Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
File: izGWcRDKvuxKZreAN-Uqh7K8j10.mft (raw, json)
Hash identifier: weWsl8xzDQCDhuzTxL6hXiwnxiz2LRv/9/nEQ1rwRZg=
Subject key identifier: 34:0D:9B:87:EB:27:8F:15:EF:51:B1:BF:3C:61:C5:2B:20:C8:48:F1
Authority key identifier: 8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
Certificate issuer: /CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Certificate serial: 0199FC8F483F0055BE8736A75B8F225E3265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
Manifest number: 13DE
Signing time: Sun 19 Oct 2025 13:01:12 +0000
Manifest this update: Sun 19 Oct 2025 13:01:12 +0000
Manifest next update: Mon 20 Oct 2025 13:01:12 +0000
Files and hashes: 1: izGWcRDKvuxKZreAN-Uqh7K8j10.crl (hash: KE3VCEW+mj4iUzgKJsWeFvkurvCJlMRC8rjA+VT6FbU=)
2: pb0HpyJZMsT5W8dfe0VOR5LOW_M.roa (hash: 8ccg9QKMd308GM+mOMPhnrelb3Ldijvww8dEm02A/EQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:48:3f:00:55:be:87:36:a7:5b:8f:22:5e:32:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Validity
Not Before: Oct 19 13:01:12 2025 GMT
Not After : Oct 20 13:01:12 2025 GMT
Subject: CN=340d9b87eb278f15ef51b1bf3c61c52b20c848f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:34:71:42:30:ba:06:9f:99:14:21:63:8c:ac:
a7:4a:6f:79:89:85:30:56:36:2f:dd:a8:c5:ab:84:
19:8e:28:02:b5:dd:2e:71:31:45:a0:8a:d1:ce:d1:
4e:9b:39:cf:32:0e:35:65:c7:df:d8:0f:7b:f7:f6:
fc:66:5b:bb:c2:4e:14:3e:fd:e0:17:c1:89:8f:fc:
2c:91:e7:aa:76:57:cb:af:f0:de:44:00:fc:3f:1e:
28:7e:e3:1a:39:c8:75:1f:e2:2a:60:8b:f4:ac:ab:
ba:e8:6c:b5:f2:14:f2:45:fd:77:81:d9:dc:9e:1e:
36:c9:0c:30:b9:ca:ce:46:a8:98:c5:f3:ce:57:41:
e7:fa:40:a8:38:45:dd:28:ea:c6:50:8f:58:52:48:
ed:63:f7:77:fb:83:8d:af:70:4d:9e:c5:84:26:71:
26:d7:c9:e0:fa:75:6e:52:73:fa:01:87:a7:6c:e5:
9a:c6:05:85:63:fd:9c:49:2a:b5:67:19:d5:75:cf:
35:c9:c0:d0:d0:c5:d5:88:f7:4d:3c:4d:d2:0f:b8:
2f:a9:63:35:93:c9:22:b1:b8:04:f0:fe:9b:26:81:
10:7d:fd:fa:44:c1:73:45:02:9c:25:f1:66:5c:a7:
e2:31:6d:77:d3:38:c5:4e:15:29:37:e2:b1:d5:52:
26:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0D:9B:87:EB:27:8F:15:EF:51:B1:BF:3C:61:C5:2B:20:C8:48:F1
X509v3 Authority Key Identifier:
keyid:8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:bd:54:1c:d1:44:5a:99:b8:35:1e:81:b0:7d:00:ca:d8:0c:
50:15:c6:7a:a7:4c:c0:9b:63:3f:73:15:25:87:56:dc:7f:f8:
