Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
File: IJ2ng837PLbZvILBktbXKrtKM20.mft (raw, json)
Hash identifier: vwtBTjlowzCJtuo4P2WjkXK9nRdytCtn/16DWKaqgeA=
Subject key identifier: 87:04:4C:C2:9F:46:FB:C3:9F:68:7D:D8:39:A0:52:30:8A:66:0A:70
Authority key identifier: 20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
Certificate issuer: /CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Certificate serial: 019A71B9353FD3E2116F64A415A52E13D51F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
Manifest number: 0360
Signing time: Tue 11 Nov 2025 07:02:34 +0000
Manifest this update: Tue 11 Nov 2025 07:02:34 +0000
Manifest next update: Wed 12 Nov 2025 07:02:34 +0000
Files and hashes: 1: 2n3afJDZ2VaAW1ICi9wuuluJH-s.roa (hash: n7gdmzqfRPjhPckkIN46JD6+pmnsuH8Fvwcad0thHWk=)
2: IJ2ng837PLbZvILBktbXKrtKM20.crl (hash: Zn0KWRX0nxS+SYxoBQ2RuSvHnx2FS4v4JD8R9wq19+s=)
3: fc650b5-Hy28l_7CM0InWSbhHHA.roa (hash: I0jfOZTYpGZasFE0U01uqVVs9byyAIXg5OzAj9nSBPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:35:3f:d3:e2:11:6f:64:a4:15:a5:2e:13:d5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Validity
Not Before: Nov 11 07:02:34 2025 GMT
Not After : Nov 12 07:02:34 2025 GMT
Subject: CN=87044cc29f46fbc39f687dd839a052308a660a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:50:54:f9:f0:f2:c6:ae:64:0b:cd:f7:28:ff:
06:6e:d1:0e:2a:94:c9:39:0d:e3:ad:12:8e:6b:1d:
77:9e:e7:0a:f2:7d:07:8e:7e:35:e9:93:77:3d:5a:
ae:dc:81:4c:8f:96:2d:48:a3:e2:92:e5:ac:e3:cf:
32:bb:9d:5f:65:f7:4f:f3:60:89:84:9a:2a:aa:53:
58:54:a7:d6:42:d4:c2:24:95:3b:e7:b5:a6:d9:e4:
37:dc:d3:14:b0:61:8c:72:ff:c2:88:0f:5b:ae:39:
d1:7a:e8:3f:f4:07:05:dc:ea:a0:70:8f:1b:22:79:
ac:34:d5:f8:bd:e8:de:17:9a:57:fd:06:9b:0f:72:
0e:81:11:77:12:44:17:82:bf:54:e3:b6:c4:b3:9a:
d6:69:69:08:d8:c0:9a:13:27:72:37:d9:29:84:70:
5e:77:3d:f2:2a:c4:52:26:58:99:68:6b:27:a8:c2:
fb:9e:a4:75:95:16:cf:5c:7f:e0:21:a7:3f:fc:69:
9a:46:74:cd:ee:71:a5:8c:7e:0b:be:92:aa:cd:7a:
66:e1:8d:be:e4:80:5b:1e:99:21:77:c8:2f:19:d2:
fb:73:5b:92:1c:06:1a:7d:a7:fb:53:d2:d5:12:a9:
fe:17:3b:78:5e:f1:68:7a:a6:e3:45:8f:c6:65:d6:
87:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:04:4C:C2:9F:46:FB:C3:9F:68:7D:D8:39:A0:52:30:8A:66:0A:70
X509v3 Authority Key Identifier:
keyid:20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ea:6f:84:5f:da:4c:bb:64:08:c8:16:9f:bc:74:21:4a:bb:
8e:66:81:2e:db:e5:ce:9d:83:a3:7a:b7:78:80:d8:4e:78:03:
d0:20:e0:2e:2f:36:fc:34:5b:87:ac:95:64:4a:70:ec:bd:62:
fe:a2:ba:c8:d3:40:ce:9e:e4:0f:56:27:26:f7:ee:a7:dd:b5:
fa:23:2b:6a:60:f9:33:ed:9b:7a:41:1a:47:e7:da:22:4f:8e:
eb:2f:25:be:be:eb:89:f7:c3:5c:9c:5a:ee:48:c6:ed:08:fd:
ee:3b:f7:0c:d8:03:22:51:02:17:e7:1a:27:c6:91:3a:f0:6e:
9b:0d:d8:24:f2:bd:aa:e7:03:9b:b2:d0:b5:60:71:16:fb:3b:
6a:97:d0:19:45:fa:97:49:05:ce:39:f3:4b:65:10:9a:60:e5:
e7:3c:7e:f5:48:bd:5c:fb:f7:df:eb:e6:71:b0:c6:72:f3:20:
a8:f2:85:b2:cc:6c:93:b2:ae:0d:2d:60:28:94:1d:c5:3f:2f:
1f:2d:dd:96:15:f9:3a:d3:c7:cd:23:d3:1c:8c:ed:48:9f:df:
c7:38:19:f2:7e:c5:48:b5:13:ea:12:9c:d5:fc:d8:da:4f:8e:
e2:33:0a:62:11:e7:b6:15:c6:4a:b9:87:5e:8c:1e:31:d5:67:
5b:47:cb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:39 2025 by rpki-client