Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.mft
File: IRKJnjsIwX9cM1tcvHjaWt_vmx8.mft (raw, json)
Hash identifier: tYkX6sRIyxg+v5Q2IvI43PbOw1XLiWNUMqxP7vjJryM=
Subject key identifier: DD:E9:DD:C1:E4:F8:F5:DE:FE:64:34:E0:0B:53:8F:EC:F6:09:C3:72
Authority key identifier: 21:12:89:9E:3B:08:C1:7F:5C:33:5B:5C:BC:78:DA:5A:DF:EF:9B:1F
Certificate issuer: /CN=2112899e3b08c17f5c335b5cbc78da5adfef9b1f
Certificate serial: 0199FB7CE283DDF35B8734AA2F097FFC239D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IRKJnjsIwX9cM1tcvHjaWt_vmx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.mft
Manifest number: 1E
Signing time: Sun 19 Oct 2025 08:01:29 +0000
Manifest this update: Sun 19 Oct 2025 08:01:29 +0000
Manifest next update: Mon 20 Oct 2025 08:01:29 +0000
Files and hashes: 1: IRKJnjsIwX9cM1tcvHjaWt_vmx8.crl (hash: rR9Sxg4hrTVdm0HZ3WZwNHXPJXiA1jd9/uuxXwmD4xo=)
2: apIk3T0uW96QniURNfkrJpo6bx0.roa (hash: lnybSVbj9b/iDsuE6W4oGYnfxclTTGDOOhv6E7X00Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IRKJnjsIwX9cM1tcvHjaWt_vmx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:e2:83:dd:f3:5b:87:34:aa:2f:09:7f:fc:23:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2112899e3b08c17f5c335b5cbc78da5adfef9b1f
Validity
Not Before: Oct 19 08:01:29 2025 GMT
Not After : Oct 20 08:01:29 2025 GMT
Subject: CN=dde9ddc1e4f8f5defe6434e00b538fecf609c372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9c:95:5a:fa:19:c8:a1:c8:a6:41:82:96:2a:
8a:71:5e:ea:c1:d7:1e:84:2d:3b:91:e9:e8:fe:42:
64:c9:48:38:71:6b:9b:18:b8:11:ea:5f:78:df:ec:
d9:84:3d:66:d2:bf:ba:1f:fa:94:41:8e:0e:a8:ae:
09:e9:8d:44:7a:ff:27:b8:93:6c:7b:38:52:e3:a9:
17:5a:9d:25:89:bc:23:61:0a:ac:b2:81:64:58:52:
2f:43:0c:e9:7c:ef:cd:22:19:08:f3:2d:ae:28:bc:
97:41:93:a3:bf:a5:5d:6b:1c:7c:9d:c2:8d:7f:2c:
99:59:42:2e:45:42:96:b1:e2:2e:6c:90:37:81:7a:
5e:1c:31:75:4e:ca:48:e8:bf:ec:9f:af:2a:79:33:
e5:45:7a:97:db:5a:fd:a3:d0:f7:2e:96:ae:a4:ae:
44:3b:13:ad:36:9d:95:ad:9b:5c:0f:27:f7:8b:71:
62:cc:b6:69:fd:f6:61:1f:fc:b0:b4:af:7d:31:26:
50:10:ff:c8:52:a1:6d:d7:78:34:eb:5d:9e:b6:dd:
1e:c1:9c:81:ea:ca:ed:9d:3d:93:ed:85:40:5c:bd:
77:99:49:f5:d4:74:c1:c9:67:07:88:48:ab:b8:99:
1c:07:a3:58:be:d6:a8:d1:56:2b:c3:59:54:a6:4a:
e3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E9:DD:C1:E4:F8:F5:DE:FE:64:34:E0:0B:53:8F:EC:F6:09:C3:72
X509v3 Authority Key Identifier:
keyid:21:12:89:9E:3B:08:C1:7F:5C:33:5B:5C:BC:78:DA:5A:DF:EF:9B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRKJnjsIwX9cM1tcvHjaWt_vmx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:68:d3:0d:ca:d9:f2:00:73:3a:2f:cb:b0:6d:1b:2e:1d:e1:
