Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
File: x02iHagDioIFQrOvr76qqmZreyc.mft (raw, json)
Hash identifier: ilQHTczqUV8REcpoETYYmmQHDTYhOI3aIvAMtAvX3Iw=
Subject key identifier: 43:E0:4F:B6:14:CC:89:CC:4A:9C:52:A9:F5:0B:DD:C8:75:E4:64:0E
Authority key identifier: C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27
Certificate issuer: /CN=c74da21da8038a820542b3afafbeaaaa666b7b27
Certificate serial: 0199FCC68EB0857371192E1FDDD298183698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
Manifest number: 1676
Signing time: Sun 19 Oct 2025 14:01:34 +0000
Manifest this update: Sun 19 Oct 2025 14:01:34 +0000
Manifest next update: Mon 20 Oct 2025 14:01:34 +0000
Files and hashes: 1: 2t0GWwoe7mmFS83bQQPX5JNcD34.roa (hash: hxRzouLeq4ys7uUoj+7mRAVC8MeKAFWBUYqAcz4n5d0=)
2: x02iHagDioIFQrOvr76qqmZreyc.crl (hash: eKO9BXDGuK7siJVjoehwMHv8ffOgrZRnCl89+DUtcxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:8e:b0:85:73:71:19:2e:1f:dd:d2:98:18:36:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74da21da8038a820542b3afafbeaaaa666b7b27
Validity
Not Before: Oct 19 14:01:34 2025 GMT
Not After : Oct 20 14:01:34 2025 GMT
Subject: CN=43e04fb614cc89cc4a9c52a9f50bddc875e4640e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6f:05:80:8b:2e:5b:da:d0:29:c7:9e:bb:63:
05:ee:0f:2c:ed:6a:77:a7:44:df:2c:25:60:4d:a2:
61:b5:4e:33:71:77:46:7f:01:f4:89:0a:1e:00:46:
5f:da:fe:71:34:62:c0:8d:d0:7f:59:4e:db:a4:8a:
52:c1:76:33:bd:57:36:ec:9e:44:54:0e:d5:90:9f:
7d:b6:43:21:08:a1:1c:be:52:31:a9:85:26:b2:ca:
9e:98:8a:c3:26:89:3c:21:c4:34:e0:8c:f2:7d:29:
d1:80:73:a7:4d:81:3d:df:10:f4:20:1f:e7:eb:5c:
35:0c:97:fa:2e:6a:18:85:3e:40:74:da:0a:dc:d0:
6d:02:a1:f1:b5:5c:6a:55:33:e6:41:0a:ad:47:9d:
c4:2c:a5:fd:23:1c:e0:08:b8:60:6a:11:3a:2e:c5:
0c:23:c5:12:38:2d:86:e3:28:73:ff:49:ff:5b:9f:
db:52:74:5e:6d:9b:52:b2:b3:9c:5f:cd:fd:fb:a6:
e1:1b:ee:8a:57:58:67:99:98:f6:85:50:37:8a:cf:
89:59:6c:94:a4:e0:94:71:43:8f:5e:ad:d7:a6:e1:
42:6c:0f:f8:2a:f2:d6:bc:06:91:e7:82:e7:8c:7d:
42:29:21:ef:30:4a:5c:9b:4f:b2:12:59:47:35:c8:
3c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E0:4F:B6:14:CC:89:CC:4A:9C:52:A9:F5:0B:DD:C8:75:E4:64:0E
X509v3 Authority Key Identifier:
keyid:C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:78:eb:36:a6:76:ee:9f:81:42:ad:30:20:1f:05:bc:4d:aa:
b0:8d:94:75:d6:ae:8e:0f:be:54:2d:94:b6:b6:61:2c:c5:41:
ed:e1:10:c4:32:e4:3a:f2:28:97:21:f7:b0:2c:d4:3b:e0:b9:
4f:94:22:8e:2e:08:5c:1a:e2:09:96:c7:f3:e4:fd:09:ce:83:
c3:a6:8d:23:8f:9b:0f:cd:16:2c:f9:e0:67:50:0a:44:d0:56:
c6:81:53:20:ea:4f:e2:19:53:58:d0:02:2e:b6:f0:90:4e:27:
2e:e1:d1:02:63:1a:8f:a9:eb:a7:9f:ff:20:04:f8:88:e2:11:
f3:92:43:84:49:76:1c:15:0d:fc:7c:89:3d:bd:fd:03:63:39:
f0:2b:18:c9:65:c5:23:c7:b1:35:3f:66:7f:55:4d:ad:3d:c3:
19:53:ef:fa:e7:75:16:b7:93:92:86:04:ff:9a:4c:ba:b4:14:
4a:69:fa:33:42:02:a2:72:e6:28:b7:a4:a5:01:4e:ac:5c:5e:
b4:38:1b:cc:d7:4a:64:cd:03:7f:6d:41:46:29:91:de:b8:11:
d7:6e:d5:05:85:29:ad:1b:0c:b5:8d:ec:2f:34:31:e5:56:16:
06:6c:25:32:ff:07:25:c8:f8:b4:64:7c:ca:13:33:e5:f4:9c:
f3:08:65:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xo6whXNxGS4f3dKYGDaYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NGRhMjFkYTgwMzhhODIwNTQyYjNhZmFmYmVhYWFhNjY2
YjdiMjcwHhcNMjUxMDE5MTQwMTM0WhcNMjUxMDIwMTQwMTM0WjAzMTEwLwYDVQQD
Eyg0M2UwNGZiNjE0Y2M4OWNjNGE5YzUyYTlmNTBiZGRjODc1ZTQ2NDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG8FgIsuW9rQKceeu2MF7g8s7Wp3
p0TfLCVgTaJhtU4zcXdGfwH0iQoeAEZf2v5xNGLAjdB/WU7bpIpSwXYzvVc27J5E
VA7VkJ99tkMhCKEcvlIxqYUmssqemIrDJok8IcQ04IzyfSnRgHOnTYE93xD0IB/n
61w1DJf6LmoYhT5AdNoK3NBtAqHxtVxqVTPmQQqtR53ELKX9IxzgCLhgahE6LsUM
I8USOC2G4yhz/0n/W5/bUnRebZtSsrOcX839+6bhG+6KV1hnmZj2hVA3is+JWWyU
pOCUcUOPXq3XpuFCbA/4KvLWvAaR54LnjH1CKSHvMEpcm0+yEllHNcg8FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPgT7YUzInMSpxSqfUL3ch15GQOMB8GA1UdIwQY
MBaAFMdNoh2oA4qCBUKzr6++qqpma3snMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDAyaUhhZ0Rpb0lGUXJPdnI3NnFxbVpyZXljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Zjg0NDQtMmMzZC00NTkyLTk0NTgt
ODAxZDg5ZDczNjZkLzEveDAyaUhhZ0Rpb0lGUXJPdnI3NnFxbVpyZXljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC80Zjg0NDQtMmMzZC00NTkyLTk0NTgtODAxZDg5ZDczNjZk
LzEveDAyaUhhZ0Rpb0lGUXJPdnI3NnFxbVpyZXljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3jrNqZ2
7p+BQq0wIB8FvE2qsI2Uddaujg++VC2UtrZhLMVB7eEQxDLkOvIolyH3sCzUO+C5
T5Qiji4IXBriCZbH8+T9Cc6Dw6aNI4+bD80WLPngZ1AKRNBWxoFTIOpP4hlTWNAC
LrbwkE4nLuHRAmMaj6nrp5//IAT4iOIR85JDhEl2HBUN/HyJPb39A2M58CsYyWXF
I8exNT9mf1VNrT3DGVPv+ud1FreTkoYE/5pMurQUSmn6M0IConLmKLekpQFOrFxe
tDgbzNdKZM0Df21BRimR3rgR127VBYUprRsMtY3sLzQx5VYWBmwlMv8HJcj4tGR8
yhMz5fSc8whllA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:34 2025 by rpki-client