Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
File: IJ2ng837PLbZvILBktbXKrtKM20.mft (raw, json)
Hash identifier: Zo2D9BQX9vjN38d2gF4femwmBYC+wzZnAGI/43WM4f4=
Subject key identifier: 7D:40:F9:5C:08:CF:B8:37:53:7E:19:57:63:ED:77:B7:FB:38:A1:8C
Authority key identifier: 20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
Certificate issuer: /CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Certificate serial: 019A4EF4C9FDCAF9D099C20AD450D447792F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
Manifest number: 034E
Signing time: Tue 04 Nov 2025 13:00:56 +0000
Manifest this update: Tue 04 Nov 2025 13:00:56 +0000
Manifest next update: Wed 05 Nov 2025 13:00:56 +0000
Files and hashes: 1: 2n3afJDZ2VaAW1ICi9wuuluJH-s.roa (hash: n7gdmzqfRPjhPckkIN46JD6+pmnsuH8Fvwcad0thHWk=)
2: IJ2ng837PLbZvILBktbXKrtKM20.crl (hash: kiWWERPMkDPhWn3YxUxTCI4HmYOI2ODRqk3UGrIxI4A=)
3: fc650b5-Hy28l_7CM0InWSbhHHA.roa (hash: I0jfOZTYpGZasFE0U01uqVVs9byyAIXg5OzAj9nSBPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:c9:fd:ca:f9:d0:99:c2:0a:d4:50:d4:47:79:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Validity
Not Before: Nov 4 13:00:56 2025 GMT
Not After : Nov 5 13:00:56 2025 GMT
Subject: CN=7d40f95c08cfb837537e195763ed77b7fb38a18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:24:79:53:df:28:6b:1b:93:76:43:c6:b6:a4:
11:be:e2:79:bc:ab:fe:cd:fa:fb:f0:35:a5:8a:91:
fe:b6:81:9a:09:e5:fb:22:fa:1c:7a:48:24:0b:b2:
84:bd:81:c2:71:42:3b:59:ff:8b:a4:aa:2c:11:1d:
32:50:88:e7:21:8f:82:db:3a:f9:11:99:86:8c:ec:
80:82:26:fb:9c:d7:8a:19:d3:d7:fc:8c:8f:ba:79:
98:29:ee:35:e3:ae:09:7a:ea:5e:27:fe:2e:8e:ef:
f4:87:1d:6e:ba:97:49:61:c1:3e:1e:ed:b1:6d:ad:
38:69:5b:e7:8f:23:16:40:f5:17:b8:16:e0:7c:e0:
6d:fb:97:23:b5:ec:7c:b3:fc:17:1a:1f:72:87:da:
25:cb:c7:31:1d:c6:a2:e9:3f:ad:bd:6d:e3:63:5a:
a6:59:a8:af:88:a1:59:5d:f6:9b:c3:bf:31:80:45:
c3:7e:1c:02:44:cd:5c:ca:d0:f4:a2:fc:bd:fd:5e:
ff:7c:68:2e:82:bf:bb:cd:48:5f:f1:e8:81:52:f6:
62:24:a5:e8:80:f5:35:a2:f9:05:53:68:37:ae:e3:
62:44:00:fc:bf:76:93:61:4f:3c:6a:20:72:dc:51:
fd:c7:63:0e:8e:61:b3:e6:ea:0d:e8:aa:01:26:92:
1e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:40:F9:5C:08:CF:B8:37:53:7E:19:57:63:ED:77:B7:FB:38:A1:8C
X509v3 Authority Key Identifier:
keyid:20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:99:9f:5f:f9:a2:13:60:f6:8f:ed:38:b9:ef:f6:b7:31:a6:
fc:e9:ce:bd:d6:00:ac:27:fa:ab:69:25:2c:2a:bb:a5:5c:05:
39:94:75:d3:31:aa:84:7f:7b:41:7f:8e:1e:7f:09:37:49:c0:
56:ea:03:c3:c7:cc:b5:b0:16:84:b3:01:24:7c:12:d3:a4:02:
88:dd:be:0e:d1:21:6d:79:72:11:03:f5:2c:89:83:b7:8d:c2:
51:90:f9:19:21:9c:b0:b4:11:13:40:e6:8b:7b:a6:04:65:00:
6a:e4:b6:ac:1d:bf:e2:9c:59:fb:1f:1f:2b:6a:c9:01:37:a6:
90:c2:8a:bf:6d:da:c6:42:f5:38:79:06:89:fc:4c:73:d8:5a:
cd:bd:0b:1b:29:88:e7:09:06:b7:06:ff:f5:0c:53:a3:80:e7:
8f:af:2b:bc:33:11:23:55:a2:2c:68:ec:35:bc:41:14:92:d5:
f7:f6:de:9d:d4:96:98:ba:e5:cb:da:72:64:22:70:7d:9b:1d:
4d:b2:59:08:c6:a0:6d:77:54:84:74:7b:51:c3:b1:c7:67:27:
9b:53:bc:46:c4:a0:93:8c:73:5f:f7:3a:1d:ca:fb:23:2d:14:
2e:01:73:47:7a:e4:a7:a0:99:2c:83:8f:a8:63:f1:4d:0f:f4:
ef:91:3d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:59 2025 by rpki-client