Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
File: IXt6sGK8gos0jQUwbmU1R0i51tY.mft (raw, json)
Hash identifier: 274NLejsHpHKt2jZo5iNYybSGdBaHLdSARKwarb1T2Y=
Subject key identifier: F9:28:18:FF:81:6C:B9:34:2D:E8:45:16:90:23:67:50:22:64:2C:09
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial: 0199228C9A0C553D1922A0EE10AA237D8C78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
Manifest number: 0A28
Signing time: Sun 07 Sep 2025 05:01:03 +0000
Manifest this update: Sun 07 Sep 2025 05:01:03 +0000
Manifest next update: Mon 08 Sep 2025 05:01:03 +0000
Files and hashes: 1: 1pYkybGgKOUsse4DTksz46U1UVk.roa (hash: TAfzGG00BI7uAR7rTZh0yLg+7xDY58D62iiCBqbod3s=)
2: IXt6sGK8gos0jQUwbmU1R0i51tY.crl (hash: jY9K2BjMD3vhchxYatyJ6cxIa/kjxmTQGYcdlzrkX7I=)
3: VxdHezzHKrkrE2Feoz1POMlVQMY.roa (hash: FkZe/vgHmq1Yaa4HgYSORTSSTc1UQglxGrV02REUteE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:9a:0c:55:3d:19:22:a0:ee:10:aa:23:7d:8c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
Validity
Not Before: Sep 7 05:01:03 2025 GMT
Not After : Sep 8 05:01:03 2025 GMT
Subject: CN=f92818ff816cb9342de845169023675022642c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b8:18:21:da:0f:e1:8f:85:5a:81:b0:f1:98:
d5:d0:4a:86:03:1d:ef:d0:55:82:7a:f6:18:dc:a9:
d7:f9:8a:c3:12:7d:fc:56:76:e6:02:3d:bb:82:b3:
a4:5e:59:b7:3b:a6:de:a7:3b:fa:71:6d:5e:a7:63:
9c:5d:1b:97:f5:b1:02:8d:1a:10:76:43:6a:66:f8:
d3:68:33:4d:e4:11:b1:6f:9e:2f:ca:aa:93:c9:ec:
df:df:25:fc:d3:80:b0:b5:8a:21:fb:83:52:1c:25:
ac:00:e6:8e:3c:77:11:a0:d9:84:b5:aa:2e:47:a5:
57:a3:b7:ae:e2:c5:bc:85:68:e1:ec:f7:8c:75:9c:
39:6e:1d:56:01:c4:a2:e5:e7:29:38:d2:66:1c:f3:
54:4d:64:23:fe:31:c9:c9:3b:02:b3:f5:64:a9:61:
2e:95:b5:73:25:f6:f8:ab:ef:a4:75:4e:27:54:ad:
91:74:69:de:7b:c4:e9:cf:43:cb:15:d3:6b:24:a0:
d9:a0:59:07:05:a9:db:21:e1:f4:a4:48:19:29:28:
ea:0c:02:bd:b2:c3:20:01:2c:4f:c7:5d:76:37:23:
f1:08:7b:f6:76:5a:4d:fd:04:3a:49:70:b5:a0:4d:
55:9b:38:74:07:a8:4b:cf:15:12:06:b8:f1:96:77:
50:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:28:18:FF:81:6C:B9:34:2D:E8:45:16:90:23:67:50:22:64:2C:09
X509v3 Authority Key Identifier:
keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:43:9e:ed:15:b0:ea:a2:19:2f:d0:78:1c:00:95:32:c0:92:
96:19:bf:5f:0f:4f:26:4e:da:8e:e6:19:84:a8:56:ae:98:9d:
26:e4:dc:c2:2e:77:2e:50:5a:e6:cb:06:84:d8:28:a6:a7:61:
22:18:63:8d:28:91:9d:9e:dc:1f:0a:1b:40:0d:6c:fb:64:c7:
27:5f:b7:ee:c7:e8:f3:d2:a3:53:28:cd:a3:25:f5:f2:c4:15:
e4:dc:95:e9:0b:96:41:b4:02:9b:16:4e:04:56:2e:8d:b7:20:
f6:49:92:8c:ff:8d:cb:99:5e:89:33:58:bf:de:e9:5c:86:c4:
94:14:d6:e8:a4:84:41:5d:83:e9:59:7c:0e:3a:7d:b5:1f:fa:
f5:5d:73:d3:e5:1c:d5:46:c7:dd:ec:33:b3:75:e3:49:cc:b5:
32:94:88:f9:fb:99:6b:24:4d:b6:08:db:4b:56:46:86:bf:02:
9d:d4:fa:28:d4:5b:68:d7:7e:e7:ca:6f:bd:99:07:94:62:77:
78:fa:ff:19:d3:8c:d9:05:15:1f:dc:c9:0c:e4:d7:3a:1e:39:
e8:68:ae:c8:b5:8e:44:80:0a:eb:4c:ed:70:97:17:f2:fe:50:
7e:13:f7:4b:b3:a8:57:5d:56:ec:14:ae:62:8a:2a:07:28:9a:
db:f2:fe:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:40 2025 by rpki-client