Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
File: Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft (raw, json)
Hash identifier: aeeTtvB7NZ+DoZRzYhOBgd1l9kNVGSyyU1397G7S9xM=
Subject key identifier: EA:0A:BD:6C:F2:2F:96:87:F4:23:06:3E:85:2E:9E:B4:4F:E8:70:00
Authority key identifier: 23:2B:BC:6F:51:CC:E0:1A:EA:AC:BA:80:F2:D0:D2:64:12:E4:7F:93
Certificate issuer: /CN=232bbc6f51cce01aeaacba80f2d0d26412e47f93
Certificate serial: 0199FCFD734B1009986FF8FC9A19639C60E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
Manifest number: 0AF0
Signing time: Sun 19 Oct 2025 15:01:32 +0000
Manifest this update: Sun 19 Oct 2025 15:01:32 +0000
Manifest next update: Mon 20 Oct 2025 15:01:32 +0000
Files and hashes: 1: Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl (hash: yKOAf49gynsTn3COEmlQMI/rHj4AZuHp5MTsVc9fqVI=)
2: W7lSiLgEWw1PU3RjMuVHViCtMd4.roa (hash: Z1eudaBmI9GAn6czSjHaqw3jDN0IX6tghnkKM1CKFjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:73:4b:10:09:98:6f:f8:fc:9a:19:63:9c:60:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232bbc6f51cce01aeaacba80f2d0d26412e47f93
Validity
Not Before: Oct 19 15:01:32 2025 GMT
Not After : Oct 20 15:01:32 2025 GMT
Subject: CN=ea0abd6cf22f9687f423063e852e9eb44fe87000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:aa:dc:0d:b0:66:d8:9c:96:0c:e5:7b:a2:13:
70:d3:8b:f5:82:aa:93:0e:1c:0f:31:2b:70:03:30:
c0:a1:63:cf:93:61:06:2a:ef:8b:43:49:f6:5f:f0:
e5:79:df:c3:26:96:37:c7:3d:7b:bd:5e:f6:6e:d3:
d4:de:0a:3e:e9:ee:fe:f5:88:97:b8:e1:37:7d:85:
2e:94:0d:1b:a1:19:af:c8:9c:2d:0b:93:6c:25:f1:
04:a9:27:99:c0:85:b4:88:99:13:b7:87:29:70:d2:
0b:3b:88:a6:3b:92:0a:8f:5b:55:6f:82:9f:20:b8:
54:78:1b:20:c6:1d:1a:23:37:e4:93:46:ca:23:65:
5e:db:d7:82:13:4b:2f:3a:85:8c:34:ed:5c:2c:57:
42:0a:8e:ab:44:00:fe:36:68:3c:39:8e:b7:c0:bf:
e1:d4:1c:0d:47:30:7a:f5:9a:bf:21:2f:8c:80:37:
e9:42:eb:99:4c:99:19:0c:e1:d6:9d:bb:8b:99:c3:
48:6c:6d:fe:da:8b:b2:1a:21:7e:28:e2:f5:69:bf:
a5:66:c9:74:27:04:78:22:cd:ab:30:d4:9b:93:0a:
0d:ef:16:76:d3:e3:a1:15:c9:ab:d8:26:4e:a4:c3:
1e:00:63:8f:38:67:65:dc:fd:a7:6a:89:93:8a:13:
38:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0A:BD:6C:F2:2F:96:87:F4:23:06:3E:85:2E:9E:B4:4F:E8:70:00
X509v3 Authority Key Identifier:
keyid:23:2B:BC:6F:51:CC:E0:1A:EA:AC:BA:80:F2:D0:D2:64:12:E4:7F:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:1a:81:d3:68:51:b1:35:f9:4e:26:1a:56:76:98:d1:b7:ba:
