Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
File: ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft (raw, json)
Hash identifier: 6rM1umuTMB66sxB0Pjk4kDV3843HXX6bfx6tcRD6f74=
Subject key identifier: CA:91:85:7B:14:BF:92:EA:14:65:54:21:31:58:2B:A4:4F:53:68:42
Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
Certificate issuer: /CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Certificate serial: 0199FC5849D0352922B825B19ED3EFF4FD79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:08 +0000
Manifest this update: Sun 19 Oct 2025 12:01:08 +0000
Manifest next update: Mon 20 Oct 2025 12:01:08 +0000
Files and hashes: 1: Bduq-yHvQD-QD1Xm7ItxU8Y4-T0.roa (hash: P7+nwfqVY/aah4pDKJSFyLVnh+hvfYn9MKyiz8j6bgs=)
2: C7UrWrjqRYaoTXtQBjcVzEUShlI.roa (hash: EMrvXIhrVKvMjJEsXia/sfD0RLNrluqVE1l+FDGQzF8=)
3: ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl (hash: Pbprxx4EQgDp7Wzoj8eBkbGqTtaUUiUVpE4wLPI9rPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:49:d0:35:29:22:b8:25:b1:9e:d3:ef:f4:fd:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Validity
Not Before: Oct 19 12:01:08 2025 GMT
Not After : Oct 20 12:01:08 2025 GMT
Subject: CN=ca91857b14bf92ea1465542131582ba44f536842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:73:94:77:23:bf:e4:6f:95:93:c1:08:e0:de:
d9:0a:35:ce:f0:54:d6:06:58:27:8f:81:bc:5c:a8:
75:3c:6b:7b:62:ac:8a:77:a4:e2:77:3b:ac:89:d7:
08:ab:70:39:2b:72:fa:70:15:21:36:19:ce:08:58:
c5:47:39:23:92:40:16:a7:5b:a4:be:f7:65:78:7c:
cd:a6:89:eb:db:d4:37:db:8d:36:e2:f2:eb:37:d1:
7f:67:fa:45:cf:48:2a:dc:77:a7:f6:dd:57:01:37:
af:d3:8b:30:d4:cd:9b:a2:90:3b:cc:c1:0b:ce:7c:
93:2c:31:a2:b3:f2:88:b4:6f:79:f3:59:a1:5d:8a:
58:fa:e4:b2:e0:38:cd:68:52:df:bd:75:31:9c:f8:
0d:d6:30:a2:39:6a:86:44:bf:ed:ea:05:6a:53:9b:
80:a0:8e:5c:4b:b4:f2:bb:d5:6c:a6:9b:a8:15:b9:
96:ca:8c:ff:56:e4:2c:e8:3b:78:4d:ab:c0:6c:e1:
ed:0e:a5:88:5a:bc:83:d2:b8:3b:9f:06:81:92:dc:
51:f1:a9:68:18:53:a6:f6:b6:6d:97:c3:50:e5:46:
cf:58:ee:82:7a:1e:29:4d:0d:8d:4e:60:0f:9a:c8:
dd:6a:d5:ac:99:d9:1f:87:24:84:bb:41:3d:bc:65:
96:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:91:85:7B:14:BF:92:EA:14:65:54:21:31:58:2B:A4:4F:53:68:42
X509v3 Authority Key Identifier:
keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e4:41:d0:a7:55:b4:fc:ab:0d:e2:72:a1:d9:6d:0b:51:87:
0d:11:cc:f8:3d:2d:bc:02:89:94:2e:bd:7f:12:47:3b:77:75:
b1:68:b3:11:55:0a:cf:18:77:01:ec:b7:5f:53:c9:97:74:88:
45:23:d7:be:21:b4:8a:57:a2:28:51:34:c6:fd:c3:e7:a5:82:
cc:06:6f:2e:fb:09:b5:da:37:95:80:97:b2:6e:d4:69:d5:14:
39:3e:c7:24:06:21:82:cc:17:c5:ec:9c:34:9e:bf:9a:60:73:
e0:2c:a6:13:09:8f:79:8c:a5:05:44:fe:e3:66:2b:80:23:92:
79:8f:7c:90:e8:9b:fb:56:89:1a:d7:63:0a:dd:30:70:a4:f6:
14:05:38:14:50:83:0d:4e:ec:0c:9c:76:f1:46:40:77:78:d6:
a3:a1:66:c9:85:e9:2f:d1:79:1c:17:cd:4d:19:53:f1:11:6b:
24:4f:d5:5e:68:72:6a:49:74:50:ab:85:fe:3c:a2:12:b1:a4:
e6:5e:e1:ce:5a:b7:28:4b:6d:c1:3e:a9:3c:61:55:82:0a:e9:
72:57:61:e7:53:f2:f3:e9:e4:05:b5:48:64:35:3b:52:dd:36:
0e:fa:f6:4b:eb:58:96:6d:6a:31:5e:64:2c:f3:bd:48:06:8c:
27:dc:24:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WEnQNSkiuCWxntPv9P15MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZmMzMWYzNmM5Nzc3N2Y5MDZiOTNlODNhZTY1N2YwMGFl
YjMwOTkwHhcNMjUxMDE5MTIwMTA4WhcNMjUxMDIwMTIwMTA4WjAzMTEwLwYDVQQD
EyhjYTkxODU3YjE0YmY5MmVhMTQ2NTU0MjEzMTU4MmJhNDRmNTM2ODQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHOUdyO/5G+Vk8EI4N7ZCjXO8FTW
Blgnj4G8XKh1PGt7YqyKd6TidzusidcIq3A5K3L6cBUhNhnOCFjFRzkjkkAWp1uk
vvdleHzNponr29Q324024vLrN9F/Z/pFz0gq3Hen9t1XATev04sw1M2bopA7zMEL
znyTLDGis/KItG9581mhXYpY+uSy4DjNaFLfvXUxnPgN1jCiOWqGRL/t6gVqU5uA
oI5cS7Tyu9VsppuoFbmWyoz/VuQs6Dt4TavAbOHtDqWIWryD0rg7nwaBktxR8alo
GFOm9rZtl8NQ5UbPWO6Ceh4pTQ2NTmAPmsjdatWsmdkfhySEu0E9vGWWSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqRhXsUv5LqFGVUITFYK6RPU2hCMB8GA1UdIwQY
MBaAFIr8MfNsl3d/kGuT6DrmV/AK6zCZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXZ3eDgyeVhkMy1RYTVQb091Wlg4QXJyTUprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9kOWEwMDQtYjk1My00YzczLTgxZTQt
MDcxMTY5NDAwMGEwLzEvaXZ3eDgyeVhkMy1RYTVQb091Wlg4QXJyTUprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9kOWEwMDQtYjk1My00YzczLTgxZTQtMDcxMTY5NDAwMGEw
LzEvaXZ3eDgyeVhkMy1RYTVQb091Wlg4QXJyTUprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo+RB0KdV
tPyrDeJyodltC1GHDRHM+D0tvAKJlC69fxJHO3d1sWizEVUKzxh3Aey3X1PJl3SI
RSPXviG0ileiKFE0xv3D56WCzAZvLvsJtdo3lYCXsm7UadUUOT7HJAYhgswXxeyc
NJ6/mmBz4CymEwmPeYylBUT+42YrgCOSeY98kOib+1aJGtdjCt0wcKT2FAU4FFCD
DU7sDJx28UZAd3jWo6FmyYXpL9F5HBfNTRlT8RFrJE/VXmhyakl0UKuF/jyiErGk
5l7hzlq3KEttwT6pPGFVggrpcldh51Py8+nkBbVIZDU7Ut02Dvr2S+tYlm1qMV5k
LPO9SAaMJ9wkMg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:39 2025 by rpki-client