cb:c6:0e:cb:0a:9f:70:61:89:4f:91:96:b1:f1:2f:eb:41:b7:
e8:59:88:6e:51:a7:e4:e4:b2:9b:89:f9:83:14:8d:46:27:94:
9d:46:68:9d:11:2c:05:26:b8:60:05:4f:df:5b:9d:05:48:07:
3b:d3:77:de:2d:c6:d0:d4:44:3a:17:bb:10:22:cd:ee:53:79:
e5:e5:f7:b0:ca:f8:fa:52:95:02:d9:05:58:26:c0:d2:5e:31:
3c:06:1b:1c:6c:89:19:84:aa:7c:ee:c8:da:ab:a4:1c:7d:3a:
0f:4e:93:59:ca:70:02:ce:67:2b:df:f3:54:de:2a:ff:73:44:
a5:a1:b1:91:90:97:88:cd:0f:02:fa:f5:c2:e0:37:60:74:c1:
42:60:65:e8:d7:21:ce:8e:69:66:b9:9e:aa:22:9f:e8:6c:bb:
67:c9:4c:a7:82:bb:61:87:79:5a:11:7d:c2:b8:f6:89:01:ce:
72:da:23:07:e9:1f:67:17:c3:fc:97:31:78:e7:63:95:4e:f9:
0d:9b:2a:da:6f:f0:09:60:d7:a9:ab:91:04:90:1f:17:d4:85:
c8:60:83:91:e2:35:82:fc:2c:55:3c:5c:e2:2b:b0:a9:17:0d:
9d:85:b7:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fOKD3fNbhzSqLwl//COdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMTI4OTllM2IwOGMxN2Y1YzMzNWI1Y2JjNzhkYTVhZGZl
ZjliMWYwHhcNMjUxMDE5MDgwMTI5WhcNMjUxMDIwMDgwMTI5WjAzMTEwLwYDVQQD
EyhkZGU5ZGRjMWU0ZjhmNWRlZmU2NDM0ZTAwYjUzOGZlY2Y2MDljMzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJyVWvoZyKHIpkGCliqKcV7qwdce
hC07keno/kJkyUg4cWubGLgR6l943+zZhD1m0r+6H/qUQY4OqK4J6Y1Eev8nuJNs
ezhS46kXWp0libwjYQqssoFkWFIvQwzpfO/NIhkI8y2uKLyXQZOjv6Vdaxx8ncKN
fyyZWUIuRUKWseIubJA3gXpeHDF1TspI6L/sn68qeTPlRXqX21r9o9D3LpaupK5E
OxOtNp2VrZtcDyf3i3FizLZp/fZhH/ywtK99MSZQEP/IUqFt13g0612ett0ewZyB
6srtnT2T7YVAXL13mUn11HTByWcHiEiruJkcB6NYvtao0VYrw1lUpkrjUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3p3cHk+PXe/mQ04AtTj+z2CcNyMB8GA1UdIwQY
MBaAFCESiZ47CMF/XDNbXLx42lrf75sfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVJLSm5qc0l3WDljTTF0Y3ZIamFXdF92bXg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni81NDE3ZjQtNGQ2Ni00ZGU5LTkzNWQt
OTdhZDIzNzRhNTk3LzEvSVJLSm5qc0l3WDljTTF0Y3ZIamFXdF92bXg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni81NDE3ZjQtNGQ2Ni00ZGU5LTkzNWQtOTdhZDIzNzRhNTk3
LzEvSVJLSm5qc0l3WDljTTF0Y3ZIamFXdF92bXg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABmjTDcrZ
8gBzOi/LsG0bLh3hy8YOywqfcGGJT5GWsfEv60G36FmIblGn5OSym4n5gxSNRieU
nUZonREsBSa4YAVP31udBUgHO9N33i3G0NREOhe7ECLN7lN55eX3sMr4+lKVAtkF
WCbA0l4xPAYbHGyJGYSqfO7I2qukHH06D06TWcpwAs5nK9/zVN4q/3NEpaGxkZCX
iM0PAvr1wuA3YHTBQmBl6Nchzo5pZrmeqiKf6Gy7Z8lMp4K7YYd5WhF9wrj2iQHO
ctojB+kfZxfD/JcxeOdjlU75DZsq2m/wCWDXqauRBJAfF9SFyGCDkeI1gvwsVTxc
4iuwqRcNnYW3Sw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:38 2025 by rpki-client