d4:90:63:45:11:b4:14:39:36:74:4a:e5:b5:53:95:9f:6c:d4:
80:c3:37:48:b9:b5:09:f8:b3:2b:c9:e9:64:85:5a:62:d8:bf:
40:7b:ce:62:0b:bf:13:e9:c3:9c:34:12:aa:95:66:54:a0:16:
18:64:c7:2f:e4:03:74:7b:58:34:e0:2b:80:eb:f5:94:b2:59:
c2:f9:e8:78:2a:ed:8f:94:6a:4f:5e:c7:72:e1:a2:cd:e9:55:
65:d6:65:15:3d:ef:41:74:21:c8:14:48:17:3b:b3:14:af:dd:
2c:98:56:2f:25:e8:ec:e7:d4:d1:db:9b:45:86:f8:e9:92:8b:
ed:3c:05:e9:68:ab:f5:19:29:bf:e8:27:59:e0:f0:da:99:e8:
fa:fe:f1:2e:06:b9:cf:7f:52:66:80:7a:7e:02:26:76:c9:07:
93:3f:68:dd:c3:b0:55:5e:98:a5:7e:c2:8c:a9:51:58:af:1b:
5e:9e:88:f6:6b:c3:bb:18:03:68:40:86:7d:c8:c0:42:6c:a9:
8e:e8:c5:50:ff:79:b0:38:ca:4f:6b:ed:2e:00:e2:c7:7d:bb:
5c:4b:a7:3c:c2:15:91:50:fa:c4:52:9e:32:30:b9:5a:61:e8:
01:3a:b9:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/XNLEAmYb/j8mhljnGDjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMmJiYzZmNTFjY2UwMWFlYWFjYmE4MGYyZDBkMjY0MTJl
NDdmOTMwHhcNMjUxMDE5MTUwMTMyWhcNMjUxMDIwMTUwMTMyWjAzMTEwLwYDVQQD
EyhlYTBhYmQ2Y2YyMmY5Njg3ZjQyMzA2M2U4NTJlOWViNDRmZTg3MDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArarcDbBm2JyWDOV7ohNw04v1gqqT
DhwPMStwAzDAoWPPk2EGKu+LQ0n2X/Dled/DJpY3xz17vV72btPU3go+6e7+9YiX
uOE3fYUulA0boRmvyJwtC5NsJfEEqSeZwIW0iJkTt4cpcNILO4imO5IKj1tVb4Kf
ILhUeBsgxh0aIzfkk0bKI2Ve29eCE0svOoWMNO1cLFdCCo6rRAD+Nmg8OY63wL/h
1BwNRzB69Zq/IS+MgDfpQuuZTJkZDOHWnbuLmcNIbG3+2ouyGiF+KOL1ab+lZsl0
JwR4Is2rMNSbkwoN7xZ20+OhFcmr2CZOpMMeAGOPOGdl3P2naomTihM4owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOoKvWzyL5aH9CMGPoUunrRP6HAAMB8GA1UdIwQY
MBaAFCMrvG9RzOAa6qy6gPLQ0mQS5H+TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXl1OGIxSE00QnJxckxxQTh0RFNaQkxrZjVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny83OTE2ZTUtMjQ2My00ZTBlLWJhNmQt
NTMxNGFjY2IwNjEyLzEvSXl1OGIxSE00QnJxckxxQTh0RFNaQkxrZjVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny83OTE2ZTUtMjQ2My00ZTBlLWJhNmQtNTMxNGFjY2IwNjEy
LzEvSXl1OGIxSE00QnJxckxxQTh0RFNaQkxrZjVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThqB02hR
sTX5TiYaVnaY0be61JBjRRG0FDk2dErltVOVn2zUgMM3SLm1CfizK8npZIVaYti/
QHvOYgu/E+nDnDQSqpVmVKAWGGTHL+QDdHtYNOArgOv1lLJZwvnoeCrtj5RqT17H
cuGizelVZdZlFT3vQXQhyBRIFzuzFK/dLJhWLyXo7OfU0dubRYb46ZKL7TwF6Wir
9Rkpv+gnWeDw2pno+v7xLga5z39SZoB6fgImdskHkz9o3cOwVV6YpX7CjKlRWK8b
Xp6I9mvDuxgDaECGfcjAQmypjujFUP95sDjKT2vtLgDix327XEunPMIVkVD6xFKe
MjC5WmHoATq5yQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:32 2025 by rpki-client