Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
File: IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft (raw, json)
Hash identifier: SJx/hQDcWFpUhRgRpbNW5vNRnGzehOv5BYL1uuCkcJ0=
Subject key identifier: 9A:05:D7:8D:6C:7E:9C:3E:4B:62:79:5C:9D:99:08:5D:2A:58:DC:9C
Authority key identifier: 20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
Certificate issuer: /CN=209faf93524bb80774ffce9341f495a8fb318f10
Certificate serial: 019A53E39DE6BF4D843F3D05A809E6B3CD62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
Manifest number: F9
Signing time: Wed 05 Nov 2025 12:00:17 +0000
Manifest this update: Wed 05 Nov 2025 12:00:17 +0000
Manifest next update: Thu 06 Nov 2025 12:00:17 +0000
Files and hashes: 1: 6q7TVMacTBaYR4P4ix3oetf6VRE.roa (hash: uLRq0asuqIHTiwS92wqc71gnPUUH1B7QJ0+2fDVufHI=)
2: IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl (hash: LKa+EsolHYNteJvLQ6ea1UxW9B0dY5+k8aFiezHanY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:9d:e6:bf:4d:84:3f:3d:05:a8:09:e6:b3:cd:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209faf93524bb80774ffce9341f495a8fb318f10
Validity
Not Before: Nov 5 12:00:17 2025 GMT
Not After : Nov 6 12:00:17 2025 GMT
Subject: CN=9a05d78d6c7e9c3e4b62795c9d99085d2a58dc9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8e:e8:1d:69:c4:65:a1:b1:17:86:8d:33:6c:
c9:e8:7e:66:9c:39:ee:12:37:2a:68:f3:e7:9e:d2:
e0:42:4b:5e:d0:c7:d2:da:2b:62:75:34:32:be:b0:
44:a6:f7:35:bc:71:e7:b7:e2:58:4a:8c:3b:6b:b9:
20:ca:75:73:91:44:11:16:2c:4b:68:e8:1d:83:51:
af:94:9f:d9:8e:9c:96:73:f7:43:ea:eb:04:ef:2c:
6a:c4:e4:27:f8:9d:9a:09:05:bd:35:2e:aa:11:c5:
42:a4:1e:d2:f5:53:24:45:25:ec:54:6b:77:4a:09:
b1:4f:e9:7a:8f:b3:6c:f3:1b:eb:3d:b9:52:52:87:
f0:7b:1b:5f:c2:87:d4:11:37:2d:97:f2:9a:6c:22:
bd:f6:b9:5c:f4:5a:82:66:c1:2b:18:92:d9:e1:a5:
e7:48:c2:76:a0:94:5f:50:57:6a:04:b5:c4:b2:e8:
67:c1:50:ec:e0:78:0f:3a:8d:c4:d9:3a:5e:09:f6:
e9:0b:e4:f2:1d:79:bb:e5:02:c6:a7:b2:55:5e:83:
20:80:07:68:b1:51:44:a5:07:77:a9:50:aa:a5:ca:
4f:33:5e:68:6e:b0:cc:73:b5:88:73:ef:a6:63:d2:
42:f6:37:f3:e0:bd:73:40:db:7a:09:4b:0d:7a:b3:
fe:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:05:D7:8D:6C:7E:9C:3E:4B:62:79:5C:9D:99:08:5D:2A:58:DC:9C
X509v3 Authority Key Identifier:
keyid:20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:be:fb:ef:ae:b2:4b:86:96:79:61:5c:10:b8:30:12:85:6c:
47:b5:50:d5:fd:71:fb:42:04:af:51:dd:05:d1:a9:1d:53:43:
78:f9:5b:4b:7d:45:cc:4e:76:2e:6f:6e:a4:f5:fe:31:e0:e7:
ce:04:37:7f:3d:7f:f7:29:3d:58:af:9f:0e:32:a5:39:43:b9:
78:17:82:f8:54:23:bf:62:c7:89:f1:d2:22:46:10:21:74:79:
d0:19:b1:7c:57:cb:43:3c:9d:40:f8:19:a4:ff:ad:3c:26:37:
c2:30:b9:ce:f0:f3:96:32:53:cd:7a:6b:cd:a8:ac:ee:b0:e5:
2c:d6:af:2b:99:b3:d9:9e:a9:a8:d4:3c:27:86:73:99:8d:46:
30:23:5d:7a:ad:9c:e9:a0:41:ca:4d:d1:fa:23:7d:51:23:69:
67:e5:88:a6:77:59:31:91:cf:43:d2:d0:28:52:88:19:40:76:
e6:3c:a6:32:2e:a0:42:b3:3b:b7:78:a6:2f:61:6b:68:4c:01:
41:bb:58:62:fd:f3:fc:5b:d2:24:e8:e3:0b:0e:1d:83:f6:ce:
85:76:e9:3c:6c:f3:ef:a6:5f:f5:f6:fe:0a:cb:19:55:3a:56:
19:63:70:be:c0:d7:fb:1e:2c:30:a0:65:69:ee:07:80:af:09:
47:80:86:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:08:16 2025 by rpki-client