Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
File: IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft (raw, json)
Hash identifier: Qbx2bTwsTmx/ZLqevWzsL+5R0OP+NaXfL2hrP6nNbwg=
Subject key identifier: 39:2A:9D:C7:B0:66:67:F9:4B:32:42:37:20:F6:DB:00:BE:22:72:B1
Authority key identifier: 21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53
Certificate issuer: /CN=2146e560a3f5cac7c64fe0f13be663d94c871453
Certificate serial: 019A1D99E4309F567676FFC5276E5F4A3644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
Manifest number: 0578
Signing time: Sat 25 Oct 2025 23:00:15 +0000
Manifest this update: Sat 25 Oct 2025 23:00:15 +0000
Manifest next update: Sun 26 Oct 2025 23:00:15 +0000
Files and hashes: 1: 65OBtTjCvSppmw7kLz43nf5_Bv0.roa (hash: gdoaQ1Q9gp77JEHF6QFUxphPMS2cWPxD6n6ohLQUaSY=)
2: 7KVtKRza7VDnZMrMe02kpGBrUpg.roa (hash: eDnVdL3nLyal8dEfu0dA+KtEtGPaNa6zd/fLOYxM2vg=)
3: IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl (hash: y3/McEdqJKqHle0e1vCwywib14w++28mSd+/T2Uh+tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:99:e4:30:9f:56:76:76:ff:c5:27:6e:5f:4a:36:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2146e560a3f5cac7c64fe0f13be663d94c871453
Validity
Not Before: Oct 25 23:00:15 2025 GMT
Not After : Oct 26 23:00:15 2025 GMT
Subject: CN=392a9dc7b06667f94b32423720f6db00be2272b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:48:6f:24:cd:d8:72:27:8a:c9:18:18:ce:d5:
64:b9:1a:77:e7:c1:6f:34:22:9d:12:53:7a:ef:76:
a2:1a:07:b9:54:a1:06:63:13:0b:a1:f4:86:6c:4c:
53:96:95:3b:6d:98:67:fd:a3:a1:68:6c:3e:b3:af:
88:58:5a:cb:bc:6d:2f:4c:c1:5d:45:36:ca:8d:c3:
ab:5b:87:e9:c4:4d:65:e5:31:b2:03:ae:9a:54:4f:
32:89:73:33:70:9d:6f:6b:18:22:5a:65:7f:30:08:
78:22:5f:2e:e8:eb:d3:60:68:44:19:59:22:6e:e1:
84:6d:8f:5e:41:25:16:bf:28:f8:b7:f5:de:e2:2c:
50:02:c6:6a:7f:fa:a5:0d:82:24:e9:e2:ac:a8:a4:
92:76:23:fc:53:d7:7d:2b:a9:d0:20:b9:3d:40:ba:
7a:36:eb:f2:d1:78:f5:6c:d1:03:6b:49:ca:ac:a4:
2b:f6:f5:bf:f9:b3:9e:5b:f2:0c:ea:50:c8:c6:45:
df:ce:a8:3a:11:99:1b:f9:9e:46:74:0c:7d:4a:fe:
27:75:21:99:23:f5:63:b7:e6:6a:55:46:40:cb:b0:
78:a5:46:a4:06:39:95:5e:17:0d:d7:92:86:3b:0d:
69:4a:48:5d:de:80:26:a9:88:3a:60:55:48:0a:6c:
f5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2A:9D:C7:B0:66:67:F9:4B:32:42:37:20:F6:DB:00:BE:22:72:B1
X509v3 Authority Key Identifier:
keyid:21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:dd:13:6d:04:73:dd:2c:94:7d:d2:31:1f:19:15:36:74:89:
54:dc:08:77:b5:c0:36:82:06:75:b7:0d:cc:28:02:cc:b6:f6:
50:c7:a7:3a:fb:ab:c8:9a:78:80:a1:23:d4:27:f7:50:55:ae:
05:bc:4f:a3:16:cf:74:39:56:68:69:cb:0a:c3:ad:db:98:e0:
a0:1b:85:15:93:af:2b:0f:d3:cf:b1:ab:b8:c8:93:7a:2d:63:
dd:9c:a8:05:08:63:f3:d4:96:a9:a8:c5:d4:e8:f3:88:33:65:
e2:38:ec:7b:bb:68:f9:41:41:d1:ab:73:59:cc:6d:33:6e:2d:
48:70:a9:6e:e5:7b:10:41:6c:f9:2c:55:e4:c5:96:22:fc:eb:
fa:e4:e1:59:fb:b8:5d:7e:aa:b7:b1:29:c5:55:e1:fb:5c:81:
b7:c9:d5:47:fb:21:62:93:af:94:2b:31:9d:68:9c:42:31:36:
32:b5:a0:dd:14:c8:a4:fc:a4:c9:2f:6c:03:f0:be:5a:d6:e9:
cd:bb:04:7a:68:7c:83:ad:0b:fa:e1:34:d3:8d:fb:82:dc:08:
3c:02:94:67:03:38:7a:59:78:7e:6e:85:03:0c:6c:6e:1c:2d:
89:8b:5c:cc:ef:1f:a4:c1:9c:ee:09:36:57:1f:bc:33:f4:44:
f7:b4:41:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 02:41:27 2025 by rpki-client