Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
File: IPpO3bIfCQGSPBifQej1x0mmWCk.mft (raw, json)
Hash identifier: 1Wp7ZnSwclgsm5+Vf66/sdNnurXsD69rhhhYsVabcLM=
Subject key identifier: 75:2F:55:0D:FB:13:B5:97:1E:00:FF:3B:99:40:AB:0F:2E:BF:51:63
Authority key identifier: 20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
Certificate issuer: /CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Certificate serial: 0199FB46011EC971975D750BCA2B4385E99F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
Manifest number: 5C
Signing time: Sun 19 Oct 2025 07:01:32 +0000
Manifest this update: Sun 19 Oct 2025 07:01:32 +0000
Manifest next update: Mon 20 Oct 2025 07:01:32 +0000
Files and hashes: 1: IPpO3bIfCQGSPBifQej1x0mmWCk.crl (hash: uRXzTHrsWogPNnwsJ1Hi2i3dLF/pwUfKFwUEBfnhrs4=)
2: Y_oYNTABqXVE9GTLe20SGiBKmm8.roa (hash: oNuhka5sSAjP9HueZy64ACfp5Ut+NkJyfMXj1b7/13Y=)
3: efy5oJUo9vlNOp71j63zeVEmmxU.roa (hash: CC82OGeCqrXuJ1H3eqUShF4IKs0H5muAyFZDrElp2iw=)
4: gfJqz6llA6HPBbhUclOoBOQtzwA.roa (hash: RevaPA0FwqLm6G8w6EGXV/kc0l56ywZoZvqxJEm3YF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:01:1e:c9:71:97:5d:75:0b:ca:2b:43:85:e9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Validity
Not Before: Oct 19 07:01:32 2025 GMT
Not After : Oct 20 07:01:32 2025 GMT
Subject: CN=752f550dfb13b5971e00ff3b9940ab0f2ebf5163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8d:e2:c4:15:9a:04:a8:7d:0b:7b:d5:5f:28:
b2:7e:22:bb:ce:09:09:78:c4:ed:f8:f5:c1:94:66:
6b:2d:c4:77:42:06:10:c4:6c:4b:ea:21:4f:ec:0d:
31:4e:e9:a2:28:16:a1:ca:21:1b:a3:b5:cd:91:79:
ac:8b:de:ca:52:a0:08:a8:94:e2:0d:3f:aa:b4:7d:
c4:01:c8:c6:cc:ad:ce:9e:89:aa:34:97:ca:f5:d3:
32:21:d6:09:c2:41:95:31:61:10:37:5a:49:90:dc:
9b:34:43:d2:b1:74:90:82:bc:26:81:60:a7:ab:58:
bf:48:fa:eb:8d:dd:80:1b:3e:55:53:8d:ae:3b:f2:
e7:7a:6b:a0:ed:40:b2:c3:db:84:be:50:5e:74:5c:
7d:ae:c2:f5:19:9b:23:e2:c7:37:ec:3a:fd:6e:fb:
9d:1e:a5:f5:6f:26:d8:49:f0:20:df:a0:71:70:1d:
27:db:a2:a2:49:77:bf:7b:b1:c9:81:be:48:f5:dc:
78:1d:b4:dc:b6:5c:7d:82:75:ef:60:db:7c:f6:f0:
78:de:1a:74:64:c5:c9:5a:e8:d1:3d:34:f7:27:c2:
6f:20:f7:7a:4a:f7:dd:3c:2f:5b:85:09:a7:cb:f6:
7b:3e:1a:12:c5:cc:ba:bc:9c:fa:0e:31:d9:51:21:
b2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2F:55:0D:FB:13:B5:97:1E:00:FF:3B:99:40:AB:0F:2E:BF:51:63
X509v3 Authority Key Identifier:
keyid:20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:86:ed:11:af:9b:33:99:b3:bf:6e:1a:8e:01:18:c4:d6:7a:
57:dd:33:e5:90:27:d2:f1:0d:46:a3:14:b9:0b:f5:75:05:73:
29:66:6c:76:50:19:8d:ea:13:7d:4f:b6:f6:89:fc:aa:d9:02:
97:bd:82:86:1c:b7:a7:74:4c:4c:5c:37:04:e0:e0:c6:a0:df:
c5:f5:93:33:6c:1b:cb:9b:55:ff:12:e8:16:44:7a:51:80:7b:
73:1c:87:6d:f6:6d:44:37:0a:8e:38:90:c5:fa:54:f1:17:7f:
00:79:b4:83:6a:be:11:72:6d:ea:f1:4b:b1:3e:e1:1b:b7:91:
53:a2:21:b5:98:fd:05:f2:d2:73:e8:53:25:7f:7e:c4:82:12:
c3:cc:5a:34:0e:8e:93:9c:ff:73:2f:4c:4e:c8:68:25:2e:26:
6c:87:63:6a:29:fe:30:20:dc:3e:38:3d:f4:49:95:8c:37:18:
6f:14:da:15:1d:b8:06:70:cf:38:ff:34:ad:b6:35:41:21:ac:
b7:2d:2f:ca:02:60:f8:3c:f7:ab:d2:51:7a:68:0c:4d:4e:d3:
cc:20:a7:e4:04:c1:8e:51:a3:0a:a9:c1:a9:a8:49:08:fd:1f:
4e:28:97:6f:94:7f:d3:19:b4:7c:0a:4f:7c:bb:a5:08:75:55:
1e:d2:dd:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RgEeyXGXXXULyitDhemfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZmE0ZWRkYjIxZjA5MDE5MjNjMTg5ZjQxZThmNWM3NDlh
NjU4MjkwHhcNMjUxMDE5MDcwMTMyWhcNMjUxMDIwMDcwMTMyWjAzMTEwLwYDVQQD
Eyg3NTJmNTUwZGZiMTNiNTk3MWUwMGZmM2I5OTQwYWIwZjJlYmY1MTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyo3ixBWaBKh9C3vVXyiyfiK7zgkJ
eMTt+PXBlGZrLcR3QgYQxGxL6iFP7A0xTumiKBahyiEbo7XNkXmsi97KUqAIqJTi
DT+qtH3EAcjGzK3OnomqNJfK9dMyIdYJwkGVMWEQN1pJkNybNEPSsXSQgrwmgWCn
q1i/SPrrjd2AGz5VU42uO/Lnemug7UCyw9uEvlBedFx9rsL1GZsj4sc37Dr9bvud
HqX1bybYSfAg36BxcB0n26KiSXe/e7HJgb5I9dx4HbTctlx9gnXvYNt89vB43hp0
ZMXJWujRPTT3J8JvIPd6SvfdPC9bhQmny/Z7PhoSxcy6vJz6DjHZUSGyVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUvVQ37E7WXHgD/O5lAqw8uv1FjMB8GA1UdIwQY
MBaAFCD6Tt2yHwkBkjwYn0Ho9cdJplgpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVBwTzNiSWZDUUdTUEJpZlFlajF4MG1tV0NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC85NTFiMTgtNTI0NC00YjJiLWEyMmQt
ZWQ1ZjAwYzk1MDY3LzEvSVBwTzNiSWZDUUdTUEJpZlFlajF4MG1tV0NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC85NTFiMTgtNTI0NC00YjJiLWEyMmQtZWQ1ZjAwYzk1MDY3
LzEvSVBwTzNiSWZDUUdTUEJpZlFlajF4MG1tV0NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn4btEa+b
M5mzv24ajgEYxNZ6V90z5ZAn0vENRqMUuQv1dQVzKWZsdlAZjeoTfU+29on8qtkC
l72Chhy3p3RMTFw3BODgxqDfxfWTM2wby5tV/xLoFkR6UYB7cxyHbfZtRDcKjjiQ
xfpU8Rd/AHm0g2q+EXJt6vFLsT7hG7eRU6IhtZj9BfLSc+hTJX9+xIISw8xaNA6O
k5z/cy9MTshoJS4mbIdjain+MCDcPjg99EmVjDcYbxTaFR24BnDPOP80rbY1QSGs
ty0vygJg+Dz3q9JRemgMTU7TzCCn5ATBjlGjCqnBqahJCP0fTiiXb5R/0xm0fApP
fLulCHVVHtLd4g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:49 2025 by rpki-client