Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
File: IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft (raw, json)
Hash identifier: exrA9PI55b7RbvY072zlbCEGyCPge4MpV5wwy2tEaKc=
Subject key identifier: 6C:37:D3:9A:7F:8C:B5:5D:51:9D:C8:FF:97:A5:F6:29:8F:D9:11:AE
Authority key identifier: 20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
Certificate issuer: /CN=209faf93524bb80774ffce9341f495a8fb318f10
Certificate serial: 0198A34DE3104E5B61B6F52FF32504F94C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
Manifest number: 19
Signing time: Wed 13 Aug 2025 12:00:47 +0000
Manifest this update: Wed 13 Aug 2025 12:00:47 +0000
Manifest next update: Thu 14 Aug 2025 12:00:47 +0000
Files and hashes: 1: 6q7TVMacTBaYR4P4ix3oetf6VRE.roa (hash: uLRq0asuqIHTiwS92wqc71gnPUUH1B7QJ0+2fDVufHI=)
2: IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl (hash: RyvFl3Tj6N/fOMZvaqvleFSX0q6TCWz3Pat/O2x6p38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Aug 2025 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a3:4d:e3:10:4e:5b:61:b6:f5:2f:f3:25:04:f9:4c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209faf93524bb80774ffce9341f495a8fb318f10
Validity
Not Before: Aug 13 12:00:47 2025 GMT
Not After : Aug 14 12:00:47 2025 GMT
Subject: CN=6c37d39a7f8cb55d519dc8ff97a5f6298fd911ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e3:f5:15:2b:be:64:15:9e:29:f2:12:50:d3:
fb:27:e4:53:ff:40:39:58:cf:fc:9b:ad:07:cf:15:
56:f6:c7:8f:ea:17:2e:8b:d1:ce:f3:bc:1d:ff:18:
3f:3b:69:ff:02:69:5f:a9:3b:f2:de:bd:5d:ae:1d:
26:53:b5:58:4b:a2:2b:16:f1:5a:31:c3:ff:98:95:
d6:9e:c7:a6:89:96:7e:07:19:94:1b:9b:31:89:9b:
ea:0e:54:c5:9d:a0:a3:f3:c4:f3:05:2f:aa:1c:25:
26:e9:b9:92:b5:09:60:dd:d8:9a:01:d1:2b:a4:c2:
fd:40:6c:2f:16:a9:b2:b6:ff:eb:7b:b2:01:98:19:
30:82:20:d1:96:60:61:0f:8f:6d:22:cc:41:9f:ac:
60:e2:d8:4a:49:76:d5:82:2e:bc:2a:6e:9e:c9:4a:
71:a4:1a:5b:83:ed:c5:59:de:3a:3d:e3:c2:4c:d3:
21:3e:b3:45:c6:ce:12:c3:d3:c3:42:d2:b5:e4:e5:
58:00:05:d7:0d:e8:40:15:e1:28:58:25:f9:b5:5e:
50:32:f9:8d:43:12:da:42:68:3b:5c:a3:d3:82:5f:
d6:c0:1d:c3:d1:ac:12:e9:a9:5f:9b:3c:a3:e4:bc:
92:89:64:8a:a0:67:bf:01:f6:da:09:f1:62:4d:48:
89:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:37:D3:9A:7F:8C:B5:5D:51:9D:C8:FF:97:A5:F6:29:8F:D9:11:AE
X509v3 Authority Key Identifier:
keyid:20:9F:AF:93:52:4B:B8:07:74:FF:CE:93:41:F4:95:A8:FB:31:8F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ-vk1JLuAd0_86TQfSVqPsxjxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/5a2cbd-3b26-4586-8a6e-d164dde5351f/1/IJ-vk1JLuAd0_86TQfSVqPsxjxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a3:25:2b:06:b1:40:09:9c:3c:e7:a2:34:8b:fb:1d:01:08:
b8:8e:7b:bc:9e:55:14:69:55:38:d2:d0:32:62:fc:ed:d2:99:
a3:56:1f:07:8d:92:34:c7:be:f6:6c:40:a9:3d:f9:00:3c:b7:
10:18:ed:43:12:82:3a:0b:b5:1a:77:35:3d:c5:f9:82:6c:83:
fd:ba:2e:54:c4:c9:c6:18:3d:7f:15:a3:c2:e7:45:3b:50:6c:
90:3a:27:50:54:09:b8:0f:af:59:13:32:70:4d:68:0e:54:fe:
7a:60:e0:a6:de:02:17:28:0a:2a:71:a9:8d:72:28:60:6a:aa:
39:54:38:2d:ad:17:a0:28:da:0b:38:2d:0b:e0:df:c6:df:c4:
7b:0a:ba:ee:fe:4f:04:9c:d2:d3:53:df:52:de:8c:87:9f:ab:
66:42:34:91:35:0e:14:47:c2:d6:fa:d3:ea:9b:1b:63:2c:bf:
a7:d9:f9:c8:f1:a1:a0:b9:ca:5e:b5:e9:4f:a1:ff:83:53:8f:
78:f9:10:ab:a3:85:04:fc:33:e1:5e:e3:0e:46:70:82:2a:bf:
73:5d:71:cd:bb:d5:47:94:8a:24:f0:b9:01:ea:01:c9:65:e9:
07:23:37:af:7f:fb:1c:d2:e8:51:81:e3:19:92:5e:0e:e2:71:
2c:28:e3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 15:47:28 2025 by rpki-client