Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
File: ifKArlGVUMen9JU6sn16593rE0E.mft (raw, json)
Hash identifier: /LSa6R28cuX207GzH+JyN5pA872wuGBZ0ND2al1HiY4=
Subject key identifier: 87:F7:83:2F:D6:DF:93:13:FE:2C:8B:A0:19:92:1D:80:1C:60:AC:D0
Authority key identifier: 89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
Certificate issuer: /CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Certificate serial: 019A51BEF81F4045149C7AC3FE083ED5E2E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
Manifest number: 16A0
Signing time: Wed 05 Nov 2025 02:01:00 +0000
Manifest this update: Wed 05 Nov 2025 02:01:00 +0000
Manifest next update: Thu 06 Nov 2025 02:01:00 +0000
Files and hashes: 1: 9dTi4wdiI3Tu8z52gakpEQiMUok.roa (hash: 4zYsVsn8fJnXPhGX6xQByXU2W5bf/FC7mJXJpk5+gzY=)
2: ifKArlGVUMen9JU6sn16593rE0E.crl (hash: XakMDEbcLQKYnd45jAhsYPgXf0xK+8y7G6bJs7sfKag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:f8:1f:40:45:14:9c:7a:c3:fe:08:3e:d5:e2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Validity
Not Before: Nov 5 02:01:00 2025 GMT
Not After : Nov 6 02:01:00 2025 GMT
Subject: CN=87f7832fd6df9313fe2c8ba019921d801c60acd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ba:ba:49:c4:61:f7:21:3f:0b:6d:f6:0f:65:
c3:3e:f3:c4:b2:af:b2:d2:86:e0:cd:d7:15:50:a0:
27:02:58:05:90:10:1f:87:5c:65:96:28:73:1e:5b:
3a:62:bc:04:8c:eb:f3:75:b3:31:6e:dd:bf:df:1d:
67:fe:9f:12:d1:70:d0:db:90:cd:54:c7:c3:c7:b4:
56:82:29:ae:cc:61:58:56:27:ad:ad:e4:39:f1:a3:
42:f1:8e:3e:3a:43:48:cb:55:6b:0f:92:0c:fe:33:
de:81:d9:a4:5d:28:fb:50:98:6d:ab:60:e8:20:2b:
29:c3:58:9e:03:93:16:5f:e6:16:d4:e0:19:11:e8:
81:09:33:09:01:02:73:04:33:42:ae:33:00:09:77:
3c:97:3d:ba:ce:ba:a0:19:47:45:69:ab:cd:d6:84:
3f:8a:c0:a3:0a:9d:e6:a2:b3:54:88:41:ec:e8:7d:
90:af:f2:e4:3c:a0:48:d5:b2:30:72:f1:b7:19:ca:
55:eb:89:a7:2b:4d:05:73:d3:0f:ec:c6:71:6b:a9:
fd:ee:94:11:39:f2:e8:61:8c:ef:c4:48:d7:2c:35:
58:fa:e0:67:3d:2b:0e:f9:5a:54:01:4e:e1:e9:ca:
29:b9:5a:af:b6:01:6d:1d:36:94:c9:d5:67:69:b2:
1a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F7:83:2F:D6:DF:93:13:FE:2C:8B:A0:19:92:1D:80:1C:60:AC:D0
X509v3 Authority Key Identifier:
keyid:89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:31:6b:ac:5c:9c:25:49:f5:1e:03:70:d0:d0:74:55:8e:b7:
27:fc:af:bd:6b:29:1a:a5:9f:89:6e:94:08:2f:c3:15:2c:83:
96:97:68:68:df:a5:e4:e5:38:76:0e:87:ac:ed:96:04:39:c0:
ed:16:d8:8e:0b:58:19:6c:93:ee:ac:72:e2:e2:48:19:ad:1d:
61:55:2e:b1:ab:61:c0:3c:8d:a3:ab:23:ce:b1:19:13:c2:de:
09:c4:0d:0f:ec:55:43:0b:3f:fa:18:c7:44:77:17:23:33:4e:
a5:87:a7:78:3e:4a:e5:dc:18:2d:9e:2f:c6:de:52:34:b5:7c:
41:58:9a:13:6d:a8:a4:47:29:ca:6a:cd:4e:da:f4:0d:5b:b7:
5e:cd:34:47:a5:c2:1b:5a:7a:67:b4:bb:a1:86:fe:85:f6:14:
e4:08:d4:f6:b6:35:3b:2c:08:97:42:13:b1:84:92:9e:fa:98:
d1:84:31:5a:d4:6b:4c:18:d6:54:b8:c8:25:ab:a6:b4:18:d5:
90:f0:a5:9d:19:92:48:0e:49:92:25:0f:19:48:dc:a8:04:b5:
61:41:c8:7a:0e:1f:f2:03:c4:cb:e4:79:92:64:22:fd:88:ad:
63:51:62:55:30:72:33:20:bd:a2:81:b0:e5:11:1a:ee:8b:5d:
76:5a:e6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:41:16 2025 by rpki-client