Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
File: IXt6sGK8gos0jQUwbmU1R0i51tY.mft (raw, json)
Hash identifier: DQFG+frRCPN+lcbarOZOzHhWr6bnJXp/OqxcrDBK+Po=
Subject key identifier: 16:C4:8B:6F:4F:23:55:8B:7D:68:0C:83:19:26:10:CA:2B:5F:2C:D2
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial: 019A15E08926D13D6135A3835E18A62DFB73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
Manifest number: 0AA6
Signing time: Fri 24 Oct 2025 11:00:27 +0000
Manifest this update: Fri 24 Oct 2025 11:00:27 +0000
Manifest next update: Sat 25 Oct 2025 11:00:27 +0000
Files and hashes: 1: 1pYkybGgKOUsse4DTksz46U1UVk.roa (hash: TAfzGG00BI7uAR7rTZh0yLg+7xDY58D62iiCBqbod3s=)
2: IXt6sGK8gos0jQUwbmU1R0i51tY.crl (hash: zusDXOv7ptXWNXrzLq/49F4eNALlxwf8ZOovG/qgiPo=)
3: VxdHezzHKrkrE2Feoz1POMlVQMY.roa (hash: FkZe/vgHmq1Yaa4HgYSORTSSTc1UQglxGrV02REUteE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:e0:89:26:d1:3d:61:35:a3:83:5e:18:a6:2d:fb:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
Validity
Not Before: Oct 24 11:00:27 2025 GMT
Not After : Oct 25 11:00:27 2025 GMT
Subject: CN=16c48b6f4f23558b7d680c83192610ca2b5f2cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:72:bf:0f:8a:96:0e:15:f5:c3:8e:a5:a3:
35:32:5e:6d:5f:41:9d:27:4d:24:fc:75:9b:69:01:
13:7e:2e:58:b5:6d:43:7b:bc:58:d4:25:4f:1e:0a:
f4:26:99:65:b2:dd:00:4e:2d:b9:05:27:de:3b:2f:
40:14:90:82:9d:8a:6b:11:1c:2e:95:74:cb:59:a4:
e3:d7:17:50:f8:1a:69:b3:e6:0d:5f:1a:4b:5e:d9:
2d:5b:d0:c1:3e:f9:f3:36:1a:71:bd:77:33:40:94:
db:d5:76:48:7d:55:28:a3:44:54:ba:84:3e:98:c0:
56:5e:34:4b:77:02:fd:90:03:d8:30:a3:76:c4:af:
22:9b:37:9f:0e:8e:19:13:03:03:e8:4f:39:96:73:
1b:c1:e9:f1:a1:fc:07:e8:fa:80:7b:29:20:79:ac:
2e:7c:99:b1:f2:e7:fa:29:33:65:90:38:18:4d:4e:
f4:d5:1c:e8:5f:bd:29:b5:e5:93:b3:53:24:13:fc:
4b:c9:8f:f2:c0:56:a9:a2:51:32:71:d6:7d:a3:e4:
40:77:23:62:38:dc:db:16:97:fc:31:88:9d:38:80:
dd:dd:63:02:09:a1:61:1f:c0:f0:d7:33:5f:98:7c:
38:0d:eb:dc:2c:1e:be:ec:e4:b8:0d:d0:df:36:e8:
e2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C4:8B:6F:4F:23:55:8B:7D:68:0C:83:19:26:10:CA:2B:5F:2C:D2
X509v3 Authority Key Identifier:
keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:8d:86:ca:3b:9c:73:29:86:e9:b7:11:8c:c3:97:26:7f:06:
7f:49:1c:d2:89:ea:de:05:41:6b:53:4c:26:43:8e:90:77:d0:
6a:d1:8d:12:28:e9:96:0b:10:7a:05:fa:c8:f0:2b:5b:79:2a:
a7:6e:9c:8a:4a:f8:62:75:87:64:5b:2f:3f:ef:78:d8:53:4c:
c4:ee:bc:77:97:96:f1:66:84:fd:19:2f:38:e8:a5:9e:57:13:
7f:a1:83:16:4a:66:1f:5e:99:04:fe:2c:d9:01:4d:5a:5a:93:
2c:92:54:ea:38:d5:8f:f4:f1:f1:02:22:78:9e:ce:26:72:a7:
0c:21:0c:5b:ed:2c:5c:00:1a:8f:a7:27:f4:27:33:ba:cc:50:
6a:d6:88:a2:59:ce:58:8a:23:d5:99:b1:a1:16:99:d4:30:59:
b9:08:91:c7:61:0d:05:b4:16:97:56:26:20:df:fc:6b:31:67:
a3:49:cb:c6:f9:7d:10:41:f2:29:fa:0b:81:a6:0a:1a:25:11:
81:cb:90:ed:87:b5:65:3a:db:f8:e6:90:3c:53:72:0a:81:ff:
e4:d0:14:4d:98:63:b4:11:3a:1a:37:23:9e:21:7d:22:61:d1:
16:c3:2b:cc:56:f3:85:89:dd:bd:c1:5b:94:3a:df:19:8a:ad:
15:1b:73:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 20:33:06 2025 by rpki-client