Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
File: IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft (raw, json)
Hash identifier: UUidu+QyM6sj8R+k4wpfb4Qv20WGAz4giI8a8YM7c2U=
Subject key identifier: 57:30:B2:83:24:8B:03:1E:03:E0:93:72:41:74:57:35:C1:99:EE:D3
Authority key identifier: 20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
Certificate issuer: /CN=205945443c5b25e4dcf6203f061ac04d36871554
Certificate serial: 019A1D6358A1EB1C8F55D9D8BE5F45C3E7FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
Manifest number: 16F5
Signing time: Sat 25 Oct 2025 22:00:41 +0000
Manifest this update: Sat 25 Oct 2025 22:00:41 +0000
Manifest next update: Sun 26 Oct 2025 22:00:41 +0000
Files and hashes: 1: IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl (hash: /k9ggWQAOGnLvwJU5TDOEFiUosA+aSwI9/ajCoX/EpI=)
2: vwwOJsNwZhQ7jXxQBO6C3CzaqW4.roa (hash: PgsS8twf0GYuOEotT5Wskvo1GlMh/1Ykh+edTuYgZgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:63:58:a1:eb:1c:8f:55:d9:d8:be:5f:45:c3:e7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=205945443c5b25e4dcf6203f061ac04d36871554
Validity
Not Before: Oct 25 22:00:41 2025 GMT
Not After : Oct 26 22:00:41 2025 GMT
Subject: CN=5730b283248b031e03e0937241745735c199eed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f4:89:06:94:ef:d1:42:4f:a1:a1:91:6e:2c:
6e:3e:cc:ef:af:06:63:1a:e9:74:03:15:5c:38:88:
0d:57:c8:a0:61:8a:73:7a:00:14:48:0f:4f:2f:01:
57:a7:e7:0f:61:74:8f:26:c7:e9:5d:ad:a5:59:a0:
ab:b2:17:17:88:21:d7:77:c1:2b:50:d6:86:fd:09:
d2:1c:7f:03:22:80:d7:40:f1:0a:de:7e:1a:49:bf:
85:9d:f8:f5:41:e5:22:3a:af:8c:f7:a4:d1:9b:f5:
07:c4:75:57:bb:9f:47:e4:10:89:7a:06:0e:4b:e2:
5d:1e:a5:f7:21:a7:0d:89:d5:3d:5e:55:74:2f:ad:
52:8d:50:4f:6c:5b:04:cc:eb:63:89:3e:2f:86:f7:
d1:e2:f4:a5:10:c6:05:bc:7e:82:c8:f3:3c:fc:c9:
f1:ad:c3:8c:f0:26:2b:69:9b:2e:0a:f0:fe:a0:df:
43:a3:58:7b:8b:40:e5:fc:f8:46:ca:c8:ff:20:ec:
3e:df:89:49:15:f9:df:5e:80:27:71:54:e3:62:2d:
9e:7a:e4:32:46:46:c1:7f:0e:3b:f5:77:b1:e2:4a:
ac:bd:74:c4:36:61:db:46:92:73:75:10:5a:4d:2c:
0f:7d:51:c8:0b:98:5b:5b:1a:9c:81:83:31:d4:ef:
96:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:30:B2:83:24:8B:03:1E:03:E0:93:72:41:74:57:35:C1:99:EE:D3
X509v3 Authority Key Identifier:
keyid:20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:95:21:4d:25:e8:85:12:f9:76:ce:03:b6:86:31:77:e5:03:
69:ca:b2:4c:44:0f:0a:88:85:e1:95:fe:30:ba:d3:0c:cd:e7:
ec:b7:b0:82:d9:87:d3:4b:50:3d:f8:33:7e:09:bb:cb:df:91:
6d:21:0c:e3:a4:b6:95:9d:69:fb:92:6a:59:59:50:e3:a2:ec:
bb:7f:58:47:43:48:22:d0:d5:4a:94:f1:43:e6:de:1a:5a:d7:
07:61:68:ae:50:71:78:32:2e:38:33:df:39:19:6a:39:a9:9d:
7b:33:a0:83:e7:db:3b:c8:93:d1:28:62:62:43:e9:5b:c6:37:
71:f4:07:c4:1a:ff:47:7c:ec:af:d5:f4:62:9e:70:65:b7:c9:
81:75:94:bf:66:bc:e8:d3:35:1b:8e:23:35:20:14:61:ab:75:
3f:bf:c6:d1:03:77:12:66:23:1c:a7:50:b9:3b:16:a1:88:d6:
73:9b:60:d1:26:f3:99:ae:be:70:51:1d:21:78:e8:0a:e1:be:
0c:d4:ed:08:4f:d7:9e:f2:44:0b:82:ca:51:22:f7:e2:dd:d9:
d0:de:09:81:aa:93:7b:ce:31:38:57:35:a1:51:a7:99:09:0b:
46:ca:f2:88:38:40:84:f3:d3:c4:5e:b5:d3:85:df:29:19:9d:
4d:71:bd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 01:20:45 2025 by rpki-client