
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
File: jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft (raw, json)
Hash identifier: Cd/DmQzbf0nSi4D0K0OcUl+xfcLQp4707Ydn2uBowGk=
Subject key identifier: 9A:8D:86:0D:0E:C0:37:EE:8E:CE:3A:27:72:78:E3:DA:01:C8:97:F0
Authority key identifier: 8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B
Certificate issuer: /CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
Certificate serial: 0199FAD7FF4C5E1CD16574B83E67BC056A28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
Manifest number: 0DA0
Signing time: Sun 19 Oct 2025 05:01:23 +0000
Manifest this update: Sun 19 Oct 2025 05:01:23 +0000
Manifest next update: Mon 20 Oct 2025 05:01:23 +0000
Files and hashes: 1: dElkIF-mcLyqREvxtPtBS6fW6DA.roa (hash: iNiAWSZuKBpZfK505SM5gcHkqyqDJqDnkohUerQ9rYc=)
2: jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl (hash: 1PCkDWxGwXB2H2VBJ4/No1U1Tig4t3gT/OmGJpxWars=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:ff:4c:5e:1c:d1:65:74:b8:3e:67:bc:05:6a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
Validity
Not Before: Oct 19 05:01:23 2025 GMT
Not After : Oct 20 05:01:23 2025 GMT
Subject: CN=9a8d860d0ec037ee8ece3a277278e3da01c897f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e5:3a:21:0d:14:bd:1e:38:76:c6:9e:db:08:
bc:cc:0d:d2:55:0c:6d:0a:c9:90:98:8a:03:94:0b:
90:3c:01:c6:6c:1b:97:58:30:88:b5:8b:54:1f:72:
de:25:c2:da:b2:f1:a5:72:58:b8:50:8d:56:9a:f5:
ba:2b:01:96:a8:93:d6:15:f1:1a:b1:f6:6f:78:92:
d3:21:79:7f:3c:c9:b3:e5:e5:1d:2d:69:ec:8e:f3:
d7:7f:57:db:4d:56:8e:9c:64:66:e0:3c:e1:29:72:
ad:a7:8a:a7:a4:43:c1:4d:d9:6f:98:95:6b:af:a9:
35:46:70:de:d9:8f:b8:b9:e4:7d:be:61:99:d1:6a:
23:aa:b7:98:02:6d:e0:0c:f7:dc:7a:b5:b6:4e:b1:
74:73:90:c6:95:be:74:43:f8:d0:08:ba:5e:23:a8:
7c:4f:8f:e3:88:9d:0c:ba:1c:12:c3:7b:0e:38:8b:
92:d4:44:f9:a2:b1:b3:58:75:32:f4:7a:3b:ea:3e:
cd:9c:f9:d2:3f:dd:b4:42:ec:13:c1:b2:5f:c3:c5:
d3:a6:f6:e2:ef:3b:94:e7:ba:90:a1:6b:2b:bb:a7:
16:76:29:52:c7:fa:7c:88:d4:44:35:83:e5:8e:13:
aa:d6:60:0b:85:c5:cf:92:42:fa:01:1d:26:88:21:
87:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8D:86:0D:0E:C0:37:EE:8E:CE:3A:27:72:78:E3:DA:01:C8:97:F0
X509v3 Authority Key Identifier:
keyid:8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:be:d9:c0:5d:9a:00:e6:80:0f:2c:2f:e3:80:d1:59:25:41:
0b:71:dc:0a:ff:49:8c:b6:e4:7d:02:f5:46:f9:19:d1:8b:46:
e1:a7:a3:0b:2c:15:bb:e4:ae:c6:a0:ba:bc:77:ea:2d:7c:20:
10:82:87:ef:12:7c:f7:d8:38:1d:06:d7:38:58:1b:21:e9:72:
01:a1:2b:5d:78:59:31:e1:66:57:bb:87:2e:47:20:58:87:68:
67:6c:08:11:78:ef:6d:c9:f0:a7:82:98:68:e5:9c:18:52:67:
8a:7b:a7:d1:d1:25:43:11:69:4d:8a:46:75:54:c2:4a:76:bf:
5c:80:10:0e:f4:ff:55:ae:a2:64:96:17:cc:c2:23:f9:80:61:
d1:92:c7:4c:2c:d5:fc:a0:33:a6:31:df:06:dd:ad:fb:63:72:
7b:4e:a2:bd:2b:8f:54:42:a1:8a:55:3e:29:55:31:5f:3e:c6:
83:fe:7f:2c:c0:2c:a0:a3:56:6a:e0:0c:fb:8a:89:9c:fb:68:
60:44:55:2e:08:dc:64:40:33:9b:5b:73:b0:92:aa:40:28:87:
75:7a:c4:c4:28:39:6e:74:2d:7f:f2:9a:13:bc:e4:e2:92:5d:
77:84:2c:b9:e9:d4:a4:af:00:80:be:22:f3:33:2a:b4:04:ed:
9b:a3:3f:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn61/9MXhzRZXS4Pme8BWooMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjODE2NDhhZmMzNGNlMTkxNDM3NTE2Y2RkYzRiZjBkY2Rm
NDdlM2IwHhcNMjUxMDE5MDUwMTIzWhcNMjUxMDIwMDUwMTIzWjAzMTEwLwYDVQQD
Eyg5YThkODYwZDBlYzAzN2VlOGVjZTNhMjc3Mjc4ZTNkYTAxYzg5N2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+U6IQ0UvR44dsae2wi8zA3SVQxt
CsmQmIoDlAuQPAHGbBuXWDCItYtUH3LeJcLasvGlcli4UI1WmvW6KwGWqJPWFfEa
sfZveJLTIXl/PMmz5eUdLWnsjvPXf1fbTVaOnGRm4DzhKXKtp4qnpEPBTdlvmJVr
r6k1RnDe2Y+4ueR9vmGZ0WojqreYAm3gDPfcerW2TrF0c5DGlb50Q/jQCLpeI6h8
T4/jiJ0MuhwSw3sOOIuS1ET5orGzWHUy9Ho76j7NnPnSP920QuwTwbJfw8XTpvbi
7zuU57qQoWsru6cWdilSx/p8iNRENYPljhOq1mALhcXPkkL6AR0miCGHgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqNhg0OwDfujs46J3J449oByJfwMB8GA1UdIwQY
MBaAFIyBZIr8NM4ZFDdRbN3Evw3N9H47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaklGa2l2dzB6aGtVTjFGczNjU19EYzMwZmpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lODVhZDItZDJmMS00ODFkLWJmZGYt
YmRhNTM0ZTZmNjQzLzEvaklGa2l2dzB6aGtVTjFGczNjU19EYzMwZmpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9lODVhZDItZDJmMS00ODFkLWJmZGYtYmRhNTM0ZTZmNjQz
LzEvaklGa2l2dzB6aGtVTjFGczNjU19EYzMwZmpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACb7ZwF2a
AOaADywv44DRWSVBC3HcCv9JjLbkfQL1RvkZ0YtG4aejCywVu+SuxqC6vHfqLXwg
EIKH7xJ899g4HQbXOFgbIelyAaErXXhZMeFmV7uHLkcgWIdoZ2wIEXjvbcnwp4KY
aOWcGFJninun0dElQxFpTYpGdVTCSna/XIAQDvT/Va6iZJYXzMIj+YBh0ZLHTCzV
/KAzpjHfBt2t+2Nye06ivSuPVEKhilU+KVUxXz7Gg/5/LMAsoKNWauAM+4qJnPto
YERVLgjcZEAzm1tzsJKqQCiHdXrExCg5bnQtf/KaE7zk4pJdd4QsuenUpK8AgL4i
8zMqtATtm6M/0g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:33 2025 by rpki-client