Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
File: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft (raw, json)
Hash identifier: lxdRpT7hRIXajloyXz4ZJOI2fYkC2RmRvyii4+ELTKA=
Subject key identifier: 88:67:F2:41:2E:4D:1A:3B:89:45:0F:6B:5A:3E:88:AF:4A:AB:D3:96
Authority key identifier: 98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
Certificate issuer: /CN=988296c50d94bbed225f2867231fa5093debea91
Certificate serial: 0199FAD80C76328ED55E461A6223A7509349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
Manifest number: 1326
Signing time: Sun 19 Oct 2025 05:01:26 +0000
Manifest this update: Sun 19 Oct 2025 05:01:26 +0000
Manifest next update: Mon 20 Oct 2025 05:01:26 +0000
Files and hashes: 1: UjP5WMZKRBsvIlHnzhDHFBUyi78.roa (hash: pQ6/nnpLIpK2rwKH9JMJUyXoOlk8zghaFAetdmitLfY=)
2: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl (hash: X4W3SSDPLe29vvlQjPrJ5RhDe7+xaqCMC06xQzDqMN8=)
3: oFqjjYPuOysZm8IvX2HFnZ2yMN8.roa (hash: xodF+0GY/o0dnV+Pf3SoupYGcpVAvzY6q/h09Jx9Nzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:0c:76:32:8e:d5:5e:46:1a:62:23:a7:50:93:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988296c50d94bbed225f2867231fa5093debea91
Validity
Not Before: Oct 19 05:01:26 2025 GMT
Not After : Oct 20 05:01:26 2025 GMT
Subject: CN=8867f2412e4d1a3b89450f6b5a3e88af4aabd396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ec:35:10:66:79:23:fd:07:a4:27:2d:e7:42:
20:12:25:4a:c2:76:be:81:ac:33:42:ea:bf:a9:dc:
1e:e4:0d:c8:0f:8a:ee:c3:65:62:02:6b:60:f2:c1:
16:9b:05:93:40:94:64:eb:06:c8:41:76:ce:81:69:
99:51:af:56:e7:d2:84:20:96:38:c3:3d:ab:06:f6:
60:8b:5f:45:b3:04:f7:0c:64:59:a6:60:8a:ad:ac:
22:e9:1d:6c:25:6c:4a:e3:cc:56:65:ae:55:fc:df:
a6:8e:16:8f:dc:a9:3e:6a:9e:d0:dd:03:ad:ab:2f:
38:f9:6a:7b:81:70:43:8d:8a:41:23:ed:c4:bb:c6:
cb:6e:f7:75:fe:1b:9c:57:2d:2b:77:55:05:00:5a:
b0:4f:a6:3c:61:bc:e0:87:c4:ec:6e:b9:74:fb:b3:
be:58:7a:81:1f:0f:b4:e3:85:58:fb:59:92:34:40:
e3:c0:cf:bf:91:8f:c7:9b:1e:93:1e:d5:69:42:33:
fb:a4:81:20:d5:67:bb:d9:8e:5a:cf:17:ba:a0:50:
cc:6f:d6:99:68:6a:2b:7d:ba:27:40:7c:ae:c9:22:
ce:37:95:8d:2d:e2:89:8e:fe:35:bf:0a:a3:68:a1:
b8:c2:16:eb:82:23:ee:9a:d3:d4:8d:50:61:30:1b:
ca:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:67:F2:41:2E:4D:1A:3B:89:45:0F:6B:5A:3E:88:AF:4A:AB:D3:96
X509v3 Authority Key Identifier:
keyid:98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:2d:dd:59:cc:be:dd:0c:24:71:91:07:c7:b0:84:ec:2e:a8:
