Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
File: IURHLRaXNp2DK6Em5eFyMqzV9fM.mft (raw, json)
Hash identifier: 86AZDxfMjDynA0xSuWJpGA2Gyv9UUtZjxYrKwLmh7lg=
Subject key identifier: FE:82:30:A2:DA:BB:90:BB:A0:E4:AE:2A:B4:54:65:21:05:50:CF:46
Authority key identifier: 21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
Certificate issuer: /CN=2144472d1697369d832ba126e5e17232acd5f5f3
Certificate serial: 019A2DB212D40D8EB3E978396B75FA02F667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
Manifest number: 16FC
Signing time: Wed 29 Oct 2025 02:00:36 +0000
Manifest this update: Wed 29 Oct 2025 02:00:36 +0000
Manifest next update: Thu 30 Oct 2025 02:00:36 +0000
Files and hashes: 1: IURHLRaXNp2DK6Em5eFyMqzV9fM.crl (hash: 4629y/fH1wQOEM3FCrDOcJ5TOn1I69b+SeEWMmDq+Go=)
2: jxP3zWsY1gZpCGxBiysaY7EpSc4.roa (hash: 8YozH8Bcb75tXVAEGcttViIiDw3bZdzWBPyjFnX3Zdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:b2:12:d4:0d:8e:b3:e9:78:39:6b:75:fa:02:f6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2144472d1697369d832ba126e5e17232acd5f5f3
Validity
Not Before: Oct 29 02:00:36 2025 GMT
Not After : Oct 30 02:00:36 2025 GMT
Subject: CN=fe8230a2dabb90bba0e4ae2ab45465210550cf46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ea:c9:7d:1e:b7:9a:85:65:bd:23:cc:39:df:
6c:60:ee:b5:6b:52:04:b2:f4:69:0a:4c:08:51:1d:
e9:e3:61:3f:6a:4a:6c:f1:40:4b:41:44:00:5e:d7:
9c:6c:7e:0e:99:79:07:bc:dc:d9:31:48:25:18:66:
21:1b:bf:22:18:82:9a:17:fa:e2:50:36:00:61:a7:
26:20:8e:56:e0:49:9f:b9:70:46:ee:38:7d:ba:37:
e8:9f:8f:c9:2d:70:ac:7a:68:81:a9:d9:01:32:4c:
b9:95:22:03:de:2d:ca:a9:98:c3:e1:04:5f:bf:41:
b0:b1:4b:85:64:fb:a2:b9:95:f3:36:a9:42:4a:91:
96:90:bb:1b:25:9d:9c:85:89:67:d4:bf:64:7a:7c:
bf:47:5e:62:65:ee:15:74:94:9f:66:79:dc:f6:32:
b5:6b:56:f9:91:8a:99:10:a1:77:55:10:fd:09:31:
9b:a1:ef:15:a5:a0:98:ea:ef:31:70:98:a3:5d:97:
c7:2e:8a:2f:6a:9e:ec:1f:4a:85:a9:d6:b2:b8:70:
bd:b5:89:57:d8:be:4a:37:9f:71:79:02:c2:b1:b8:
88:f1:21:78:e0:4a:a3:23:7a:b7:f7:c6:75:ae:9f:
ed:f9:b5:b7:92:15:96:31:0f:ad:c3:42:64:e2:8a:
d3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:82:30:A2:DA:BB:90:BB:A0:E4:AE:2A:B4:54:65:21:05:50:CF:46
X509v3 Authority Key Identifier:
keyid:21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:8d:61:9f:c8:f2:62:b6:8b:a8:d6:3a:91:c3:55:c7:6e:37:
c4:0f:dd:98:66:2e:76:37:d7:da:73:f8:6c:3a:e8:06:0b:1f:
c8:21:b3:cd:1e:fc:ea:86:0b:f7:6e:34:83:e5:6e:f2:2c:e1:
ac:ad:c1:35:be:6f:43:13:38:37:28:bd:d7:b0:29:84:ed:56:
0c:6d:71:8c:6b:0f:47:33:c7:68:07:4a:06:24:d7:ad:4e:3f:
23:fb:50:81:e4:04:58:87:79:4c:0a:35:1d:07:30:8c:c9:b8:
90:8c:d7:ee:7e:97:42:90:24:0d:e6:62:9d:bf:23:9e:46:23:
98:23:9f:78:9b:f6:2d:b0:42:f4:3b:24:5b:58:bc:4c:39:9e:
3a:56:b7:54:36:e1:59:ee:8f:d7:4e:fc:e6:20:a8:f3:49:ae:
e0:dd:8e:3f:a3:55:81:4c:e8:12:9d:b9:85:17:c3:da:ce:bc:
31:22:94:bd:c4:74:54:cc:84:e4:c9:c0:c5:fd:7d:d1:31:a2:
da:50:e4:42:dc:dd:3b:a0:ef:b5:b8:5a:ef:57:86:53:f5:16:
4f:f5:37:85:1a:51:f6:73:91:61:74:16:35:1d:28:26:89:2d:
91:7f:d9:9e:3a:45:b1:b8:c7:14:b0:76:6c:82:43:bc:2a:85:
c0:d7:f3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 11:24:18 2025 by rpki-client