Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
File: IXt6sGK8gos0jQUwbmU1R0i51tY.mft (raw, json)
Hash identifier: N/ucWnrRzv433RntaQ1URVdBTOjwxrgBrgebPhEjAPQ=
Subject key identifier: 1D:25:73:8C:D7:0C:08:F6:2B:DA:4F:7F:40:AE:E4:21:3B:C1:D1:BE
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial: 019A4DE18F8B0BD8523F4FAF9672F175CFE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
Manifest number: 0AC3
Signing time: Tue 04 Nov 2025 08:00:19 +0000
Manifest this update: Tue 04 Nov 2025 08:00:19 +0000
Manifest next update: Wed 05 Nov 2025 08:00:19 +0000
Files and hashes: 1: 1pYkybGgKOUsse4DTksz46U1UVk.roa (hash: TAfzGG00BI7uAR7rTZh0yLg+7xDY58D62iiCBqbod3s=)
2: IXt6sGK8gos0jQUwbmU1R0i51tY.crl (hash: hlnsg1sFfubCf67bu6LJ6vefqzrQE5l1F2/BkIye3qw=)
3: VxdHezzHKrkrE2Feoz1POMlVQMY.roa (hash: FkZe/vgHmq1Yaa4HgYSORTSSTc1UQglxGrV02REUteE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:8f:8b:0b:d8:52:3f:4f:af:96:72:f1:75:cf:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
Validity
Not Before: Nov 4 08:00:19 2025 GMT
Not After : Nov 5 08:00:19 2025 GMT
Subject: CN=1d25738cd70c08f62bda4f7f40aee4213bc1d1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c3:40:14:c3:41:80:47:b1:fe:f9:e5:31:98:
5d:8f:30:7b:fd:6d:c3:22:30:2e:74:54:e7:c4:e4:
72:1f:14:e5:2e:8f:45:e0:a8:0c:53:9d:0f:8a:e9:
14:3a:c6:47:c3:1c:8c:fa:db:18:df:6a:d9:68:60:
1f:8e:89:02:98:85:17:6a:12:f8:1d:02:3c:1e:39:
58:76:92:90:38:07:24:e2:14:e8:3b:65:29:1e:c7:
12:d3:69:8c:26:86:4b:0c:89:a3:80:3a:be:89:cf:
a4:a5:a8:ad:d1:8e:48:51:5d:77:89:be:fa:23:59:
7a:b8:ea:d5:fe:b6:05:d9:0d:84:61:0c:84:9e:b5:
dd:47:9e:25:7b:27:78:c2:e5:8b:da:11:f8:c6:5c:
4f:84:1b:32:da:43:1b:39:f6:79:7c:bb:23:f5:f5:
9c:17:8a:d7:c8:37:c4:d3:10:6b:99:bf:04:1b:4b:
cc:f9:22:44:98:31:8f:20:3b:27:ad:a7:ce:85:67:
5b:9a:8c:41:06:7c:82:25:6b:ce:e2:0c:1f:0d:b7:
91:23:13:92:6d:00:8e:dc:c3:9a:3f:70:11:dc:bf:
c3:81:e8:39:02:78:65:47:2a:3a:3a:70:ff:0f:1b:
a3:7c:70:f8:26:1e:fd:2e:52:7f:0d:e8:a2:24:1d:
46:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:25:73:8C:D7:0C:08:F6:2B:DA:4F:7F:40:AE:E4:21:3B:C1:D1:BE
X509v3 Authority Key Identifier:
keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:9c:ab:24:8a:e7:6c:56:8d:98:c2:d4:e8:57:3e:14:67:ce:
14:cd:40:86:f3:86:18:3a:ea:28:6a:35:11:6e:fc:d4:13:d3:
3e:1f:f6:b6:b4:0e:e7:eb:52:ef:cd:61:cd:31:ba:86:48:38:
da:54:97:95:dc:13:af:35:2e:d3:a5:1a:3d:56:72:59:d6:bb:
5c:42:5d:44:6d:60:14:fc:2a:05:f1:a2:f5:a6:db:1e:cb:c8:
f3:d0:4b:b1:20:33:52:31:02:e8:84:6e:75:7a:3a:03:ca:1f:
9e:73:6c:97:f6:f1:82:58:76:7b:67:76:33:e5:70:75:ac:ac:
c2:99:13:3d:20:50:b9:07:34:1e:fd:80:16:1a:39:83:7a:b1:
27:7d:1f:a8:d4:1e:46:e6:13:52:c7:3a:36:3a:20:8b:04:dc:
46:7d:12:d6:97:b4:a4:f2:e8:e6:d7:f1:d7:c6:bc:84:ca:71:
a0:ad:ac:4d:56:9e:ba:07:a4:3f:b5:8e:d3:bc:8b:de:b6:f3:
3e:da:9a:97:f9:bf:f6:aa:07:1f:c2:75:c6:3b:80:33:6b:ef:
fc:6e:b3:eb:44:2e:43:9b:a1:dd:a0:cc:d6:ca:ce:7e:a2:74:
02:6f:8e:3c:11:75:33:b2:f7:62:cf:b1:3d:f5:eb:54:43:3a:
1f:88:d8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:49 2025 by rpki-client