Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
File: Iv9bz3ObBzL7G823F-xxf28csOI.mft (raw, json)
Hash identifier: zkxkJct5LPd/5PIrdere1lfSH5JFW0NFYolfxy1UbgA=
Subject key identifier: 9C:B3:5B:41:A4:57:4F:A3:FA:76:ED:BA:BB:7A:B4:98:BF:8B:50:25
Authority key identifier: 22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
Certificate issuer: /CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Certificate serial: 0199FF22AD17D21CCA7E31B457ED4697C7FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
Manifest number: 14E4
Signing time: Mon 20 Oct 2025 01:01:26 +0000
Manifest this update: Mon 20 Oct 2025 01:01:26 +0000
Manifest next update: Tue 21 Oct 2025 01:01:26 +0000
Files and hashes: 1: Dbw0YKXPol3saHGjQJtz9o_YK0E.roa (hash: SxzLeQKHeNdqB63pBhgkGBN/CeBMjvrLZxTWY/WlAKg=)
2: Iv9bz3ObBzL7G823F-xxf28csOI.crl (hash: NeN9V8aDtKpdmAbLhv9GkL7bTJp6dEcPrqGMIMtFIoU=)
3: UAWIgik98ovvIJWv4yjj5lBqzOo.roa (hash: jrAxhhr23FpKpzjy0AGBEFjJeK035eZKHkroGqfSgNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:ad:17:d2:1c:ca:7e:31:b4:57:ed:46:97:c7:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Validity
Not Before: Oct 20 01:01:26 2025 GMT
Not After : Oct 21 01:01:26 2025 GMT
Subject: CN=9cb35b41a4574fa3fa76edbabb7ab498bf8b5025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:44:a3:cf:d0:88:ba:10:49:a1:2e:72:ef:e8:
a7:07:7b:fb:11:bb:64:d7:52:02:36:fc:e0:c2:81:
42:37:6b:d0:b6:cc:21:47:f4:5b:09:7d:c2:8f:15:
b3:03:b7:99:62:79:01:36:e1:95:33:61:10:fa:f3:
c6:c2:77:d3:b2:d9:9d:b6:a7:65:09:e7:8b:4d:61:
76:31:5a:e9:a2:fb:80:8c:fb:55:be:18:2d:ed:e5:
56:d8:1c:d5:d8:47:a8:f9:b7:0b:f4:cf:60:70:5e:
90:c3:08:65:fc:8b:c2:46:75:da:1d:b8:92:65:cc:
db:37:06:3a:ba:01:d8:e1:53:fd:09:8f:41:4d:3f:
a4:eb:f3:93:e7:54:93:1d:04:79:62:88:9f:c9:ac:
02:8c:94:5b:63:2c:f5:a4:c2:56:52:6c:4c:58:2a:
0a:91:01:69:01:76:e7:04:19:ec:db:8c:16:ae:6c:
2d:9d:d3:ab:c6:c8:66:13:45:27:ec:6b:a3:51:07:
fe:ab:cd:1c:31:0b:25:47:03:38:7f:eb:a1:96:c6:
be:ae:c0:56:ba:e8:bd:aa:3e:d6:b4:8e:a6:92:e1:
48:4a:2d:b5:54:72:e9:72:50:aa:95:41:ae:45:4b:
99:26:ed:5a:b9:b0:d2:6b:e2:96:69:22:21:18:9a:
cf:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B3:5B:41:A4:57:4F:A3:FA:76:ED:BA:BB:7A:B4:98:BF:8B:50:25
X509v3 Authority Key Identifier:
keyid:22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:56:ff:a3:f2:74:bb:4d:a4:19:8d:32:be:a5:f8:19:35:27:
0e:f6:86:80:2a:d0:0e:aa:bd:32:9e:48:7f:c8:89:3f:f1:5d:
4f:06:f7:80:3d:a3:03:f8:c4:2f:3c:43:c9:5f:67:25:b0:1b:
d2:56:8e:e9:76:6d:5f:0e:97:ba:60:b4:68:d6:19:6a:41:8f:
e5:87:41:b1:ad:29:62:f3:60:12:52:fd:14:8d:4b:00:07:bb:
42:72:b0:74:9b:26:93:73:8b:13:67:76:3d:37:e9:b1:8e:0b:
27:84:d8:c2:ec:6c:83:d8:02:d2:73:80:33:83:de:fd:e2:5f:
62:8f:d0:94:7b:4e:31:63:45:20:9c:fd:89:c7:c3:f4:32:38:
a2:c5:0c:48:59:f1:5b:50:9c:74:e6:f4:3b:c5:c8:90:cf:f0:
94:fe:07:ee:1a:7b:19:41:e6:8d:b3:78:d7:34:58:17:b5:88:
07:55:5f:99:28:60:07:87:a2:50:24:b8:69:dd:7e:5c:b8:0b:
1c:83:99:c0:e4:36:6c:ee:a0:44:08:20:08:f5:40:8d:c8:56:
1b:f9:98:ea:ef:cf:87:af:a8:b9:67:49:c9:1a:77:c6:e3:8c:
e0:22:d1:88:91:19:89:34:e4:34:d4:f1:5b:11:9c:b1:7d:19:
05:90:f4:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/Iq0X0hzKfjG0V+1Gl8f6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZmY1YmNmNzM5YjA3MzJmYjFiY2RiNzE3ZWM3MTdmNmYx
Y2IwZTIwHhcNMjUxMDIwMDEwMTI2WhcNMjUxMDIxMDEwMTI2WjAzMTEwLwYDVQQD
Eyg5Y2IzNWI0MWE0NTc0ZmEzZmE3NmVkYmFiYjdhYjQ5OGJmOGI1MDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUSjz9CIuhBJoS5y7+inB3v7Ebtk
11ICNvzgwoFCN2vQtswhR/RbCX3CjxWzA7eZYnkBNuGVM2EQ+vPGwnfTstmdtqdl
CeeLTWF2MVrpovuAjPtVvhgt7eVW2BzV2Eeo+bcL9M9gcF6Qwwhl/IvCRnXaHbiS
ZczbNwY6ugHY4VP9CY9BTT+k6/OT51STHQR5YoifyawCjJRbYyz1pMJWUmxMWCoK
kQFpAXbnBBns24wWrmwtndOrxshmE0Un7GujUQf+q80cMQslRwM4f+uhlsa+rsBW
uui9qj7WtI6mkuFISi21VHLpclCqlUGuRUuZJu1aubDSa+KWaSIhGJrPiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyzW0GkV0+j+nbturt6tJi/i1AlMB8GA1UdIwQY
MBaAFCL/W89zmwcy+xvNtxfscX9vHLDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXY5YnozT2JCekw3RzgyM0YteHhmMjhjc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kN2JmMGYtNjkxYS00Y2VjLWI1Y2Ut
NzYwM2U1ZGQ1NzA3LzEvSXY5YnozT2JCekw3RzgyM0YteHhmMjhjc09JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kN2JmMGYtNjkxYS00Y2VjLWI1Y2UtNzYwM2U1ZGQ1NzA3
LzEvSXY5YnozT2JCekw3RzgyM0YteHhmMjhjc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPFb/o/J0
u02kGY0yvqX4GTUnDvaGgCrQDqq9Mp5If8iJP/FdTwb3gD2jA/jELzxDyV9nJbAb
0laO6XZtXw6XumC0aNYZakGP5YdBsa0pYvNgElL9FI1LAAe7QnKwdJsmk3OLE2d2
PTfpsY4LJ4TYwuxsg9gC0nOAM4Pe/eJfYo/QlHtOMWNFIJz9icfD9DI4osUMSFnx
W1CcdOb0O8XIkM/wlP4H7hp7GUHmjbN41zRYF7WIB1VfmShgB4eiUCS4ad1+XLgL
HIOZwOQ2bO6gRAggCPVAjchWG/mY6u/Ph6+ouWdJyRp3xuOM4CLRiJEZiTTkNNTx
WxGcsX0ZBZD0Ng==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:38:31 2025 by rpki-client