Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
File: IYLNOsXE22fqcxprcZi31uT_EVw.mft (raw, json)
Hash identifier: K74BD9E0n7kqpXFWmOmVVTPHBcKBMkf2p6QqWDFRy2w=
Subject key identifier: B4:10:9A:40:0E:CC:60:79:2D:F8:90:FD:8D:BA:D8:F7:84:9C:75:11
Authority key identifier: 21:82:CD:3A:C5:C4:DB:67:EA:73:1A:6B:71:98:B7:D6:E4:FF:11:5C
Certificate issuer: /CN=2182cd3ac5c4db67ea731a6b7198b7d6e4ff115c
Certificate serial: 0199FDA1CB6CEB0CE24838B9129B90D45602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
Manifest number: 114A
Signing time: Sun 19 Oct 2025 18:01:02 +0000
Manifest this update: Sun 19 Oct 2025 18:01:02 +0000
Manifest next update: Mon 20 Oct 2025 18:01:02 +0000
Files and hashes: 1: IYLNOsXE22fqcxprcZi31uT_EVw.crl (hash: sj5l1QPkO3nBkhRLB7FqVaFTiMd66vEXo7ZzFzx36IQ=)
2: zZFMBY-vtS-_iOLRNRnhU51Vas8.roa (hash: s23taZmL6D/J5bfrJpfCP1J8Y6gIlBQ0Q9KqDNbhx3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:a1:cb:6c:eb:0c:e2:48:38:b9:12:9b:90:d4:56:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2182cd3ac5c4db67ea731a6b7198b7d6e4ff115c
Validity
Not Before: Oct 19 18:01:02 2025 GMT
Not After : Oct 20 18:01:02 2025 GMT
Subject: CN=b4109a400ecc60792df890fd8dbad8f7849c7511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3b:4f:3e:e7:77:60:76:28:3e:f6:b0:89:32:
14:bf:62:9c:4b:40:ec:fc:cf:df:83:fa:02:3f:5a:
ca:11:dd:62:03:ba:b9:c0:7f:ec:dc:f9:31:7f:23:
2f:37:03:0c:7d:27:43:69:61:76:ee:03:af:50:82:
e4:d4:9c:90:23:d9:5c:de:ad:29:5f:39:ad:ad:99:
5f:b3:1f:00:95:07:3e:00:17:cf:3a:b6:43:99:18:
34:58:35:61:a2:64:55:5d:9a:83:fa:8c:9e:09:2f:
3e:2c:ce:b7:ea:64:4a:50:53:46:41:46:aa:5b:d4:
65:26:9e:93:aa:4b:b0:b9:f3:40:dd:30:5b:83:74:
bf:6d:6d:ed:84:5d:4f:3b:40:be:ab:80:0a:26:2a:
25:0f:17:0c:21:42:7b:5e:63:a3:34:99:d2:39:e0:
f7:22:b5:69:f6:65:0a:50:1c:68:f1:0a:69:c6:9d:
af:75:44:ce:06:87:c2:5d:67:99:07:ce:4f:c2:ef:
06:08:da:b0:70:06:fb:32:02:2d:b7:d3:1a:c5:d3:
a0:33:ee:25:73:ba:ae:6d:c6:6b:86:89:45:65:d3:
03:70:c7:13:9c:ca:37:bc:8f:a9:0b:8a:b8:25:99:
a2:ee:7a:30:ee:de:55:8b:7a:5a:2e:50:f5:4a:33:
86:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:10:9A:40:0E:CC:60:79:2D:F8:90:FD:8D:BA:D8:F7:84:9C:75:11
X509v3 Authority Key Identifier:
keyid:21:82:CD:3A:C5:C4:DB:67:EA:73:1A:6B:71:98:B7:D6:E4:FF:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:08:fe:69:5e:ce:2e:dd:5d:77:3b:c8:d9:26:4f:53:8f:34:
57:1f:ba:76:b5:f6:6a:91:e2:fc:34:17:fe:c4:fa:90:bf:72:
48:25:f2:3f:f1:07:72:4c:cb:6a:20:88:af:2c:df:0e:56:92:
d8:dd:9c:0a:b3:d1:4d:e3:71:fe:e5:18:ae:71:87:69:ae:17:
f5:4e:c8:1d:33:1d:d8:0d:ba:bc:bf:ad:a0:08:4f:ae:55:74:
f0:b9:b1:49:21:c1:72:97:34:56:d6:9f:2f:a6:af:60:85:ed:
e1:f0:c6:55:cc:50:28:90:a7:72:9f:89:f2:29:81:20:e5:81:
59:a7:56:fd:3f:60:ff:62:66:d7:80:dc:07:68:18:a6:1d:c8:
d3:49:b1:9c:ed:ce:96:a0:8b:23:e2:1d:c0:a6:3d:46:68:b9:
5d:f7:a4:33:dc:61:fb:7e:d1:c3:c0:de:09:b5:0d:e1:8e:12:
1a:c6:a1:e3:b3:55:36:47:4a:e9:3a:fa:20:8c:08:da:73:ac:
15:c9:3d:9f:1c:6a:d0:37:57:17:68:ca:ae:b2:f5:8b:fa:af:
25:ad:bd:6f:be:74:55:fb:08:b2:07:1c:27:e2:b1:3f:e9:72:
99:d7:1f:7c:21:b3:27:61:d4:23:9c:1a:b0:36:f6:42:59:e0:
3e:54:aa:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9octs6wziSDi5EpuQ1FYCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxODJjZDNhYzVjNGRiNjdlYTczMWE2YjcxOThiN2Q2ZTRm
ZjExNWMwHhcNMjUxMDE5MTgwMTAyWhcNMjUxMDIwMTgwMTAyWjAzMTEwLwYDVQQD
EyhiNDEwOWE0MDBlY2M2MDc5MmRmODkwZmQ4ZGJhZDhmNzg0OWM3NTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDtPPud3YHYoPvawiTIUv2KcS0Ds
/M/fg/oCP1rKEd1iA7q5wH/s3PkxfyMvNwMMfSdDaWF27gOvUILk1JyQI9lc3q0p
XzmtrZlfsx8AlQc+ABfPOrZDmRg0WDVhomRVXZqD+oyeCS8+LM636mRKUFNGQUaq
W9RlJp6TqkuwufNA3TBbg3S/bW3thF1PO0C+q4AKJiolDxcMIUJ7XmOjNJnSOeD3
IrVp9mUKUBxo8Qppxp2vdUTOBofCXWeZB85Pwu8GCNqwcAb7MgItt9MaxdOgM+4l
c7qubcZrholFZdMDcMcTnMo3vI+pC4q4JZmi7now7t5Vi3paLlD1SjOGeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQQmkAOzGB5LfiQ/Y262PeEnHURMB8GA1UdIwQY
MBaAFCGCzTrFxNtn6nMaa3GYt9bk/xFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlMTk9zWEUyMmZxY3hwcmNaaTMxdVRfRVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yZmFlYjUtNmExZC00YTEzLWJhMWYt
NDY2M2JjOWRhOTY0LzEvSVlMTk9zWEUyMmZxY3hwcmNaaTMxdVRfRVZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8yZmFlYjUtNmExZC00YTEzLWJhMWYtNDY2M2JjOWRhOTY0
LzEvSVlMTk9zWEUyMmZxY3hwcmNaaTMxdVRfRVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZwj+aV7O
Lt1ddzvI2SZPU480Vx+6drX2apHi/DQX/sT6kL9ySCXyP/EHckzLaiCIryzfDlaS
2N2cCrPRTeNx/uUYrnGHaa4X9U7IHTMd2A26vL+toAhPrlV08LmxSSHBcpc0Vtaf
L6avYIXt4fDGVcxQKJCncp+J8imBIOWBWadW/T9g/2Jm14DcB2gYph3I00mxnO3O
lqCLI+IdwKY9Rmi5XfekM9xh+37Rw8DeCbUN4Y4SGsah47NVNkdK6Tr6IIwI2nOs
Fck9nxxq0DdXF2jKrrL1i/qvJa29b750VfsIsgccJ+KxP+lymdcffCGzJ2HUI5wa
sDb2QlngPlSq/g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:53:36 2025 by rpki-client