Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
File: IO7gXaGD3uK4EYFBlWRiySQNeHY.mft (raw, json)
Hash identifier: NkT3hqj7F8B0HyQwVR/rmGUexjb/kbuIVvT5XiBp0x0=
Subject key identifier: D7:5D:B2:F2:D6:E2:20:B3:40:39:A1:99:A6:90:66:22:C2:48:A1:07
Authority key identifier: 20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76
Certificate issuer: /CN=20eee05da183dee2b8118141956462c9240d7876
Certificate serial: 0199FC2180508F966921058FE32ABB89FF07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
Manifest number: 14ED
Signing time: Sun 19 Oct 2025 11:01:17 +0000
Manifest this update: Sun 19 Oct 2025 11:01:17 +0000
Manifest next update: Mon 20 Oct 2025 11:01:17 +0000
Files and hashes: 1: IO7gXaGD3uK4EYFBlWRiySQNeHY.crl (hash: Et+30nWT9mnucw5KbTpwyGoRFNeR/k2Oz6V0kxg6cRA=)
2: UOhBO5tiijOD2pDmpEzGmcmWS0c.roa (hash: xgr3YICoBLMfkC1gTEslMu1vKZNde/9vfYQRW1pAxzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:80:50:8f:96:69:21:05:8f:e3:2a:bb:89:ff:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20eee05da183dee2b8118141956462c9240d7876
Validity
Not Before: Oct 19 11:01:17 2025 GMT
Not After : Oct 20 11:01:17 2025 GMT
Subject: CN=d75db2f2d6e220b34039a199a6906622c248a107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:35:24:3f:ca:18:49:bd:b0:78:40:b9:b3:cb:
1c:26:18:6e:80:3c:2a:9a:90:91:5c:09:4f:65:ae:
d1:5c:3a:d0:80:c2:11:cc:5e:59:31:db:fd:bc:d6:
7b:e9:87:87:65:1f:fc:92:b9:75:be:8d:e4:ea:0a:
00:42:6f:91:61:77:7c:b7:ff:d4:1c:a9:8b:4d:11:
ae:97:45:5a:09:91:d2:7c:8d:c4:9e:00:7c:0b:ae:
c5:46:57:7d:47:31:14:b2:f3:78:e1:49:51:54:cc:
76:80:a8:d2:1e:f6:ca:47:14:99:0c:da:96:bf:f8:
7d:87:2b:23:65:e9:87:83:d1:c0:6f:9e:74:43:dd:
1b:14:34:a2:9c:bd:32:c9:43:4d:65:f3:83:8d:f2:
7a:b2:f2:f9:e7:56:73:fd:d3:c7:34:26:3f:7b:14:
cb:ac:8d:76:9c:f1:96:d0:8a:7b:77:8c:f5:aa:41:
a3:9d:75:2a:88:92:08:ac:1e:fd:b1:b8:a5:c2:df:
f4:ff:e3:65:86:f6:b2:97:7a:70:72:79:40:97:f1:
d0:df:f3:a0:0e:2c:c6:1d:01:71:36:f0:bc:0b:df:
8b:be:82:e8:0a:36:53:49:70:f9:5e:b4:28:a4:fd:
95:fd:2f:d6:d5:af:b5:a0:ec:b4:0f:94:1a:44:b1:
84:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5D:B2:F2:D6:E2:20:B3:40:39:A1:99:A6:90:66:22:C2:48:A1:07
X509v3 Authority Key Identifier:
keyid:20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:96:58:7b:05:75:22:16:89:13:e8:39:13:2d:93:47:f4:50:
dc:1e:e4:b6:61:2b:d5:ed:54:84:53:ff:43:ab:72:d6:2d:a0:
cb:6b:11:e2:f7:5d:84:25:66:7f:b7:0d:77:d9:16:96:5e:a1:
08:20:3d:d9:53:48:6b:1b:7a:07:37:5e:78:2b:53:f0:64:5f:
ef:7e:b7:18:8b:24:99:9c:40:21:7f:57:8e:e0:33:42:b7:49:
e3:eb:c4:64:8a:dd:55:6e:a3:18:e7:da:fb:c9:4d:73:5d:1b:
15:3f:c5:30:52:b9:1b:6b:ac:7e:e4:0a:ec:ff:7b:4c:19:91:
b3:ee:39:9d:63:bb:c1:b8:ff:32:0a:3d:32:9f:87:34:21:fc:
ba:88:cc:3b:ce:e0:77:31:93:ef:7d:16:eb:44:ba:f9:0e:79:
bf:cf:ab:e2:a0:ea:be:e9:44:fe:5c:ec:1f:4c:93:a3:7b:9c:
88:17:6f:c7:ab:7a:b7:52:af:a8:03:ed:87:12:0a:20:01:74:
e0:4d:63:6b:3d:48:a2:35:8b:a0:30:e8:f0:8e:93:15:83:d1:
9e:c5:21:5e:ef:d6:5b:66:9e:10:9b:ef:1b:7a:90:b6:65:c6:
4b:a1:26:3a:9c:a9:a0:2d:de:9d:c7:e7:f2:fa:4a:7e:40:10:
df:ed:15:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IYBQj5ZpIQWP4yq7if8HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZWVlMDVkYTE4M2RlZTJiODExODE0MTk1NjQ2MmM5MjQw
ZDc4NzYwHhcNMjUxMDE5MTEwMTE3WhcNMjUxMDIwMTEwMTE3WjAzMTEwLwYDVQQD
EyhkNzVkYjJmMmQ2ZTIyMGIzNDAzOWExOTlhNjkwNjYyMmMyNDhhMTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjUkP8oYSb2weEC5s8scJhhugDwq
mpCRXAlPZa7RXDrQgMIRzF5ZMdv9vNZ76YeHZR/8krl1vo3k6goAQm+RYXd8t//U
HKmLTRGul0VaCZHSfI3EngB8C67FRld9RzEUsvN44UlRVMx2gKjSHvbKRxSZDNqW
v/h9hysjZemHg9HAb550Q90bFDSinL0yyUNNZfODjfJ6svL551Zz/dPHNCY/exTL
rI12nPGW0Ip7d4z1qkGjnXUqiJIIrB79sbilwt/0/+Nlhvayl3pwcnlAl/HQ3/Og
DizGHQFxNvC8C9+LvoLoCjZTSXD5XrQopP2V/S/W1a+1oOy0D5QaRLGECQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNddsvLW4iCzQDmhmaaQZiLCSKEHMB8GA1UdIwQY
MBaAFCDu4F2hg97iuBGBQZVkYskkDXh2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU83Z1hhR0QzdUs0RVlGQmxXUml5U1FOZUhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jZmMwZDEtZDA5NS00YjFiLTliNWQt
Mzk4NTI5OWZhZDZkLzEvSU83Z1hhR0QzdUs0RVlGQmxXUml5U1FOZUhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9jZmMwZDEtZDA5NS00YjFiLTliNWQtMzk4NTI5OWZhZDZk
LzEvSU83Z1hhR0QzdUs0RVlGQmxXUml5U1FOZUhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAepZYewV1
IhaJE+g5Ey2TR/RQ3B7ktmEr1e1UhFP/Q6ty1i2gy2sR4vddhCVmf7cNd9kWll6h
CCA92VNIaxt6BzdeeCtT8GRf7363GIskmZxAIX9XjuAzQrdJ4+vEZIrdVW6jGOfa
+8lNc10bFT/FMFK5G2usfuQK7P97TBmRs+45nWO7wbj/Mgo9Mp+HNCH8uojMO87g
dzGT730W60S6+Q55v8+r4qDqvulE/lzsH0yTo3uciBdvx6t6t1KvqAPthxIKIAF0
4E1jaz1IojWLoDDo8I6TFYPRnsUhXu/WW2aeEJvvG3qQtmXGS6EmOpypoC3encfn
8vpKfkAQ3+0V4Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:13 2025 by rpki-client