Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
File: IxMMmax6pAhscXVxFKQWP4AJAUI.mft (raw, json)
Hash identifier: eKiLiq2teNOfx6lBNlsOy7kZLhrgZApHcLRRsAVjJkk=
Subject key identifier: E7:33:A4:59:46:F6:B1:87:4C:33:9E:79:85:64:EF:C0:CB:8C:05:19
Authority key identifier: 23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
Certificate issuer: /CN=23130c99ac7aa4086c71757114a4163f80090142
Certificate serial: 01996435A14A635EF82BB7E61F8282E4C22E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
Manifest number: 09DC
Signing time: Fri 19 Sep 2025 23:01:00 +0000
Manifest this update: Fri 19 Sep 2025 23:01:00 +0000
Manifest next update: Sat 20 Sep 2025 23:01:00 +0000
Files and hashes: 1: 7LeNtT1Py-375udT6tgnEczdaA4.roa (hash: KcUWkl6MBuk85woap7zLa0rzE+sobb9Vo8npqesilrw=)
2: IxMMmax6pAhscXVxFKQWP4AJAUI.crl (hash: nJMynfITcQmbDsoqqNUQ7wCGbEUR5toF8sxEsTbmtKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 23:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:64:35:a1:4a:63:5e:f8:2b:b7:e6:1f:82:82:e4:c2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23130c99ac7aa4086c71757114a4163f80090142
Validity
Not Before: Sep 19 23:01:00 2025 GMT
Not After : Sep 20 23:01:00 2025 GMT
Subject: CN=e733a45946f6b1874c339e798564efc0cb8c0519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d2:0f:e0:7a:ee:16:d4:60:74:13:3e:ae:b6:
d4:5c:68:97:97:c4:09:d8:c9:49:71:d9:ed:93:5e:
66:bd:ca:22:dc:b9:50:f5:f4:b7:ed:59:db:55:de:
7f:21:c8:21:a8:83:ad:8f:7c:34:7e:09:a0:aa:2e:
51:8f:14:ab:74:1c:ab:5d:18:b2:45:2b:af:ba:15:
38:c1:62:ce:33:51:e2:44:9d:80:a7:4c:2c:52:ec:
88:1a:1c:1d:cc:12:31:fe:69:66:d9:75:ef:6e:2f:
47:b6:2f:80:a8:b5:17:a8:94:fe:ff:9c:54:fd:08:
59:df:71:46:11:66:f1:a8:b5:c4:c8:ba:95:57:09:
c3:64:6b:9c:25:13:75:f3:34:3d:5f:bf:62:04:30:
4e:60:9d:be:a1:6f:ba:f3:7a:0a:c6:37:47:ee:0f:
77:83:29:8a:16:73:90:30:61:f0:0e:0a:68:af:cf:
f5:9e:14:3a:96:5a:f2:8e:36:0e:69:9e:42:f6:f5:
01:b7:87:01:1f:86:d1:6d:b7:96:9c:a7:6f:ab:00:
f2:b6:bb:2c:82:8e:f6:aa:3c:c6:b0:81:11:67:d6:
ea:1b:08:ff:85:88:bf:5d:fd:e5:63:27:cf:26:8b:
39:2f:33:18:fc:c9:e7:74:f5:42:2c:13:2b:7a:8d:
e9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:33:A4:59:46:F6:B1:87:4C:33:9E:79:85:64:EF:C0:CB:8C:05:19
X509v3 Authority Key Identifier:
keyid:23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a5:c3:ff:f9:a6:06:a3:91:fc:4c:46:52:1f:82:4b:ec:1c:
15:25:70:ed:cf:7d:15:fe:20:ce:37:f4:2f:27:20:c8:81:ee:
f9:38:83:d8:fa:c9:a5:87:b1:45:66:c2:73:5e:95:fe:20:d0:
23:ca:21:c2:04:19:46:fa:2b:a6:24:81:4e:a3:bc:e3:28:51:
ad:3f:4e:f9:94:3e:9b:f1:1a:a7:45:54:40:21:c1:44:f3:d6:
49:26:e1:a2:54:da:0c:f8:24:cf:d3:21:14:37:e5:a6:64:43:
ca:b4:fd:77:b7:bd:d3:72:80:8f:b6:7c:16:4e:89:f1:3f:02:
8a:f6:48:94:51:96:f3:9b:b8:a0:d9:dd:d0:ca:f5:56:ff:9b:
72:4b:6a:1a:12:3f:eb:45:96:09:06:21:56:af:6c:96:e2:ee:
d3:07:b7:b9:2d:b7:97:19:a2:85:c9:3c:f3:a5:33:55:e8:9b:
06:06:28:53:e3:15:f1:5e:b0:f1:a1:08:26:9d:a7:d7:fe:3a:
fa:a4:8c:2d:51:b8:e0:72:03:2b:dd:93:79:96:53:81:1f:75:
f5:90:f7:bb:cf:d7:cc:36:80:1a:d2:6f:5f:52:38:47:18:cf:
ee:23:77:43:52:9b:40:96:63:2e:f3:a1:b1:ff:c2:54:7a:32:
42:e8:f4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 05:33:54 2025 by rpki-client