Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
File: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft (raw, json)
Hash identifier: Y8w0PkW+weBylDau6tROatAOGnsdU3qOuCnS0HWFBiI=
Subject key identifier: A7:19:3A:06:D9:8C:56:51:38:D2:AD:93:22:16:FF:58:20:51:07:B0
Authority key identifier: 8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
Certificate issuer: /CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Certificate serial: 0199FC8F6C43F0C4D3D3FCF955F825DC5929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 13:01:21 +0000
Manifest this update: Sun 19 Oct 2025 13:01:21 +0000
Manifest next update: Mon 20 Oct 2025 13:01:21 +0000
Files and hashes: 1: JoFV0lmrgBVp2NchrwUNBCxFqPk.roa (hash: 6FTsXZns8p+PiPkKjnYlGHxMRtUZaiMCOOMvrqE4q2A=)
2: LXcAIZsJjKqYcEZ-B4QhCzqX1y4.roa (hash: qXMNjFLmC2o8C7/tTBWAvWSGp3iRQoR6PHBawFPFtHc=)
3: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl (hash: MxGdRuqCLDLHK1mOH2rm7QIrMYIQH6T6Ch6nt9Zs/Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:6c:43:f0:c4:d3:d3:fc:f9:55:f8:25:dc:59:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Validity
Not Before: Oct 19 13:01:21 2025 GMT
Not After : Oct 20 13:01:21 2025 GMT
Subject: CN=a7193a06d98c565138d2ad932216ff58205107b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:36:e0:0c:4c:fd:4d:38:23:24:35:70:44:
b0:14:9e:21:f3:45:f1:d5:db:2e:cc:9c:c4:31:4c:
88:27:87:fb:a8:2d:3c:40:da:ae:02:4d:c7:4b:e1:
09:81:cc:b6:ae:f1:63:c6:79:94:35:b4:87:a5:c1:
39:74:25:e0:75:01:f0:23:71:42:25:b9:d6:c2:5e:
f7:19:6d:e3:66:67:b0:06:39:ba:73:15:23:df:91:
0c:08:9c:e7:db:55:e1:12:58:9a:6b:51:24:53:94:
26:24:7d:86:da:27:01:ff:4c:d6:2e:f5:36:c4:a7:
44:44:1c:86:69:f4:41:f1:65:6a:2d:80:6c:05:68:
3a:ca:1c:f5:dd:02:54:42:47:1f:69:de:3f:43:11:
b3:6a:54:4c:e4:ef:61:96:01:47:e4:ad:1d:e1:3c:
4a:f0:ad:45:61:59:86:1e:e6:cd:50:b4:b5:5a:0e:
f1:02:42:b5:8e:62:14:44:dd:dc:05:ab:fe:68:b4:
0e:3a:71:ff:b1:29:bb:e1:8e:14:d5:2d:b6:fc:43:
19:8f:74:2a:75:f1:de:81:c7:88:44:fd:20:e2:a1:
fb:93:93:78:6f:97:6d:81:21:44:ec:a0:82:23:fc:
c4:17:4c:01:71:f8:56:4d:a2:42:9e:c6:36:f7:19:
85:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:19:3A:06:D9:8C:56:51:38:D2:AD:93:22:16:FF:58:20:51:07:B0
X509v3 Authority Key Identifier:
keyid:8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:02:00:78:7b:7f:54:d0:3a:60:36:f4:7e:30:3b:b2:13:27:
b6:5c:8a:df:65:22:77:2b:a2:55:52:eb:90:07:55:42:25:8a:
c4:de:8d:f8:c6:18:ee:73:3d:36:0e:6f:19:88:6e:33:ce:5b:
fa:44:55:5c:97:d9:d9:d9:62:3a:71:ba:41:24:3b:9c:eb:3d:
48:29:67:02:58:25:ac:30:4a:4c:98:93:22:02:73:09:32:43:
8f:3e:dc:31:e8:e6:dd:42:2b:a3:08:05:a5:bf:5c:38:64:4b:
ff:2e:10:ad:f1:1b:cf:19:96:67:dc:cc:4d:39:28:f6:48:f1:
37:b2:b4:b6:cf:98:6d:85:92:d0:a3:d8:e6:9b:21:dd:62:a3:
5a:63:3b:ba:88:36:38:14:ad:d8:f4:64:c8:5c:18:ec:37:92:
7a:20:b1:62:0c:5e:66:cb:d4:0f:91:35:06:64:60:dc:29:0b:
46:04:79:ad:a6:2e:7a:7a:9e:d8:45:c5:2e:a8:27:53:d8:c6:
90:17:a8:43:2e:bb:af:3b:ce:ea:17:05:2b:c2:ae:77:fa:6d:
7d:be:d7:dc:b7:c7:1f:bb:30:cd:3c:cc:0c:3a:0b:14:9b:f9:
d4:ee:d0:c5:18:9a:d5:5b:bd:df:ee:8d:cc:bc:be:99:33:80:
83:81:35:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j2xD8MTT0/z5Vfgl3FkpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMGM4ZDM1ZGQ2NjY1N2JmZmM5MGI2YWM0MTYwMGZmYTYy
M2Q1YjgwHhcNMjUxMDE5MTMwMTIxWhcNMjUxMDIwMTMwMTIxWjAzMTEwLwYDVQQD
EyhhNzE5M2EwNmQ5OGM1NjUxMzhkMmFkOTMyMjE2ZmY1ODIwNTEwN2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnE24AxM/U04IyQ1cESwFJ4h80Xx
1dsuzJzEMUyIJ4f7qC08QNquAk3HS+EJgcy2rvFjxnmUNbSHpcE5dCXgdQHwI3FC
JbnWwl73GW3jZmewBjm6cxUj35EMCJzn21XhEliaa1EkU5QmJH2G2icB/0zWLvU2
xKdERByGafRB8WVqLYBsBWg6yhz13QJUQkcfad4/QxGzalRM5O9hlgFH5K0d4TxK
8K1FYVmGHubNULS1Wg7xAkK1jmIURN3cBav+aLQOOnH/sSm74Y4U1S22/EMZj3Qq
dfHegceIRP0g4qH7k5N4b5dtgSFE7KCCI/zEF0wBcfhWTaJCnsY29xmFZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcZOgbZjFZRONKtkyIW/1ggUQewMB8GA1UdIwQY
MBaAFIsMjTXdZmV7/8kLasQWAP+mI9W4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kMjhmZDQtYzM2OC00NmIzLWExN2Qt
NDMxODdlMjliMGUzLzEvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9kMjhmZDQtYzM2OC00NmIzLWExN2QtNDMxODdlMjliMGUz
LzEvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYgIAeHt/
VNA6YDb0fjA7shMntlyK32UidyuiVVLrkAdVQiWKxN6N+MYY7nM9Ng5vGYhuM85b
+kRVXJfZ2dliOnG6QSQ7nOs9SClnAlglrDBKTJiTIgJzCTJDjz7cMejm3UIrowgF
pb9cOGRL/y4QrfEbzxmWZ9zMTTko9kjxN7K0ts+YbYWS0KPY5psh3WKjWmM7uog2
OBSt2PRkyFwY7DeSeiCxYgxeZsvUD5E1BmRg3CkLRgR5raYuenqe2EXFLqgnU9jG
kBeoQy67rzvO6hcFK8Kud/ptfb7X3LfHH7swzTzMDDoLFJv51O7QxRia1Vu93+6N
zLy+mTOAg4E1KA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:26 2025 by rpki-client