Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
File: IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft (raw, json)
Hash identifier: vcnzYHVjwze1N7aELdaUNv8YM8L59Q009We/6K7AsoY=
Subject key identifier: AA:BE:E7:F1:98:92:97:01:E1:E2:0E:94:99:A9:29:39:56:99:B8:4C
Authority key identifier: 20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
Certificate issuer: /CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Certificate serial: 019A29D5510182587BEDE944A6B50151EBD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
Manifest number: 146B
Signing time: Tue 28 Oct 2025 08:00:37 +0000
Manifest this update: Tue 28 Oct 2025 08:00:37 +0000
Manifest next update: Wed 29 Oct 2025 08:00:37 +0000
Files and hashes: 1: IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl (hash: E//UsbSxCXkzNh/1bkEbKfcj1cTDGA3av9IU37fpkew=)
2: Tj1VT7s8ilnWaRH5FDEx4ErgOfw.roa (hash: EAnVAxYXeZnLn3O7V7JRGZpaiw9YJLofd+adf3s7hWw=)
3: z8gJT3mWJvoCjNtGavez3w-sptI.roa (hash: rAtA37xRZ8BRiEnR3BviWDsE+vEFga17zSGIolCXdPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:d5:51:01:82:58:7b:ed:e9:44:a6:b5:01:51:eb:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Validity
Not Before: Oct 28 08:00:37 2025 GMT
Not After : Oct 29 08:00:37 2025 GMT
Subject: CN=aabee7f198929701e1e20e9499a929395699b84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cf:b1:ca:db:56:da:49:f7:51:a9:5b:78:da:
31:37:53:19:4c:3b:9c:48:53:67:30:d8:10:37:f6:
84:09:75:fc:8a:85:8d:d7:84:08:3f:03:17:21:74:
cc:09:0c:79:99:bb:f9:b8:74:b4:68:ee:9c:af:72:
41:c6:cf:8a:11:36:c5:29:62:17:f9:b6:c6:a7:ef:
6a:78:1b:5e:f9:c4:0a:03:15:16:c6:21:b4:6a:71:
e0:4c:99:74:c7:86:00:57:13:90:31:44:bf:23:11:
26:33:19:5f:09:c5:c2:b6:8e:e3:34:0e:c8:ec:56:
8a:fb:8e:ac:cf:f4:65:79:56:c6:a9:5d:dd:02:49:
45:71:c3:99:36:a6:05:4f:bc:3a:81:c6:8a:81:11:
a7:c6:15:6d:5e:ac:dd:cd:ac:93:5f:4b:01:05:94:
df:cb:40:3e:4f:9e:e3:bf:4c:7c:8f:c5:5c:26:5b:
16:74:33:29:8b:1f:78:9f:90:7b:14:99:7a:88:22:
be:07:96:0c:d7:0f:91:81:7e:c9:2c:58:88:b1:b6:
cc:03:fc:8b:3f:d6:10:6e:09:14:6e:73:dd:40:f3:
c6:b2:72:98:09:6d:da:f0:9d:46:3d:0f:8e:2b:cb:
db:26:90:ad:de:11:b8:ad:e4:b6:40:b8:4d:cc:d1:
25:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BE:E7:F1:98:92:97:01:E1:E2:0E:94:99:A9:29:39:56:99:B8:4C
X509v3 Authority Key Identifier:
keyid:20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:76:75:cc:19:58:6c:17:f6:e5:99:2a:a7:c2:ad:4d:24:e2:
d2:2b:9b:ae:c6:ac:01:69:0d:77:3b:bd:7a:c7:c7:5c:39:0b:
11:27:c6:60:40:ae:04:59:5c:75:7b:85:04:76:69:e5:1f:9b:
88:8c:a0:91:39:82:4b:e4:ec:9e:3c:a2:e5:db:1f:bd:ed:0e:
9a:db:dc:0d:0f:c6:b1:a4:cf:0d:4a:d5:e6:88:2f:7b:d3:ca:
10:ed:48:50:05:f5:d5:81:d3:6d:8d:da:72:68:b1:3f:6c:c5:
02:64:90:1a:d6:52:ca:46:12:10:8e:07:f9:69:91:34:d9:78:
ea:6d:c2:3c:a1:e3:2e:7a:fc:0d:88:a0:3d:6d:43:53:ef:9d:
a9:a4:76:8b:27:26:07:4b:2a:9d:dd:8b:b7:0a:f2:1d:7c:90:
2f:4d:34:ce:6b:df:b7:80:69:ee:7b:7a:6e:f5:68:64:0d:91:
6f:71:c0:67:cb:6d:67:b6:59:88:eb:96:0d:f2:5f:51:da:fc:
b7:bc:ba:80:e4:59:d0:1c:cf:dc:41:c6:b5:8c:3e:4b:06:d8:
da:fb:6c:1d:85:66:73:2e:53:7a:e5:88:c0:f2:39:b1:75:52:
0f:a5:ec:ae:f2:fa:ca:e6:c3:df:a3:05:f4:54:9f:f6:bc:bd:
d8:c8:70:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:32:23 2025 by rpki-client