77:c1:18:77:9b:f5:88:5d:c0:34:9d:98:73:d8:b2:f7:1d:a6:
18:87:a4:a6:ac:31:5b:67:b8:46:29:3e:91:35:8b:92:b8:72:
f8:81:bd:8e:64:e0:2d:64:5e:f0:ab:02:dd:f5:ee:43:4f:3b:
19:72:8d:b6:a2:7d:fb:46:74:de:14:41:cb:7b:2c:c8:44:69:
a6:99:68:71:db:cc:b8:1e:38:32:8e:98:31:1c:9c:e9:6c:41:
a5:83:61:90:b6:fd:c4:7b:01:42:b3:af:93:dc:54:7c:fe:28:
ac:13:ec:c1:78:85:fb:43:84:8b:89:4b:b6:4a:d3:88:e4:00:
4f:fa:fb:b8:30:48:40:4b:0d:57:b6:b7:86:dc:fc:31:c1:0f:
f5:1d:bc:e2:9c:d5:22:48:25:d8:55:52:90:84:73:ef:3f:87:
6f:46:eb:01:01:19:94:d2:9b:19:13:6c:6b:dc:2b:88:d0:41:
1b:83:43:bd:67:ba:a9:4f:4c:bc:a3:f0:ea:14:70:91:64:aa:
95:9e:eb:d6:f4:c5:3b:d8:56:38:59:46:91:05:85:1f:b6:47:
08:68:a5:52:d4:0e:4c:be:db:84:af:5e:58:5d:1f:b7:3d:a7:
d9:be:ae:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62Ax2Mo7VXkYaYiOnUJNJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ODI5NmM1MGQ5NGJiZWQyMjVmMjg2NzIzMWZhNTA5M2Rl
YmVhOTEwHhcNMjUxMDE5MDUwMTI2WhcNMjUxMDIwMDUwMTI2WjAzMTEwLwYDVQQD
Eyg4ODY3ZjI0MTJlNGQxYTNiODk0NTBmNmI1YTNlODhhZjRhYWJkMzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+w1EGZ5I/0HpCct50IgEiVKwna+
gawzQuq/qdwe5A3ID4ruw2ViAmtg8sEWmwWTQJRk6wbIQXbOgWmZUa9W59KEIJY4
wz2rBvZgi19FswT3DGRZpmCKrawi6R1sJWxK48xWZa5V/N+mjhaP3Kk+ap7Q3QOt
qy84+Wp7gXBDjYpBI+3Eu8bLbvd1/hucVy0rd1UFAFqwT6Y8Ybzgh8Tsbrl0+7O+
WHqBHw+044VY+1mSNEDjwM+/kY/Hmx6THtVpQjP7pIEg1We72Y5azxe6oFDMb9aZ
aGorfbonQHyuySLON5WNLeKJjv41vwqjaKG4whbrgiPumtPUjVBhMBvKrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhn8kEuTRo7iUUPa1o+iK9Kq9OWMB8GA1UdIwQY
MBaAFJiClsUNlLvtIl8oZyMfpQk96+qRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUlLV3hRMlV1LTBpWHlobkl4LWxDVDNyNnBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mNzYwZDAtMmY2Ny00MzA3LTlmMGMt
Mzk5M2I1MGIyMDY0LzEvbUlLV3hRMlV1LTBpWHlobkl4LWxDVDNyNnBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9mNzYwZDAtMmY2Ny00MzA3LTlmMGMtMzk5M2I1MGIyMDY0
LzEvbUlLV3hRMlV1LTBpWHlobkl4LWxDVDNyNnBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkS3dWcy+
3QwkcZEHx7CE7C6od8EYd5v1iF3ANJ2Yc9iy9x2mGIekpqwxW2e4Rik+kTWLkrhy
+IG9jmTgLWRe8KsC3fXuQ087GXKNtqJ9+0Z03hRBy3ssyERppplocdvMuB44Mo6Y
MRyc6WxBpYNhkLb9xHsBQrOvk9xUfP4orBPswXiF+0OEi4lLtkrTiOQAT/r7uDBI
QEsNV7a3htz8McEP9R284pzVIkgl2FVSkIRz7z+Hb0brAQEZlNKbGRNsa9wriNBB
G4NDvWe6qU9MvKPw6hRwkWSqlZ7r1vTFO9hWOFlGkQWFH7ZHCGilUtQOTL7bhK9e
WF0ftz2n2b6upw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:03 2025 by rpki-client