Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
File: IC9MGjfpMTzdLup3UK4CjRjNWq4.mft (raw, json)
Hash identifier: TrY6l0qIeant+XAg+hyVH5vdCyHhmQgI4ZeX4GRtJZk=
Subject key identifier: 8A:DA:9E:84:B8:20:2A:4A:50:9F:2D:18:37:26:DD:E8:C9:68:60:3A
Authority key identifier: 20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
Certificate issuer: /CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Certificate serial: 0199FBEB77EFE185809F482CC12A17127C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:02:16 +0000
Manifest this update: Sun 19 Oct 2025 10:02:16 +0000
Manifest next update: Mon 20 Oct 2025 10:02:16 +0000
Files and hashes: 1: IC9MGjfpMTzdLup3UK4CjRjNWq4.crl (hash: UCP3KhLcJWfppG+EmaCU0lHE6QWfA0IVXLIHwmKh2/U=)
2: IpCJGLN8WNm4ASMIxNnGZPuEtp4.roa (hash: nrrSBtVL1+LxQy+ccPed0KobnXytQAq3RiSJBLbBVIg=)
3: NfNd6pjqYOF2P-1csZDDcYiiQ28.roa (hash: iQWQfc6lD74rDEabgsCAVeBcixywrixRVP1KpMFN48o=)
4: PJBAejzPvEvF3ZoupzGWVEj1Og0.roa (hash: BFJtqcfNldj6Jrfn0Y0+mOBk6xT0n483gTjn5ogYiu8=)
5: aCUjIUK5OOSaycrn7_ksP5SjmPw.roa (hash: O1lgV6htb/Z9+mSwOsrU/V0sb4jZo6xRqeghVOqs13I=)
6: dSYYIsgqOPsPCWRb8n6bjaKooRw.roa (hash: Pvqr/OOkaqypvOSknbbOn2J0oHNnn5WhmVz2GaH3aXU=)
7: quZyu716dxS9mdBeGNCJZ1sGIZM.roa (hash: MPvLxa0c+riXjzyelLJV18hBBvFNCarL2WtEM/bk6Os=)
8: sx8Ag2ZkbPORNb5IpKGaIu2_Dqo.roa (hash: ZFFpoBJ2SvC/bg4XtAEwmcSclBY/i+xRWcdnLVCOAss=)
9: wUsJ3Y8bKRlwOlXMA6Qttd1Brps.roa (hash: zuU1UQuoYfDo2IQVUCO8dMMln85NIWVqpAhKwg/ayj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:77:ef:e1:85:80:9f:48:2c:c1:2a:17:12:7c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Validity
Not Before: Oct 19 10:02:16 2025 GMT
Not After : Oct 20 10:02:16 2025 GMT
Subject: CN=8ada9e84b8202a4a509f2d183726dde8c968603a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c1:a1:86:c2:9b:fc:71:d0:66:0a:2a:b2:71:
46:be:c1:2d:66:98:70:a1:7a:88:e1:4f:76:e5:3a:
53:75:87:8d:ed:d0:b6:0e:91:d3:e2:43:3b:d3:09:
8d:9b:48:25:02:6c:7b:c8:a5:4d:93:e0:5a:ef:31:
e6:cc:41:a5:67:a0:09:99:4c:de:45:7d:59:6e:97:
e7:ee:21:e2:46:9a:76:22:a5:ee:a7:1b:ae:34:6a:
7b:6e:db:75:18:2d:51:14:cf:28:d1:2f:05:e7:34:
5c:b4:82:ce:50:87:a8:5e:1f:bf:97:83:57:82:3a:
5c:85:20:2a:24:bb:b4:27:7b:7e:9d:44:ed:d5:1d:
cb:b3:c3:fa:f4:2d:7b:60:b3:3d:c3:ff:1a:a6:1c:
d0:73:b7:e6:90:e8:b1:e0:3c:a3:4f:ed:6a:03:6d:
43:31:43:b1:a5:d9:a6:91:81:97:c7:1f:9a:c9:43:
b3:7c:9e:e1:00:81:f9:3f:fd:61:f9:79:cc:b4:83:
68:58:54:e0:95:36:88:9c:c1:e0:4d:92:87:47:d6:
48:3d:e3:55:ad:e2:6f:f7:22:eb:f8:fe:92:9b:36:
94:1f:c6:fa:e8:7b:b1:9f:2c:2b:79:8a:11:49:4d:
ca:fa:3d:3a:9c:03:fd:91:76:ad:76:2b:22:39:3e:
3d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DA:9E:84:B8:20:2A:4A:50:9F:2D:18:37:26:DD:E8:C9:68:60:3A
X509v3 Authority Key Identifier:
keyid:20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:67:50:a2:f6:e6:38:8d:4d:94:4a:fd:3d:6e:36:ba:b5:ec:
39:f1:fc:3b:48:22:dc:71:03:31:10:2e:dd:77:3f:85:47:ab:
09:b2:36:af:ba:f1:01:c6:e5:f2:d4:d5:c5:83:7c:c0:98:2b:
32:cc:3b:bd:fa:07:7a:40:a8:d0:0c:66:f5:ea:cf:72:77:54:
9b:13:48:ad:c3:3e:d5:d5:80:23:e8:19:66:1e:3c:a9:2e:7d:
85:5c:6c:75:02:dd:66:2d:97:53:c5:8f:43:90:a6:b7:58:d8:
b0:1d:82:87:f5:81:76:9d:9a:93:82:0c:c6:c6:82:f6:12:f5:
65:f9:84:27:53:72:9f:3b:36:9b:de:2e:d4:89:29:fc:b1:1f:
e1:30:fe:eb:58:56:1f:99:be:a5:b8:d9:2d:4c:13:22:01:da:
62:3e:6b:c6:e6:78:37:b7:10:ec:87:41:06:ab:a7:e5:4b:e3:
dd:d3:1b:03:57:1b:24:96:d6:e1:56:61:4a:bd:da:f7:e2:42:
d2:28:c9:41:76:30:88:3e:75:da:d6:34:76:f2:93:ad:18:f9:
d2:1f:93:4d:43:e0:6c:36:10:87:3a:ab:5f:4e:15:69:24:e4:
c2:e4:15:1a:bb:83:7b:d9:f0:02:b5:e3:a9:cb:13:16:72:0c:
ba:92:f5:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn763fv4YWAn0gswSoXEnxXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMmY0YzFhMzdlOTMxM2NkZDJlZWE3NzUwYWUwMjhkMThj
ZDVhYWUwHhcNMjUxMDE5MTAwMjE2WhcNMjUxMDIwMTAwMjE2WjAzMTEwLwYDVQQD
Eyg4YWRhOWU4NGI4MjAyYTRhNTA5ZjJkMTgzNzI2ZGRlOGM5Njg2MDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28GhhsKb/HHQZgoqsnFGvsEtZphw
oXqI4U925TpTdYeN7dC2DpHT4kM70wmNm0glAmx7yKVNk+Ba7zHmzEGlZ6AJmUze
RX1Zbpfn7iHiRpp2IqXupxuuNGp7btt1GC1RFM8o0S8F5zRctILOUIeoXh+/l4NX
gjpchSAqJLu0J3t+nUTt1R3Ls8P69C17YLM9w/8aphzQc7fmkOix4DyjT+1qA21D
MUOxpdmmkYGXxx+ayUOzfJ7hAIH5P/1h+XnMtINoWFTglTaInMHgTZKHR9ZIPeNV
reJv9yLr+P6SmzaUH8b66HuxnywreYoRSU3K+j06nAP9kXatdisiOT49cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIranoS4ICpKUJ8tGDcm3ejJaGA6MB8GA1UdIwQY
MBaAFCAvTBo36TE83S7qd1CuAo0YzVquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUM5TUdqZnBNVHpkTHVwM1VLNENqUmpOV3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lZGI4Y2QtMDAzZC00ODNhLTkwNmEt
ZjZiNzhlMmIxN2ExLzEvSUM5TUdqZnBNVHpkTHVwM1VLNENqUmpOV3E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9lZGI4Y2QtMDAzZC00ODNhLTkwNmEtZjZiNzhlMmIxN2Ex
LzEvSUM5TUdqZnBNVHpkTHVwM1VLNENqUmpOV3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2dQovbm
OI1NlEr9PW42urXsOfH8O0gi3HEDMRAu3Xc/hUerCbI2r7rxAcbl8tTVxYN8wJgr
Msw7vfoHekCo0Axm9erPcndUmxNIrcM+1dWAI+gZZh48qS59hVxsdQLdZi2XU8WP
Q5Cmt1jYsB2Ch/WBdp2ak4IMxsaC9hL1ZfmEJ1Nynzs2m94u1Ikp/LEf4TD+61hW
H5m+pbjZLUwTIgHaYj5rxuZ4N7cQ7IdBBqun5Uvj3dMbA1cbJJbW4VZhSr3a9+JC
0ijJQXYwiD512tY0dvKTrRj50h+TTUPgbDYQhzqrX04VaSTkwuQVGruDe9nwArXj
qcsTFnIMupL1EA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:59 2025 by rpki-client