Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
File: IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft (raw, json)
Hash identifier: J6+wgiajO1YPdhwneCBcBk2t6jUABoRhV0AzwmWL4Zc=
Subject key identifier: 41:05:04:74:2B:0B:64:D8:2F:75:D9:32:91:A2:D6:2D:42:4E:DC:42
Authority key identifier: 20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45
Certificate issuer: /CN=2091a77f7c424e9127398473bfa3a2b9727ebb45
Certificate serial: 019A4E191B4D380148BF14EA06ED032228ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
Manifest number: 0A2D
Signing time: Tue 04 Nov 2025 09:00:59 +0000
Manifest this update: Tue 04 Nov 2025 09:00:59 +0000
Manifest next update: Wed 05 Nov 2025 09:00:59 +0000
Files and hashes: 1: GE_VINn07eeSJYTvZIuo88WEV3U.roa (hash: 7RURCigC0zQY7NED6IrTycMVsCozhn/RUtlNFgdIpNw=)
2: IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl (hash: 5571TLZ+loK44Beuit2+wUx5+wbjKtyvxC872aR8Lsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:1b:4d:38:01:48:bf:14:ea:06:ed:03:22:28:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2091a77f7c424e9127398473bfa3a2b9727ebb45
Validity
Not Before: Nov 4 09:00:59 2025 GMT
Not After : Nov 5 09:00:59 2025 GMT
Subject: CN=410504742b0b64d82f75d93291a2d62d424edc42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b4:3c:6f:a4:17:0e:20:75:cb:be:2e:cf:1c:
7e:25:e0:d2:bd:93:a3:0e:ac:3e:89:56:ea:8d:f5:
a1:63:3d:0f:7f:01:36:10:89:ec:6a:25:fe:f8:40:
24:ae:92:61:75:c8:98:b3:fa:4d:59:21:1e:76:75:
b4:5a:a2:69:4d:4f:08:2d:74:74:99:1e:4c:a4:16:
04:d4:72:6b:51:91:5f:5d:92:db:38:01:91:28:59:
97:79:d1:40:80:b8:63:d3:69:93:42:ed:77:e4:ca:
ec:97:f2:19:d6:e6:25:41:3b:b1:bf:99:c7:f3:b0:
fb:74:8d:94:8f:26:ee:c6:ca:ef:80:0f:73:77:28:
1d:6c:0f:9f:55:c9:55:25:26:96:82:5a:88:f2:1c:
92:63:03:90:d3:f4:e9:60:57:aa:27:2d:48:b8:03:
30:86:f5:fc:72:0d:c9:44:2b:c5:99:9f:22:12:46:
52:26:8b:4f:7d:2f:09:8b:fa:b9:46:2c:4b:2a:79:
ca:7d:88:e7:da:83:27:8e:71:b0:bf:de:a7:48:ed:
1c:b2:23:42:0f:b8:3f:7c:9c:85:71:84:56:b6:a6:
1b:be:5f:e4:c6:b0:d2:7e:cc:e5:78:4d:44:1e:0f:
c4:9f:c9:77:b7:89:14:81:48:c9:1b:c0:31:7c:2e:
89:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:05:04:74:2B:0B:64:D8:2F:75:D9:32:91:A2:D6:2D:42:4E:DC:42
X509v3 Authority Key Identifier:
keyid:20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:93:14:7a:32:7a:c4:30:1b:68:d9:ce:42:a5:fe:e8:7f:88:
83:71:ac:47:93:2c:e4:ad:bf:33:e7:81:0f:2e:38:f5:2d:be:
d7:98:0f:aa:0b:58:a6:4b:0f:a9:29:a0:29:07:7b:fb:f8:9b:
8e:8d:8b:ac:26:36:19:ea:dd:d9:35:0e:42:09:7b:72:2e:9a:
de:07:a1:ed:b2:65:99:14:89:94:b4:ea:32:bc:5f:76:56:56:
33:dc:6f:4a:76:65:a0:73:5a:bd:da:01:25:c9:1b:56:88:37:
f1:0f:0d:de:a7:30:02:7c:cf:9f:dc:28:d5:43:02:37:b5:3b:
17:53:86:4a:7a:31:74:c2:ac:e3:b3:2d:20:c9:32:62:d4:88:
ca:9c:fa:42:da:00:ec:52:20:dd:7b:de:ee:e8:45:c0:de:e0:
5c:e7:de:a0:ed:a3:da:c6:63:75:7d:1d:53:0a:63:7f:2d:dc:
cf:75:40:c5:b8:1d:e6:02:77:35:21:25:30:18:e5:e2:8a:40:
ce:fa:f4:3d:69:21:56:99:fa:22:af:15:51:75:53:98:66:39:
4b:21:7b:a3:be:d0:8f:de:3a:3a:f1:3e:22:74:12:37:0e:94:
c8:d5:b9:2b:b3:69:fa:f0:1b:08:68:26:26:bc:84:94:4d:57:
9e:18:90:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:47 2025 by rpki-client