Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.mft
File: Ihm1ncLp80slUjDlYqPMph2usVU.mft (raw, json)
Hash identifier: 74g/nFmLksrHonSElZh9bHzvrC/XrOGgX4PSX5QT3zA=
Subject key identifier: CF:6A:31:76:4E:F2:0C:20:33:29:17:76:3A:0F:71:ED:83:40:B2:6C
Authority key identifier: 22:19:B5:9D:C2:E9:F3:4B:25:52:30:E5:62:A3:CC:A6:1D:AE:B1:55
Certificate issuer: /CN=2219b59dc2e9f34b255230e562a3cca61daeb155
Certificate serial: 0199FD342192F385AA264CC727A142FD4BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ihm1ncLp80slUjDlYqPMph2usVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.mft
Manifest number: 13B4
Signing time: Sun 19 Oct 2025 16:01:16 +0000
Manifest this update: Sun 19 Oct 2025 16:01:16 +0000
Manifest next update: Mon 20 Oct 2025 16:01:16 +0000
Files and hashes: 1: Ihm1ncLp80slUjDlYqPMph2usVU.crl (hash: Y6IS2qlra4yxt+crZ6ypYoWtUPxvRZNmPE8NW69HtM4=)
2: Nk1hjqrpzwcKxMs_ejWJ395qXXo.roa (hash: uRWV+NR8DLzCaelMu4ig9EBtvA2PkzEXB7bjRzj91IU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ihm1ncLp80slUjDlYqPMph2usVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:21:92:f3:85:aa:26:4c:c7:27:a1:42:fd:4b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2219b59dc2e9f34b255230e562a3cca61daeb155
Validity
Not Before: Oct 19 16:01:16 2025 GMT
Not After : Oct 20 16:01:16 2025 GMT
Subject: CN=cf6a31764ef20c20332917763a0f71ed8340b26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a7:b2:34:78:52:b5:c0:23:bc:5e:c8:fb:04:
6f:ab:e0:b0:4c:79:4d:34:41:31:0c:6d:6f:26:33:
59:6f:69:db:8f:6a:87:9c:46:ff:8e:e6:8e:e2:52:
8a:62:59:18:4c:45:18:9f:68:b7:bf:f0:a2:5f:94:
bf:43:fa:56:67:34:eb:0c:c7:18:46:c2:e7:c4:05:
00:ef:8f:bb:94:53:e2:82:db:f6:fe:ab:86:70:9e:
9f:63:c8:bb:8e:61:24:72:ed:b9:f4:99:bc:82:e9:
49:8f:6d:21:35:0a:21:46:ed:aa:33:81:98:df:5d:
6a:84:c4:57:2f:5a:71:5c:8b:a1:a4:bf:74:08:48:
fe:83:0f:db:66:73:9f:29:9e:70:c6:ae:66:09:84:
08:f8:0f:62:10:c4:c8:c3:84:e3:c9:bd:3d:98:eb:
22:70:35:65:b3:18:5b:01:f2:47:57:1d:97:b5:3c:
74:53:20:91:ff:cf:4a:aa:ab:07:03:bb:d0:0a:cb:
bb:6f:81:e4:29:b6:00:d7:aa:b8:1b:6a:10:b4:40:
52:cb:63:b0:44:7e:cf:a6:ec:d8:eb:96:0a:1b:b6:
60:3c:bd:82:c3:fe:ab:e6:c1:fe:e5:5c:e5:2d:d5:
8c:b5:21:de:ba:9e:74:94:cd:43:45:5c:b7:08:81:
c1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6A:31:76:4E:F2:0C:20:33:29:17:76:3A:0F:71:ED:83:40:B2:6C
X509v3 Authority Key Identifier:
keyid:22:19:B5:9D:C2:E9:F3:4B:25:52:30:E5:62:A3:CC:A6:1D:AE:B1:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ihm1ncLp80slUjDlYqPMph2usVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3bb3a8-1c3e-4154-90a9-006de0fa5342/1/Ihm1ncLp80slUjDlYqPMph2usVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:76:86:c6:93:cd:f5:3e:cd:94:df:d9:8b:34:b4:80:4e:2a:
15:7c:5d:5e:7f:95:03:08:cc:60:5f:a9:53:c9:bb:11:6f:90:
4d:b2:31:45:83:9c:a2:ff:5a:da:fd:63:81:4a:a1:62:51:9b:
4f:3e:a8:f5:70:71:4f:68:85:b9:56:a3:06:83:c6:c7:ac:bd:
e6:24:0c:1a:07:5c:35:dc:32:b8:ff:7d:29:94:7f:20:e0:ab:
c1:92:57:21:57:a3:5a:15:0e:e5:44:23:f3:6c:ce:6c:06:45:
da:02:ba:ec:bf:12:80:7e:80:2b:b4:58:f3:86:71:02:39:45:
8b:f7:be:48:82:73:ca:4f:52:80:01:ed:ea:d9:25:8b:35:0c:
6b:68:a8:fd:d5:3a:38:bb:87:61:a2:c3:1c:60:f5:d0:3a:ac:
99:b8:f2:9d:5f:eb:9a:e0:54:96:38:96:ba:3f:13:71:5d:b9:
53:2a:8e:c0:19:cf:c7:d2:39:35:e9:90:91:fd:0b:91:b5:2f:
18:65:0a:53:b5:4d:8a:a9:b1:a8:90:54:c3:50:52:7a:b1:36:
1e:98:3c:3e:b7:21:0f:52:8b:f4:48:9a:46:cd:8a:3d:8d:83:
ef:59:16:cb:db:b8:ac:1c:c7:54:07:31:16:1c:e6:e6:37:ab:
2a:4a:4a:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NCGS84WqJkzHJ6FC/UugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMTliNTlkYzJlOWYzNGIyNTUyMzBlNTYyYTNjY2E2MWRh
ZWIxNTUwHhcNMjUxMDE5MTYwMTE2WhcNMjUxMDIwMTYwMTE2WjAzMTEwLwYDVQQD
EyhjZjZhMzE3NjRlZjIwYzIwMzMyOTE3NzYzYTBmNzFlZDgzNDBiMjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqeyNHhStcAjvF7I+wRvq+CwTHlN
NEExDG1vJjNZb2nbj2qHnEb/juaO4lKKYlkYTEUYn2i3v/CiX5S/Q/pWZzTrDMcY
RsLnxAUA74+7lFPigtv2/quGcJ6fY8i7jmEkcu259Jm8gulJj20hNQohRu2qM4GY
311qhMRXL1pxXIuhpL90CEj+gw/bZnOfKZ5wxq5mCYQI+A9iEMTIw4Tjyb09mOsi
cDVlsxhbAfJHVx2XtTx0UyCR/89KqqsHA7vQCsu7b4HkKbYA16q4G2oQtEBSy2Ow
RH7PpuzY65YKG7ZgPL2Cw/6r5sH+5VzlLdWMtSHeup50lM1DRVy3CIHB9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9qMXZO8gwgMykXdjoPce2DQLJsMB8GA1UdIwQY
MBaAFCIZtZ3C6fNLJVIw5WKjzKYdrrFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWhtMW5jTHA4MHNsVWpEbFlxUE1waDJ1c1ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8zYmIzYTgtMWMzZS00MTU0LTkwYTkt
MDA2ZGUwZmE1MzQyLzEvSWhtMW5jTHA4MHNsVWpEbFlxUE1waDJ1c1ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8zYmIzYTgtMWMzZS00MTU0LTkwYTktMDA2ZGUwZmE1MzQy
LzEvSWhtMW5jTHA4MHNsVWpEbFlxUE1waDJ1c1ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHaGxpPN
9T7NlN/ZizS0gE4qFXxdXn+VAwjMYF+pU8m7EW+QTbIxRYOcov9a2v1jgUqhYlGb
Tz6o9XBxT2iFuVajBoPGx6y95iQMGgdcNdwyuP99KZR/IOCrwZJXIVejWhUO5UQj
82zObAZF2gK67L8SgH6AK7RY84ZxAjlFi/e+SIJzyk9SgAHt6tklizUMa2io/dU6
OLuHYaLDHGD10DqsmbjynV/rmuBUljiWuj8TcV25UyqOwBnPx9I5NemQkf0LkbUv
GGUKU7VNiqmxqJBUw1BSerE2Hpg8PrchD1KL9EiaRs2KPY2D71kWy9u4rBzHVAcx
Fhzm5jerKkpKjw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:33 2025 by rpki-client