Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
File: iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft (raw, json)
Hash identifier: M1bKH5LGHGn6aru+mTl1zZfh+wYGUXtkKu9NQPHSN0I=
Subject key identifier: AB:C4:04:F9:FF:09:CE:60:82:28:DE:B7:27:30:AF:6F:6A:16:8E:E5
Authority key identifier: 88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5
Certificate issuer: /CN=88987ed4e73d0407483cc224ccf45aedf4969dd5
Certificate serial: 019A4DE1A0A21A2A7983E721E5CC49B4CE0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
Manifest number: 16A2
Signing time: Tue 04 Nov 2025 08:00:23 +0000
Manifest this update: Tue 04 Nov 2025 08:00:23 +0000
Manifest next update: Wed 05 Nov 2025 08:00:23 +0000
Files and hashes: 1: iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl (hash: ngWEpqbRUyS1hoSPFRXRZ/JSoHRedtZWel2baXqeK/M=)
2: ja_rBF-mVB6I6AG5Sq3U_cQoltk.roa (hash: nVfwFtdg/ueuXQpAAMHTHZq3sXCbrECHNWhALLqW2Vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:a0:a2:1a:2a:79:83:e7:21:e5:cc:49:b4:ce:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88987ed4e73d0407483cc224ccf45aedf4969dd5
Validity
Not Before: Nov 4 08:00:23 2025 GMT
Not After : Nov 5 08:00:23 2025 GMT
Subject: CN=abc404f9ff09ce608228deb72730af6f6a168ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:22:c5:de:a5:41:7c:fe:d9:56:62:76:5e:94:
18:41:9b:71:df:c9:1d:ab:d8:43:af:64:93:3b:fd:
5c:c2:0f:2e:ed:cd:b0:d3:3a:3b:db:45:29:2a:31:
28:db:4b:02:95:4e:84:e7:12:92:55:4d:d5:dd:61:
70:d3:61:f1:30:ba:5f:b7:1a:8a:c2:13:b7:1a:55:
11:89:7e:10:af:e5:98:2a:ac:4d:78:40:74:1f:28:
11:d1:46:65:36:0d:40:09:96:a8:1a:1d:c0:93:98:
7a:4e:f9:53:af:40:09:5b:10:07:82:7c:22:0a:0e:
5d:90:15:07:5a:08:3e:02:f2:ef:15:1d:84:cb:2a:
7c:34:6d:3d:bc:57:ba:ed:40:61:62:d3:1e:a7:28:
c4:99:a1:65:c5:fe:1c:d2:3b:08:22:2c:18:8e:7e:
97:ab:54:21:98:90:e3:a8:5a:ee:46:7d:3f:fd:ae:
87:1b:ad:1b:b7:e0:13:32:3d:1e:14:ed:24:09:10:
b0:a0:d2:55:c9:9c:ef:e9:9a:68:b7:9c:0d:ed:cb:
36:d6:a8:8b:4b:42:c0:9d:bf:73:8c:71:40:0a:ce:
4c:a6:91:8f:bb:04:d1:6b:9b:c5:c5:f7:01:fc:9f:
6f:3b:98:32:8d:d6:a6:06:07:e0:a5:ab:6c:80:30:
c1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C4:04:F9:FF:09:CE:60:82:28:DE:B7:27:30:AF:6F:6A:16:8E:E5
X509v3 Authority Key Identifier:
keyid:88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:cb:d4:fb:59:85:c8:59:17:e9:89:2a:df:15:07:c5:e5:c2:
54:eb:44:69:4c:15:7d:11:fa:9f:6d:3e:49:95:23:ea:70:d2:
3f:4f:02:af:e7:e7:c5:48:0d:6f:ea:4d:26:61:40:8f:65:4c:
c0:93:6b:a3:ad:cb:6a:df:ad:bd:26:bb:cb:7a:48:6d:93:8f:
68:eb:9e:65:1f:3d:95:2a:13:58:67:d4:f0:c0:49:47:49:bc:
2e:25:5f:70:4c:af:25:a2:a2:10:3a:e9:03:06:38:4d:85:16:
98:e3:5d:66:6f:04:f0:ad:38:20:29:e1:65:0d:21:38:2b:b4:
48:42:58:e8:7c:ea:27:74:fb:e7:ec:32:dd:f7:20:02:85:33:
dd:29:c6:eb:a8:bd:90:31:7e:fc:45:a2:64:66:ec:26:4c:31:
f0:f9:10:8a:e4:e0:bc:80:61:cd:7d:14:53:36:ef:82:e8:58:
7d:c0:2d:6c:a6:e1:d1:81:65:4b:3a:01:c6:fe:6e:7c:c5:8d:
67:87:ff:88:b1:ce:c1:9a:a6:2c:da:b9:99:e2:35:e9:ca:cf:
40:eb:17:ce:b7:3c:09:c2:ed:bc:d5:9c:cc:eb:3e:dc:fc:3a:
ca:41:3a:b0:a5:3b:82:95:0f:34:f2:a0:9b:73:64:64:61:78:
60:ae:2c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:32:18 2025 by rpki-client