Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
File: IDHrupQ_rRxUh1QOAQXhnCMs95w.mft (raw, json)
Hash identifier: xMAJIJHG5wcVID844eQ5rvuAgum4WJ0CWXfci6Aue64=
Subject key identifier: 8A:62:B2:8D:C8:20:96:AB:E6:85:56:69:14:B6:23:16:C7:25:76:6A
Authority key identifier: 20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C
Certificate issuer: /CN=2031ebba943fad1c5487540e0105e19c232cf79c
Certificate serial: 0199FEB526077916FE32B817B8E67392685B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
Manifest number: 08A1
Signing time: Sun 19 Oct 2025 23:01:48 +0000
Manifest this update: Sun 19 Oct 2025 23:01:48 +0000
Manifest next update: Mon 20 Oct 2025 23:01:48 +0000
Files and hashes: 1: IDHrupQ_rRxUh1QOAQXhnCMs95w.crl (hash: norH2GYHyZ6ke9rePfdmEe6Yr4dJ+xcrXkmUd3YyblE=)
2: tKV7ZxqGnJTtEa2_ye8Y1d8JNh0.roa (hash: 8oiml4GgGUwThCKHUcnZfuIG0l8a7ZiiCuW4RZzZ3cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:26:07:79:16:fe:32:b8:17:b8:e6:73:92:68:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2031ebba943fad1c5487540e0105e19c232cf79c
Validity
Not Before: Oct 19 23:01:48 2025 GMT
Not After : Oct 20 23:01:48 2025 GMT
Subject: CN=8a62b28dc82096abe685566914b62316c725766a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2a:a6:e4:91:98:9c:c3:44:d7:8c:75:f0:2d:
4c:45:56:a8:61:67:c3:7d:8d:07:27:c6:57:a7:3c:
1a:42:d4:26:c9:9c:5b:34:c2:40:a6:ea:98:22:75:
98:bf:fc:ba:a1:8d:0a:b5:56:64:0a:6d:20:21:88:
ca:c2:ed:3d:37:99:87:03:29:9e:fe:53:e4:54:82:
58:a4:f3:f0:35:bf:e3:6a:56:86:0f:a8:d3:01:93:
4d:15:01:73:56:f0:a3:82:a6:6f:e2:7b:a7:39:b8:
be:bd:77:33:30:ab:1f:05:87:69:af:8c:c4:cb:8c:
88:c1:66:9c:ba:4e:a8:6a:6b:97:87:93:1c:a1:43:
21:ae:0d:09:3f:e4:36:67:51:f5:66:fa:28:df:e9:
ea:b5:4b:07:6a:4c:75:00:25:4e:82:89:1d:12:f9:
6d:c7:e7:b3:9a:ae:ad:b4:6e:42:ee:30:da:f3:58:
5d:39:d0:52:51:2b:41:aa:27:5d:bb:79:e2:4b:10:
0d:2f:15:7d:97:d0:05:ee:4a:73:ff:47:76:ba:83:
4e:94:0d:6e:35:45:96:a3:c8:f7:76:d2:d3:1d:d5:
df:3c:ef:bf:ac:f3:fc:d9:c1:6b:f1:17:75:75:56:
56:79:df:d8:86:9c:2e:08:d6:4a:13:94:f6:96:a0:
75:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:62:B2:8D:C8:20:96:AB:E6:85:56:69:14:B6:23:16:C7:25:76:6A
X509v3 Authority Key Identifier:
keyid:20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:30:15:8d:06:db:7c:6f:16:64:d7:94:0f:19:85:7b:2b:54:
b8:73:15:14:3c:f5:94:2e:f8:98:25:2f:0c:f9:98:1d:24:57:
3c:8c:32:65:e3:2b:fd:2e:04:52:c3:84:be:37:43:dd:ee:cd:
66:16:c1:d7:1f:9d:43:a7:80:ce:ba:bc:17:ac:23:de:e7:b3:
e6:90:c7:53:ec:56:84:2c:69:fb:d5:2c:1e:25:41:aa:97:f1:
20:06:4d:9f:fa:f6:8f:cd:b8:34:16:1f:dd:b8:c3:0c:10:09:
8a:99:6f:02:b9:e7:c1:4f:37:ba:4e:e9:8a:f8:95:c9:9f:40:
34:8a:fb:43:dd:10:fd:08:b4:08:64:33:2c:9c:c3:56:a5:7a:
01:72:c7:c5:64:82:de:d2:ea:7e:07:10:be:f8:c0:36:e3:07:
7f:b7:5d:0d:dc:d7:42:24:66:2e:a1:7e:56:f8:64:fc:75:c7:
d3:b3:d4:34:0e:4e:70:21:56:0b:bf:02:c2:e8:de:cf:2f:46:
ee:32:0d:a0:f7:df:e0:90:c4:bd:00:ec:04:9f:fa:cc:15:2d:
aa:24:cc:4b:34:54:fd:88:6e:ad:6d:38:9b:20:40:49:7b:3d:
66:fd:99:42:a4:f4:ed:e9:cb:41:17:d3:a8:02:bb:45:3b:da:
17:48:28:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tSYHeRb+MrgXuOZzkmhbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMzFlYmJhOTQzZmFkMWM1NDg3NTQwZTAxMDVlMTljMjMy
Y2Y3OWMwHhcNMjUxMDE5MjMwMTQ4WhcNMjUxMDIwMjMwMTQ4WjAzMTEwLwYDVQQD
Eyg4YTYyYjI4ZGM4MjA5NmFiZTY4NTU2NjkxNGI2MjMxNmM3MjU3NjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyqm5JGYnMNE14x18C1MRVaoYWfD
fY0HJ8ZXpzwaQtQmyZxbNMJApuqYInWYv/y6oY0KtVZkCm0gIYjKwu09N5mHAyme
/lPkVIJYpPPwNb/jalaGD6jTAZNNFQFzVvCjgqZv4nunObi+vXczMKsfBYdpr4zE
y4yIwWacuk6oamuXh5McoUMhrg0JP+Q2Z1H1Zvoo3+nqtUsHakx1ACVOgokdEvlt
x+ezmq6ttG5C7jDa81hdOdBSUStBqiddu3niSxANLxV9l9AF7kpz/0d2uoNOlA1u
NUWWo8j3dtLTHdXfPO+/rPP82cFr8Rd1dVZWed/YhpwuCNZKE5T2lqB1WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpiso3IIJar5oVWaRS2IxbHJXZqMB8GA1UdIwQY
MBaAFCAx67qUP60cVIdUDgEF4ZwjLPecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSURIcnVwUV9yUnhVaDFRT0FRWGhuQ01zOTV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZTk4MWEtYTA1Yi00NTI3LTgwYWYt
NjkzNDU0MjM3ZWU5LzEvSURIcnVwUV9yUnhVaDFRT0FRWGhuQ01zOTV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9jZTk4MWEtYTA1Yi00NTI3LTgwYWYtNjkzNDU0MjM3ZWU5
LzEvSURIcnVwUV9yUnhVaDFRT0FRWGhuQ01zOTV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjzAVjQbb
fG8WZNeUDxmFeytUuHMVFDz1lC74mCUvDPmYHSRXPIwyZeMr/S4EUsOEvjdD3e7N
ZhbB1x+dQ6eAzrq8F6wj3uez5pDHU+xWhCxp+9UsHiVBqpfxIAZNn/r2j824NBYf
3bjDDBAJiplvArnnwU83uk7piviVyZ9ANIr7Q90Q/Qi0CGQzLJzDVqV6AXLHxWSC
3tLqfgcQvvjANuMHf7ddDdzXQiRmLqF+Vvhk/HXH07PUNA5OcCFWC78Cwujezy9G
7jINoPff4JDEvQDsBJ/6zBUtqiTMSzRU/YhurW04myBASXs9Zv2ZQqT07enLQRfT
qAK7RTvaF0goSQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:15 2025 by rpki-client