Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.mft
File: iOiCv5ZPcJLEPNz3VQ3pViwmoCg.mft (raw, json)
Hash identifier: SOZKWabeWndlHDU7/8DPw3d+XEiDG6tDPBX+tkNqtrI=
Subject key identifier: 40:D6:61:ED:C6:94:13:FF:69:14:A1:BD:44:8A:E3:7D:B1:40:10:17
Authority key identifier: 88:E8:82:BF:96:4F:70:92:C4:3C:DC:F7:55:0D:E9:56:2C:26:A0:28
Certificate issuer: /CN=88e882bf964f7092c43cdcf7550de9562c26a028
Certificate serial: 0199FBEB5832F7493D5E38F05E7111308889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.mft
Manifest number: 0332
Signing time: Sun 19 Oct 2025 10:02:08 +0000
Manifest this update: Sun 19 Oct 2025 10:02:08 +0000
Manifest next update: Mon 20 Oct 2025 10:02:08 +0000
Files and hashes: 1: UZVUY94sqKLEh0icWoOQh0bntwI.roa (hash: vpvG9SY3H1VjvlXeI35sSNyZFm3fdFFooAVPM0TU2c0=)
2: iOiCv5ZPcJLEPNz3VQ3pViwmoCg.crl (hash: XTChER03WEwZAhZKbgQiLjEFs78wn3Ofj3BUKy86gT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:58:32:f7:49:3d:5e:38:f0:5e:71:11:30:88:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e882bf964f7092c43cdcf7550de9562c26a028
Validity
Not Before: Oct 19 10:02:08 2025 GMT
Not After : Oct 20 10:02:08 2025 GMT
Subject: CN=40d661edc69413ff6914a1bd448ae37db1401017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:de:94:e6:31:9f:af:97:71:44:95:1b:99:5d:
70:8f:84:ab:18:67:66:53:14:6c:c6:d2:ea:62:78:
3b:18:95:47:e5:77:7c:f3:06:11:75:96:a4:4c:21:
e0:a7:7a:b6:92:a9:66:f1:c8:94:de:a7:82:ea:df:
e9:d8:35:bc:e0:e9:53:8b:96:db:01:be:58:57:b2:
59:b9:70:78:44:f5:2f:f4:95:bf:52:de:c8:3b:20:
95:47:33:80:c9:d9:53:8b:1b:94:62:68:0a:21:f7:
c9:d4:4c:c3:57:c5:da:c0:20:29:a4:01:73:98:07:
2e:f0:4e:fa:a9:9c:d3:5f:bd:ba:6d:37:78:f5:13:
73:9e:dd:b5:14:21:b4:a0:c7:a4:6c:68:92:fb:76:
4f:e5:a9:f3:9d:5e:7f:ea:ce:7b:53:ed:87:bf:6b:
25:34:cf:f5:6f:8b:4a:c2:5e:75:3a:46:8e:6f:3b:
65:82:71:77:39:2b:83:5d:4b:cb:73:ca:00:92:c3:
01:ae:b1:60:69:da:5d:8b:6c:a0:a1:f3:df:80:59:
97:1f:24:09:8f:92:d2:25:0c:a6:f7:4f:ae:2b:d0:
ca:a8:e8:86:4f:96:78:69:54:c7:36:7f:a2:56:5b:
79:22:c0:d9:db:cd:41:e1:32:58:68:23:43:16:96:
8b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D6:61:ED:C6:94:13:FF:69:14:A1:BD:44:8A:E3:7D:B1:40:10:17
X509v3 Authority Key Identifier:
keyid:88:E8:82:BF:96:4F:70:92:C4:3C:DC:F7:55:0D:E9:56:2C:26:A0:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:69:29:51:b9:75:ba:0d:89:4f:90:b8:4a:b3:62:0f:d8:e1:
2a:9d:9f:c4:56:f6:70:c1:52:65:bb:45:7e:ee:82:0a:ba:8a:
cb:bb:7c:a9:3b:91:61:a6:60:7d:49:da:87:85:ea:e4:78:34:
d0:c2:1a:a4:36:be:04:29:07:5d:11:96:38:7e:f4:32:b7:cc:
02:f9:2a:66:b6:34:0a:2a:1b:d3:30:fa:ff:59:81:17:fa:0c:
55:8e:b6:90:c8:74:1e:c8:40:ab:eb:81:26:c7:43:dc:54:6e:
90:c1:f8:58:97:e6:ab:85:88:90:af:f2:bd:8a:9e:e5:ad:f3:
48:26:ba:38:37:37:f4:ce:cd:6c:8c:7e:d2:83:d4:0c:22:a7:
d0:a6:0f:0b:ff:51:23:69:5c:90:ac:ed:23:e7:a8:3a:31:9c:
41:fe:82:c6:7f:d4:34:c6:da:1f:39:6e:df:ad:33:3d:8d:01:
4a:fb:dc:64:ae:ba:26:95:5e:7f:82:55:57:6b:4f:36:e2:a6:
4b:ab:67:2c:9c:39:e5:e4:76:7b:a2:72:a8:5e:49:73:eb:6a:
21:77:85:7a:a9:76:5c:1c:43:38:63:02:e9:63:f7:1e:49:ec:
69:81:ba:f3:39:42:07:b2:27:3c:9e:37:57:6a:e0:52:e1:17:
47:24:60:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn761gy90k9XjjwXnERMIiJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZTg4MmJmOTY0ZjcwOTJjNDNjZGNmNzU1MGRlOTU2MmMy
NmEwMjgwHhcNMjUxMDE5MTAwMjA4WhcNMjUxMDIwMTAwMjA4WjAzMTEwLwYDVQQD
Eyg0MGQ2NjFlZGM2OTQxM2ZmNjkxNGExYmQ0NDhhZTM3ZGIxNDAxMDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt6U5jGfr5dxRJUbmV1wj4SrGGdm
UxRsxtLqYng7GJVH5Xd88wYRdZakTCHgp3q2kqlm8ciU3qeC6t/p2DW84OlTi5bb
Ab5YV7JZuXB4RPUv9JW/Ut7IOyCVRzOAydlTixuUYmgKIffJ1EzDV8XawCAppAFz
mAcu8E76qZzTX726bTd49RNznt21FCG0oMekbGiS+3ZP5anznV5/6s57U+2Hv2sl
NM/1b4tKwl51OkaObztlgnF3OSuDXUvLc8oAksMBrrFgadpdi2ygofPfgFmXHyQJ
j5LSJQym90+uK9DKqOiGT5Z4aVTHNn+iVlt5IsDZ281B4TJYaCNDFpaLMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDWYe3GlBP/aRShvUSK432xQBAXMB8GA1UdIwQY
MBaAFIjogr+WT3CSxDzc91UN6VYsJqAoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU9pQ3Y1WlBjSkxFUE56M1ZRM3BWaXdtb0NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jYmZmOGYtMGZjYi00ODdkLTgxMTUt
ZGU3NTkwZjNmNmI4LzEvaU9pQ3Y1WlBjSkxFUE56M1ZRM3BWaXdtb0NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9jYmZmOGYtMGZjYi00ODdkLTgxMTUtZGU3NTkwZjNmNmI4
LzEvaU9pQ3Y1WlBjSkxFUE56M1ZRM3BWaXdtb0NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmkpUbl1
ug2JT5C4SrNiD9jhKp2fxFb2cMFSZbtFfu6CCrqKy7t8qTuRYaZgfUnah4Xq5Hg0
0MIapDa+BCkHXRGWOH70MrfMAvkqZrY0Ciob0zD6/1mBF/oMVY62kMh0HshAq+uB
JsdD3FRukMH4WJfmq4WIkK/yvYqe5a3zSCa6ODc39M7NbIx+0oPUDCKn0KYPC/9R
I2lckKztI+eoOjGcQf6Cxn/UNMbaHzlu360zPY0BSvvcZK66JpVef4JVV2tPNuKm
S6tnLJw55eR2e6JyqF5Jc+tqIXeFeql2XBxDOGMC6WP3HknsaYG68zlCB7InPJ43
V2rgUuEXRyRgvA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:10 2025 by rpki-client