70:60:3e:b8:1e:ab:58:89:db:fe:8c:83:9a:e7:42:69:13:60:
14:a1:33:80:a2:a5:b2:5d:ed:c5:e7:36:4e:3a:b8:01:c8:b0:
49:f2:2d:d9:e8:ac:6b:be:a3:dc:f7:98:f2:9b:33:e5:2e:af:
14:f9:69:bd:45:7a:0d:b4:9e:2f:3f:f2:6d:b6:3e:6f:14:c3:
cc:4a:a4:4e:9e:b2:72:51:44:78:29:44:9b:be:38:4d:82:d8:
3e:28:36:5f:f6:6e:93:8e:45:79:cc:52:ef:5c:c9:eb:26:12:
f9:ad:d6:0d:70:a4:1a:69:4f:bf:e3:dc:bd:37:a2:69:48:5a:
db:34:08:ec:16:ff:ff:ef:31:0b:30:29:96:5a:4c:38:db:34:
a6:a9:da:99:10:bb:8a:4f:e7:81:53:bb:af:ff:56:8f:53:1e:
2c:94:28:87:42:51:ba:22:02:94:d8:2a:85:ee:3d:0a:f8:08:
3f:93:96:2f:6d:48:f0:1f:86:39:3d:45:e6:8e:6d:e4:a9:fd:
f0:0d:78:6e:30:32:ce:6d:5b:49:1e:ea:be:2e:b6:76:90:ae:
25:c1:aa:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j0g/AFW+hzanW48iXjJlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMzE5NjcxMTBjYWJlZWM0YTY2Yjc4MDM3ZTUyYTg3YjJi
YzhmNWQwHhcNMjUxMDE5MTMwMTEyWhcNMjUxMDIwMTMwMTEyWjAzMTEwLwYDVQQD
EygzNDBkOWI4N2ViMjc4ZjE1ZWY1MWIxYmYzYzYxYzUyYjIwYzg0OGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjRxQjC6Bp+ZFCFjjKynSm95iYUw
VjYv3ajFq4QZjigCtd0ucTFFoIrRztFOmznPMg41Zcff2A979/b8Zlu7wk4UPv3g
F8GJj/wskeeqdlfLr/DeRAD8Px4ofuMaOch1H+IqYIv0rKu66Gy18hTyRf13gdnc
nh42yQwwucrORqiYxfPOV0Hn+kCoOEXdKOrGUI9YUkjtY/d3+4ONr3BNnsWEJnEm
18ng+nVuUnP6AYenbOWaxgWFY/2cSSq1ZxnVdc81ycDQ0MXViPdNPE3SD7gvqWM1
k8kisbgE8P6bJoEQff36RMFzRQKcJfFmXKfiMW130zjFThUpN+Kx1VIm8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQNm4frJ48V71GxvzxhxSsgyEjxMB8GA1UdIwQY
MBaAFIsxlnEQyr7sSma3gDflKoeyvI9dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXpHV2NSREt2dXhLWnJlQU4tVXFoN0s4ajEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zMWRmMDctZGNiNS00YTUwLWE3MDQt
YTAxN2MzNjg0NjZkLzEvaXpHV2NSREt2dXhLWnJlQU4tVXFoN0s4ajEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zMWRmMDctZGNiNS00YTUwLWE3MDQtYTAxN2MzNjg0NjZk
LzEvaXpHV2NSREt2dXhLWnJlQU4tVXFoN0s4ajEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYr1UHNFE
Wpm4NR6BsH0AytgMUBXGeqdMwJtjP3MVJYdW3H/4cGA+uB6rWInb/oyDmudCaRNg
FKEzgKKlsl3txec2Tjq4AciwSfIt2eisa76j3PeY8psz5S6vFPlpvUV6DbSeLz/y
bbY+bxTDzEqkTp6yclFEeClEm744TYLYPig2X/Zuk45FecxS71zJ6yYS+a3WDXCk
GmlPv+PcvTeiaUha2zQI7Bb//+8xCzApllpMONs0pqnamRC7ik/ngVO7r/9Wj1Me
LJQoh0JRuiIClNgqhe49CvgIP5OWL21I8B+GOT1F5o5t5Kn98A14bjAyzm1bSR7q
vi62dpCuJcGq4A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:49 2025 by rpki-client