Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
File: INJjO_-xbaLXXtr0m8ghGHz7iO8.mft (raw, json)
Hash identifier: oYm1svuVT2eoyxA8BzDd78xyqnZArV5sTuSWef4a1rk=
Subject key identifier: B8:F5:BA:0E:77:D9:97:24:84:93:1B:97:DF:45:7F:DE:B3:69:FB:48
Authority key identifier: 20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF
Certificate issuer: /CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
Certificate serial: 0199FE7E27C76E52E888BBBFD166D8061833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
Manifest number: 0B5B
Signing time: Sun 19 Oct 2025 22:01:44 +0000
Manifest this update: Sun 19 Oct 2025 22:01:44 +0000
Manifest next update: Mon 20 Oct 2025 22:01:44 +0000
Files and hashes: 1: 5OMr3xKs8jvtoFSwFc24Cwr8qm0.roa (hash: yTyBz+xUzE60EnbY56LmeruhsoeDG36ww4aSRH8th0I=)
2: INJjO_-xbaLXXtr0m8ghGHz7iO8.crl (hash: 52KFSLLpkus6sQ/b25dKo3uK36pAzAhIeqYLbbJeC3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:27:c7:6e:52:e8:88:bb:bf:d1:66:d8:06:18:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
Validity
Not Before: Oct 19 22:01:44 2025 GMT
Not After : Oct 20 22:01:44 2025 GMT
Subject: CN=b8f5ba0e77d9972484931b97df457fdeb369fb48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a5:66:9e:81:fe:64:b4:62:9b:1e:fa:73:e1:
4e:d3:ac:2b:de:33:f6:2a:7c:a1:8a:0e:ec:5c:1d:
f8:21:e5:ce:03:b9:59:e3:f5:f9:22:4d:00:79:1f:
f2:66:d4:66:5a:63:bb:c0:b5:18:08:2a:88:79:39:
0d:6b:8e:ad:eb:27:5f:3a:23:26:c9:8b:59:75:2e:
bf:a8:75:a0:32:67:cb:41:c0:a1:8b:a1:eb:0c:6c:
2f:12:1d:a2:d8:9f:4f:56:e7:dd:17:a8:a0:a3:6e:
42:6f:c0:28:e3:f0:cf:4e:f0:6c:0e:12:f3:53:59:
72:ad:a1:9c:53:1a:5b:a7:ba:a4:57:b0:c5:51:46:
04:6c:f8:f1:c1:cf:c0:a5:1c:70:23:c2:03:fc:f9:
e4:59:93:ad:ee:9d:23:58:c1:94:91:bd:0b:f9:f9:
2e:00:59:18:fa:95:38:7a:3d:91:c2:e6:98:4c:ef:
58:36:db:e5:64:22:3c:4c:84:ad:99:3d:83:39:73:
a5:f5:70:29:ca:c5:f7:61:20:70:95:58:7d:91:25:
91:f9:1d:57:7b:d3:7b:a3:d5:21:14:67:de:8e:35:
b6:cf:53:fb:4a:77:7e:4e:6a:a4:b7:22:4c:65:e4:
76:5c:84:c2:0e:d3:c2:4d:04:2d:df:eb:a8:72:a6:
31:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F5:BA:0E:77:D9:97:24:84:93:1B:97:DF:45:7F:DE:B3:69:FB:48
X509v3 Authority Key Identifier:
keyid:20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b5:34:3b:ed:ef:81:22:3b:1f:cd:04:8f:aa:bd:e6:09:85:
74:ad:aa:c4:8c:5c:3d:d8:50:81:7f:df:dc:5a:33:9d:de:91:
5b:40:c4:79:31:76:1a:55:d3:21:b7:8d:50:bb:87:b2:07:bb:
43:11:c2:07:c8:6b:9e:d8:5d:f9:fa:07:6f:46:e9:a7:35:0b:
11:95:e5:65:38:1b:34:51:60:b9:c8:0e:8a:79:54:17:f2:a8:
0e:6b:21:24:40:ef:4b:2f:15:cb:f3:a4:aa:0d:25:76:18:55:
04:cc:41:39:5a:72:27:b2:ad:f0:b5:29:c9:b3:eb:80:1f:e2:
96:f7:2d:e1:bd:af:ca:1f:00:3c:97:33:4d:c1:a3:23:23:80:
fe:c6:49:21:72:f5:98:a2:24:84:4e:b8:96:c4:71:07:84:fa:
1d:f6:cb:65:f1:53:de:dc:34:d6:2a:b9:67:1c:42:b0:7b:2a:
6a:7f:47:28:a3:ae:b4:a9:71:0b:e6:7e:5d:0c:24:c5:3f:f6:
6c:73:67:dc:01:57:b1:e5:ba:f7:d4:ba:e1:d6:cb:9e:8f:ad:
cf:94:26:1f:24:dc:f6:90:bd:d9:de:fa:8f:e2:a2:ce:98:46:
c3:f8:92:5a:75:d0:ce:bf:ad:b4:8a:06:14:7d:b2:77:4e:0b:
85:64:38:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fifHblLoiLu/0WbYBhgzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZDI2MzNiZmZiMTZkYTJkNzVlZGFmNDliYzgyMTE4N2Nm
Yjg4ZWYwHhcNMjUxMDE5MjIwMTQ0WhcNMjUxMDIwMjIwMTQ0WjAzMTEwLwYDVQQD
EyhiOGY1YmEwZTc3ZDk5NzI0ODQ5MzFiOTdkZjQ1N2ZkZWIzNjlmYjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6VmnoH+ZLRimx76c+FO06wr3jP2
Knyhig7sXB34IeXOA7lZ4/X5Ik0AeR/yZtRmWmO7wLUYCCqIeTkNa46t6ydfOiMm
yYtZdS6/qHWgMmfLQcChi6HrDGwvEh2i2J9PVufdF6igo25Cb8Ao4/DPTvBsDhLz
U1lyraGcUxpbp7qkV7DFUUYEbPjxwc/ApRxwI8ID/PnkWZOt7p0jWMGUkb0L+fku
AFkY+pU4ej2RwuaYTO9YNtvlZCI8TIStmT2DOXOl9XApysX3YSBwlVh9kSWR+R1X
e9N7o9UhFGfejjW2z1P7Snd+TmqktyJMZeR2XITCDtPCTQQt3+uocqYx/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLj1ug532ZckhJMbl99Ff96zaftIMB8GA1UdIwQY
MBaAFCDSYzv/sW2i117a9JvIIRh8+4jvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU5Kak9fLXhiYUxYWHRyMG04Z2hHSHo3aU84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi83ZjA0NjQtMjI2ZC00ZjQ5LWEyNzAt
MWNkNmM4NzFjMWU4LzEvSU5Kak9fLXhiYUxYWHRyMG04Z2hHSHo3aU84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi83ZjA0NjQtMjI2ZC00ZjQ5LWEyNzAtMWNkNmM4NzFjMWU4
LzEvSU5Kak9fLXhiYUxYWHRyMG04Z2hHSHo3aU84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA7U0O+3v
gSI7H80Ej6q95gmFdK2qxIxcPdhQgX/f3Foznd6RW0DEeTF2GlXTIbeNULuHsge7
QxHCB8hrnthd+foHb0bppzULEZXlZTgbNFFgucgOinlUF/KoDmshJEDvSy8Vy/Ok
qg0ldhhVBMxBOVpyJ7Kt8LUpybPrgB/ilvct4b2vyh8APJczTcGjIyOA/sZJIXL1
mKIkhE64lsRxB4T6HfbLZfFT3tw01iq5ZxxCsHsqan9HKKOutKlxC+Z+XQwkxT/2
bHNn3AFXseW699S64dbLno+tz5QmHyTc9pC92d76j+KizphGw/iSWnXQzr+ttIoG
FH2yd04LhWQ4JA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:26:13 2025 by rpki-client