Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
File: IC9MGjfpMTzdLup3UK4CjRjNWq4.mft (raw, json)
Hash identifier: As5fjx/JWAb9JrZZNoPET1oTqQf0GGdtPyoq9v0Xkjk=
Subject key identifier: 54:F9:DB:EE:17:BC:37:3C:5C:F9:4A:D6:CD:3A:64:5A:81:6A:1B:D0
Authority key identifier: 20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
Certificate issuer: /CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Certificate serial: 019A50E327DF0D98B62439C13B95E64CE4F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 22:00:55 +0000
Manifest this update: Tue 04 Nov 2025 22:00:55 +0000
Manifest next update: Wed 05 Nov 2025 22:00:55 +0000
Files and hashes: 1: IC9MGjfpMTzdLup3UK4CjRjNWq4.crl (hash: 3WEK9dxE3nD+YUNpOiYcg6G2P6AQi784EeadGIjCQvg=)
2: IpCJGLN8WNm4ASMIxNnGZPuEtp4.roa (hash: nrrSBtVL1+LxQy+ccPed0KobnXytQAq3RiSJBLbBVIg=)
3: NfNd6pjqYOF2P-1csZDDcYiiQ28.roa (hash: iQWQfc6lD74rDEabgsCAVeBcixywrixRVP1KpMFN48o=)
4: PJBAejzPvEvF3ZoupzGWVEj1Og0.roa (hash: BFJtqcfNldj6Jrfn0Y0+mOBk6xT0n483gTjn5ogYiu8=)
5: aCUjIUK5OOSaycrn7_ksP5SjmPw.roa (hash: O1lgV6htb/Z9+mSwOsrU/V0sb4jZo6xRqeghVOqs13I=)
6: dSYYIsgqOPsPCWRb8n6bjaKooRw.roa (hash: Pvqr/OOkaqypvOSknbbOn2J0oHNnn5WhmVz2GaH3aXU=)
7: quZyu716dxS9mdBeGNCJZ1sGIZM.roa (hash: MPvLxa0c+riXjzyelLJV18hBBvFNCarL2WtEM/bk6Os=)
8: sx8Ag2ZkbPORNb5IpKGaIu2_Dqo.roa (hash: ZFFpoBJ2SvC/bg4XtAEwmcSclBY/i+xRWcdnLVCOAss=)
9: wUsJ3Y8bKRlwOlXMA6Qttd1Brps.roa (hash: zuU1UQuoYfDo2IQVUCO8dMMln85NIWVqpAhKwg/ayj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:27:df:0d:98:b6:24:39:c1:3b:95:e6:4c:e4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Validity
Not Before: Nov 4 22:00:55 2025 GMT
Not After : Nov 5 22:00:55 2025 GMT
Subject: CN=54f9dbee17bc373c5cf94ad6cd3a645a816a1bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cb:5e:f9:90:81:05:c7:78:fe:ec:17:14:ca:
dc:ef:52:f7:94:6a:5f:67:0b:7b:63:24:86:e5:3d:
fc:7f:37:58:02:6a:59:97:6a:8b:79:f0:e8:a4:bd:
cb:c1:0d:8b:13:53:2a:09:7c:a4:f4:a7:4b:c4:14:
3f:55:9a:58:d8:7a:1f:aa:97:cb:2d:96:ec:94:83:
f0:da:4c:d6:6d:d7:9e:64:82:01:d9:7b:9c:d4:2b:
7b:76:7e:75:17:6c:f9:55:a0:83:42:03:43:eb:17:
cf:ad:50:b7:1b:f9:62:b5:83:60:1a:39:5d:48:55:
b0:d2:3a:b8:af:3b:2c:91:b9:8b:4a:b9:27:e5:b0:
32:7a:dc:a2:7c:73:2a:e9:2b:59:e9:a7:a7:b8:97:
f9:d0:b6:ff:84:6b:34:77:03:50:ec:40:dd:0c:c5:
4a:15:7a:44:9d:b5:b5:80:04:78:4b:53:cc:59:2c:
9e:f5:80:0d:8c:d5:03:28:2d:42:1a:a4:75:7c:1d:
69:c7:15:7f:d2:f7:32:64:42:b0:db:ae:72:cd:7c:
e9:b9:38:08:1b:d6:54:a9:8f:c6:36:42:0f:7f:99:
cc:85:72:f5:b9:84:f2:20:53:76:13:49:cb:6f:1b:
bc:7d:f4:a3:92:38:a3:51:0e:be:6f:70:25:36:24:
fa:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F9:DB:EE:17:BC:37:3C:5C:F9:4A:D6:CD:3A:64:5A:81:6A:1B:D0
X509v3 Authority Key Identifier:
keyid:20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:1c:10:14:c7:a2:67:72:a8:90:a2:53:5d:63:75:9e:4c:12:
27:05:f6:ca:8f:84:71:db:01:1c:29:4a:a6:33:c2:09:32:a3:
2d:bd:6e:97:a9:a7:f1:e2:26:3e:9e:1a:ef:d5:70:c0:14:4d:
57:dd:e2:40:5d:41:a2:7a:1b:58:7c:9a:ae:18:82:c0:3e:33:
4e:0d:c3:83:e6:50:46:b8:80:7a:86:1f:4c:eb:72:a3:ab:7e:
22:4a:85:c2:23:cd:ed:5d:a2:7e:0f:79:38:8e:5a:e4:85:d6:
b5:18:da:a1:87:bc:4d:1e:53:dc:78:5f:91:81:14:08:70:db:
cd:be:f5:c2:61:93:ab:eb:2f:e9:6d:8a:23:41:50:44:66:8c:
bc:7f:0d:3e:3f:53:c7:70:35:b8:37:f5:22:aa:11:51:20:d5:
1b:e4:a6:7d:f6:92:9e:a6:60:c0:0f:c1:b6:5c:e1:88:50:80:
e6:85:fb:fe:1f:a9:a4:f8:93:8a:1e:99:d5:88:01:ab:3e:4c:
64:81:6d:d0:74:e6:c1:3e:8f:be:0b:17:c9:79:b3:0a:5a:b8:
7c:0e:7d:00:c4:e0:6b:16:26:0a:43:20:22:3a:07:48:ac:bd:
8d:75:14:52:30:8d:54:90:3d:41:b7:bc:15:ba:e5:40:00:c2:
6a:84:73:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:50:40 2025 by rpki-client