
keyid:89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:af:30:2b:97:6b:4f:9d:15:52:69:4a:4e:41:55:36:fb:80:
fc:a3:9d:9c:92:79:ab:fd:18:17:c7:82:7a:9b:00:2a:9a:1e:
be:92:42:c0:93:05:8f:0f:1c:0f:bf:fb:1a:42:21:c3:78:c4:
67:46:73:11:e9:ec:a3:f6:34:f1:b8:f1:e6:5c:fa:55:91:2e:
0e:5f:63:65:33:11:4e:84:a8:04:77:85:cf:89:6c:24:2f:27:
69:e7:36:5c:71:51:ee:8c:6e:7f:e5:94:17:aa:5e:36:9e:eb:
16:a0:54:c1:ae:b0:a4:14:db:bf:49:8f:6f:6e:a3:10:44:4a:
ca:fc:53:0f:bd:5d:29:fa:82:96:c0:9c:e6:01:44:68:6c:64:
b7:64:ec:f6:bc:a8:58:db:dc:74:f3:fa:46:09:22:8e:d5:54:
eb:03:57:a9:34:9f:e1:9b:71:5e:32:25:e0:dd:39:8f:31:2a:
31:d4:5b:69:e9:e4:bb:da:6f:d8:ac:e8:88:61:f0:70:8c:53:
e0:d4:95:b5:02:2d:6b:bc:33:44:b2:1c:ae:c8:90:9b:1f:06:
07:a6:ee:50:f7:07:96:4c:3d:f9:0b:ec:4d:a6:c1:c5:df:7f:
bd:c3:c0:28:c6:ee:37:08:85:0f:cb:67:1b:4a:98:59:a4:f0:
41:2c:58:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:59:47 2025 by rpki-client