Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
File: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft (raw, json)
Hash identifier: nwGFpfy2BzdKv0zXxZnaDibb5EIjjDtgGnfDLTXRtwg=
Subject key identifier: 7A:D7:C8:52:BE:5E:99:0A:E9:43:48:6D:F4:03:C5:83:53:EB:27:75
Authority key identifier: 20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
Certificate issuer: /CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Certificate serial: 019A0D823B34AB8D370DADB6A07DB68C1B6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
Manifest number: 16EB
Signing time: Wed 22 Oct 2025 20:00:29 +0000
Manifest this update: Wed 22 Oct 2025 20:00:29 +0000
Manifest next update: Thu 23 Oct 2025 20:00:29 +0000
Files and hashes: 1: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl (hash: W2C0lP8LyvZOn4SBq9ALeLGQ45koZbK3uHvSeIUIWJ0=)
2: LkiVXeukns_JdhONh74qaRMFBIM.roa (hash: sMLMXJ4GQAf8vdiNw4uFl/nK1+dFlOKAlp+mNZ+YliU=)
3: cd1yHX5UcqryiXUb-rkYleNrwXs.roa (hash: 6h3q+Ehg11sL4jSJjG152eGWFDBSFWsjBJ9eqGT5BtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:82:3b:34:ab:8d:37:0d:ad:b6:a0:7d:b6:8c:1b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Validity
Not Before: Oct 22 20:00:29 2025 GMT
Not After : Oct 23 20:00:29 2025 GMT
Subject: CN=7ad7c852be5e990ae943486df403c58353eb2775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:34:b6:1a:3b:98:61:d1:51:6c:0f:bb:ce:ff:
ea:53:18:69:2c:c1:6f:84:5c:d2:05:01:65:f3:30:
b8:0b:46:45:05:30:a8:7d:ce:e3:77:aa:23:37:37:
d8:16:ac:b6:b0:d6:b9:d6:13:eb:05:60:eb:13:8c:
98:d9:56:36:7f:66:44:34:1a:01:2d:da:f5:94:9e:
9f:b1:fc:a1:23:78:c3:d8:3e:3d:90:34:6b:5b:eb:
a0:7a:08:97:a1:e3:85:30:14:c6:ff:49:6e:f6:6a:
dc:a7:53:ba:fb:7f:52:41:50:3d:69:5c:37:53:1d:
ee:14:0e:56:1b:b8:d0:33:36:7e:80:f7:d6:9d:b4:
a9:c0:8d:19:5c:f1:c2:bb:bf:0a:c1:06:7c:fc:67:
97:b6:0e:48:a5:f7:a3:2c:b2:5e:75:09:cd:20:d6:
e5:09:47:52:36:67:40:d1:3b:54:eb:2a:29:74:6b:
db:83:9e:b8:bd:a8:e1:5e:a8:14:fb:7d:30:f6:a4:
16:c9:ed:6a:9e:e7:b7:c3:3d:54:7b:d4:cd:2a:05:
d1:6b:84:71:72:0d:48:7c:cd:eb:a9:02:78:7e:27:
e7:64:51:30:e5:0c:3f:49:65:7a:2a:70:31:25:18:
bc:4b:ec:ad:31:92:09:6a:95:a9:b1:53:a5:39:85:
7d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D7:C8:52:BE:5E:99:0A:E9:43:48:6D:F4:03:C5:83:53:EB:27:75
X509v3 Authority Key Identifier:
keyid:20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:61:24:fb:e9:7d:ba:8d:62:ab:00:7d:c7:c4:5e:56:ff:58:
d4:31:73:57:74:f5:80:85:38:9f:55:00:fc:56:c1:f3:cc:67:
18:87:fa:71:d4:66:36:d9:5d:a3:0c:68:24:da:df:7d:70:b8:
3f:b5:f9:25:20:9b:4e:7e:e5:31:2a:c2:6a:db:b4:db:5d:d0:
43:de:ce:35:78:68:c6:d3:dc:29:3e:5e:df:6b:43:77:ed:60:
e9:86:40:00:ef:30:22:3f:72:af:82:0f:c8:5e:85:b7:50:73:
57:88:9f:23:5c:a6:e0:79:9c:25:f7:57:4a:d7:86:1d:02:ce:
a1:04:c8:be:7c:20:b0:cc:9c:05:fe:47:e5:ee:b7:5d:20:b6:
3a:ef:f2:44:73:49:56:8f:f6:41:80:ee:28:ad:24:4a:ba:33:
22:af:da:a0:89:23:32:b0:1e:01:4d:8b:f4:65:4e:a3:15:0e:
27:9c:5b:75:ed:d0:42:7b:4c:9f:f9:53:88:1b:eb:86:32:f0:
44:aa:d9:00:38:61:f7:73:18:b5:d2:d1:ed:ed:77:89:ff:ac:
ee:3c:4d:bc:c4:e2:e8:f1:d2:64:ff:9c:2e:17:14:e9:be:bc:
8d:6c:70:34:0f:09:e2:0d:29:1f:3d:33:15:68:13:8e:b7:c5:
1b:79:12:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 21:36:00 2025 by rpki-client