Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
File: I9j2IJmVBsyG11SOpygrsSnwLWg.mft (raw, json)
Hash identifier: rR1yV/mQ2j19iQZMw9j2ctlSuWN8u5hlZowXRe+q/dY=
Subject key identifier: 1B:69:E1:35:20:16:70:F4:53:B4:B5:0A:C6:C6:85:C4:FA:D5:0A:81
Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
Certificate issuer: /CN=23d8f620999506cc86d7548ea7282bb129f02d68
Certificate serial: 019A4E8687626BF706575432B50193D73E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
Manifest number: 12F9
Signing time: Tue 04 Nov 2025 11:00:30 +0000
Manifest this update: Tue 04 Nov 2025 11:00:30 +0000
Manifest next update: Wed 05 Nov 2025 11:00:30 +0000
Files and hashes: 1: Ai_jhfn0i9Wvxs1dcGNuIQFRbQw.roa (hash: Gw+sAwziSiWdDJ9jEjQB+Xypl/VPbgg3IFN9iDAN1Ok=)
2: I9j2IJmVBsyG11SOpygrsSnwLWg.crl (hash: AncWxGpAjQ4+zqo+GU00d9EUTdWiZ0bef2PjIWP2kOU=)
3: U3XsaJj-IFBktG-dXYEuz5kV62s.roa (hash: kenyyNekJ/vibROkcjE9SyGPN68bhSkOSO66LaGuIH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:87:62:6b:f7:06:57:54:32:b5:01:93:d7:3e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68
Validity
Not Before: Nov 4 11:00:30 2025 GMT
Not After : Nov 5 11:00:30 2025 GMT
Subject: CN=1b69e135201670f453b4b50ac6c685c4fad50a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:21:46:3f:fd:9f:8f:72:04:e9:ca:19:7c:9a:
41:d6:0e:95:e7:f3:57:27:42:94:1c:ba:39:f6:0c:
01:0e:40:c9:f7:1c:39:52:f3:88:8e:e1:b5:c1:0c:
b7:c5:e3:de:76:44:6b:7a:7d:6c:6c:2a:e0:c1:7d:
01:26:11:ca:0b:c4:33:de:23:10:0a:69:5e:2e:42:
30:e2:80:3a:06:84:e9:01:f8:06:0d:73:80:b6:af:
7d:4e:04:43:03:5a:b6:1a:2c:4d:29:7f:73:62:94:
1f:b3:d0:e5:25:46:4c:5b:d7:c3:b5:c3:f2:63:f0:
c0:13:66:4b:c4:8c:3b:a4:de:28:98:84:81:67:72:
01:f6:d4:9c:b5:c2:07:c9:96:df:11:6f:18:cf:5b:
58:82:d0:2c:62:15:b7:2a:4a:3d:b5:e1:dd:1a:8a:
f8:ba:a8:5f:ca:a6:85:ff:d1:80:34:ff:03:6b:2e:
3e:6b:11:4a:dc:ac:3a:43:d9:bd:c5:06:4e:99:c5:
cc:a1:01:8b:4c:c8:04:12:41:de:d1:a0:44:f5:5c:
94:94:dc:47:31:cf:11:7b:07:63:43:1b:63:67:86:
6d:c9:66:90:96:8f:5e:ad:a5:62:22:40:c8:0c:3c:
d1:09:34:2a:0c:6e:44:47:b7:0f:85:97:55:d5:30:
ba:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:69:E1:35:20:16:70:F4:53:B4:B5:0A:C6:C6:85:C4:FA:D5:0A:81
X509v3 Authority Key Identifier:
keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e0:37:c2:f3:6a:65:05:39:c4:9a:e8:55:e5:3f:00:38:aa:
15:e2:92:b2:70:43:8b:d0:4e:b1:ec:31:2c:59:3f:5e:e8:3f:
c3:69:53:e9:7f:59:94:a8:5c:be:1e:aa:ac:a2:5e:08:15:f3:
b5:d4:46:ce:4b:a3:b3:4e:a2:4b:be:d1:7d:78:51:41:85:9d:
e0:91:ab:35:0b:21:d0:2f:e0:b5:b0:c4:fb:52:85:30:e2:11:
89:3c:db:ed:00:f1:3d:4a:23:8e:7d:44:f1:77:ce:1e:22:82:
47:7b:6f:96:4b:af:91:86:50:ca:43:52:cc:c8:61:b4:35:63:
21:57:b5:03:20:83:84:56:d3:03:16:b4:21:06:ba:c2:0d:68:
af:e0:72:5a:a6:fa:d0:4f:01:f9:88:66:a3:76:f0:a7:7a:60:
9b:b9:5d:10:5b:2a:b3:00:ae:54:3b:3f:d1:96:41:20:a7:af:
00:43:98:cf:bd:42:d9:13:e8:6f:5d:26:09:26:59:ca:6c:cb:
7f:5f:e7:ff:cc:69:4e:8f:2d:4e:29:15:7c:e2:a4:35:2e:f1:
4e:5b:0d:02:10:53:41:3e:a6:bd:0d:7b:66:b1:03:31:60:22:
65:c7:7b:86:7d:1c:b8:c5:17:8e:e4:68:e7:bc:e5:68:ea:a5:
19:3b:48:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:31:01 2025 by rpki-client