Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
File: _IJp9C5GRBqx7ZlMifdHuqVU4yA.mft (raw, json)
Hash identifier: 7Zp7Jad+St8cEwCVncwk7DdGJQReqVVVrZzjYix6Ua8=
Subject key identifier: 15:86:0F:8A:CF:6A:78:08:C1:D4:9E:9E:64:D5:99:7D:3A:27:66:96
Authority key identifier: FC:82:69:F4:2E:46:44:1A:B1:ED:99:4C:89:F7:47:BA:A5:54:E3:20
Certificate issuer: /CN=fc8269f42e46441ab1ed994c89f747baa554e320
Certificate serial: 019A71B84A3A2D24E08B47B7AF0766453A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:01:34 +0000
Manifest this update: Tue 11 Nov 2025 07:01:34 +0000
Manifest next update: Wed 12 Nov 2025 07:01:34 +0000
Files and hashes: 1: _IJp9C5GRBqx7ZlMifdHuqVU4yA.crl (hash: O/KyAqETjGS1Rz/kkGr8zigs1cNcZq0zJJPmD5Ssp00=)
2: eJpm7vOqN0K6_-N5ZvgNj0bJa14.roa (hash: ZjNNKQofgKq/YUnavRCCV2cjVOzm2yU0UKdAMKHM4p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:4a:3a:2d:24:e0:8b:47:b7:af:07:66:45:3a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc8269f42e46441ab1ed994c89f747baa554e320
Validity
Not Before: Nov 11 07:01:34 2025 GMT
Not After : Nov 12 07:01:34 2025 GMT
Subject: CN=15860f8acf6a7808c1d49e9e64d5997d3a276696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:db:c6:91:5f:19:ba:26:71:bb:d1:83:cc:e2:
b3:90:32:69:c0:86:90:3a:4b:ee:47:2a:1a:45:c1:
3d:6e:3b:9d:5a:98:5d:10:93:c8:9a:f7:f4:e5:97:
f3:53:d5:75:e9:31:7a:b2:7a:34:80:4c:d9:9b:b7:
c0:1d:f0:f5:8f:f2:48:6f:af:98:5b:1d:00:9a:f5:
6f:87:2f:60:bb:49:67:5b:43:3d:46:16:57:e7:7a:
8c:4d:cd:41:04:e5:08:d0:b1:2e:d2:5b:b4:a1:ca:
40:ea:d4:9d:66:77:3f:0d:99:62:79:22:8b:1f:bd:
53:f1:76:25:e1:03:06:21:18:67:e2:0f:21:75:48:
a6:6b:f5:9b:1d:ff:31:76:e1:d5:5f:c0:7d:f8:32:
93:a3:69:df:4f:42:02:7e:ea:3e:8a:5b:25:a4:78:
11:40:55:08:98:75:6f:a0:bb:9b:5d:67:8d:39:04:
0d:6c:d4:29:ef:c8:fe:e4:ba:fd:30:48:f9:44:35:
da:61:2b:81:e2:6d:4c:af:e4:e2:ea:7a:4e:54:72:
64:26:9b:10:ff:c5:11:99:3c:70:f8:0a:8f:e4:35:
02:ca:25:15:48:32:59:09:89:d5:5c:77:3a:04:8b:
95:81:db:11:72:cb:c0:4f:1c:e0:d7:1a:20:99:7e:
fd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:86:0F:8A:CF:6A:78:08:C1:D4:9E:9E:64:D5:99:7D:3A:27:66:96
X509v3 Authority Key Identifier:
keyid:FC:82:69:F4:2E:46:44:1A:B1:ED:99:4C:89:F7:47:BA:A5:54:E3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d1:20:d5:ea:7c:8f:a3:ea:78:a5:fe:ad:dd:62:c6:65:3d:
04:11:6b:48:18:45:98:dd:60:97:91:cc:9a:c5:83:5c:d5:6f:
5f:3f:3e:90:25:d3:7a:5e:30:f8:a5:46:8d:e5:1d:87:f7:57:
e0:ce:6a:9e:29:b1:04:f5:b3:56:48:10:59:36:67:cc:f8:87:
b3:7c:44:0f:1b:5c:93:df:ba:0c:7c:cc:e3:9f:aa:cd:3c:fb:
0f:bb:c6:eb:4b:06:73:ab:86:5f:1e:b0:fa:c7:a2:6d:26:77:
17:e0:e3:a7:41:71:1f:a5:be:07:03:76:d0:f0:fc:b5:9b:f5:
1c:36:a7:34:a7:db:57:fa:cc:5b:00:0b:bd:14:2f:62:56:d4:
e8:1e:bb:25:48:dd:dd:d8:62:37:65:70:a5:63:0e:09:e1:58:
ae:df:a5:d0:b0:b2:20:f9:29:a6:af:6a:25:75:73:87:62:18:
68:bc:fd:95:15:42:97:97:9f:1b:92:c6:bd:05:b2:88:1f:2b:
fd:52:82:36:5d:f9:eb:d9:bf:a5:21:12:d0:99:5f:e4:63:8b:
b5:99:2b:78:f3:5b:be:e7:9e:aa:db:f0:d8:b8:32:3e:30:0f:
a4:44:18:bb:d1:7e:93:b3:7c:1b:75:98:d9:c8:5e:0a:7d:f7:
43:6f:eb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:40 2025 by rpki-client