Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
File: I_IQvBU0utwI_5R9mTUEcRk1MbM.mft (raw, json)
Hash identifier: SDSwRCpOZL2KuT0dm+sr6TPhu++cTEHRc3tW6PEFt+I=
Subject key identifier: 81:F9:F7:B3:E7:60:73:2F:A7:3C:71:3B:8E:91:D8:04:26:DF:A0:55
Authority key identifier: 23:F2:10:BC:15:34:BA:DC:08:FF:94:7D:99:35:04:71:19:35:31:B3
Certificate issuer: /CN=23f210bc1534badc08ff947d99350471193531b3
Certificate serial: 0199FC2137E603CE380B4163A8BB023AE228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:00:59 +0000
Manifest this update: Sun 19 Oct 2025 11:00:59 +0000
Manifest next update: Mon 20 Oct 2025 11:00:59 +0000
Files and hashes: 1: IQl4HNXKSWovo0ppYzsGnJqwUZ0.roa (hash: I1ThZylWt52H2yyPu4akWSun+BojCZr3Y+wXTnrpft0=)
2: I_IQvBU0utwI_5R9mTUEcRk1MbM.crl (hash: KkQUKJZVAqzl8RGr9CdKhlBI59ICHT5/7q+SGCtiiqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:37:e6:03:ce:38:0b:41:63:a8:bb:02:3a:e2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f210bc1534badc08ff947d99350471193531b3
Validity
Not Before: Oct 19 11:00:59 2025 GMT
Not After : Oct 20 11:00:59 2025 GMT
Subject: CN=81f9f7b3e760732fa73c713b8e91d80426dfa055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f2:79:5b:f7:24:f6:61:5a:49:aa:8f:a9:95:
14:3a:70:76:88:8b:ce:0a:43:3d:7c:e3:07:75:13:
23:5e:bc:45:63:92:84:46:00:1e:e7:43:90:dd:b7:
97:34:b0:6c:93:dc:45:33:46:37:7a:04:4e:2c:98:
eb:e8:a5:c5:f2:ff:6b:31:c2:52:62:d9:b5:4b:4d:
af:b5:14:11:c9:17:29:da:73:39:61:de:d6:2e:1c:
bb:94:f9:13:23:10:05:c1:2c:5b:dd:1f:f3:3f:03:
40:a4:36:c6:cf:0b:f7:b7:d4:8c:01:f5:94:87:cb:
d6:6b:cc:c5:12:7f:e7:df:53:ec:da:ac:d4:96:1e:
f3:33:cc:bc:ba:f8:c3:e8:53:2b:b1:6c:58:64:a7:
64:6b:dc:d1:bb:6b:66:57:6c:f7:a6:f9:a7:ff:d1:
74:25:fe:5d:6f:57:bb:79:0f:3c:61:8a:29:47:04:
d8:64:63:94:c0:56:1c:c5:82:13:03:23:53:ec:d1:
2f:35:2b:96:f9:45:30:94:f7:b1:71:52:88:97:40:
2b:e7:30:a4:df:ba:4e:af:e3:8e:c9:ae:22:eb:71:
b3:46:30:63:c1:d0:6e:02:b1:85:e2:e4:e3:82:71:
d0:bf:d7:32:3a:55:3a:b1:53:1a:2f:59:92:7a:52:
4b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F9:F7:B3:E7:60:73:2F:A7:3C:71:3B:8E:91:D8:04:26:DF:A0:55
X509v3 Authority Key Identifier:
keyid:23:F2:10:BC:15:34:BA:DC:08:FF:94:7D:99:35:04:71:19:35:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:07:40:06:f3:1d:a2:82:8c:30:30:e1:99:e2:5e:76:da:be:
27:0b:c3:b3:e3:13:93:f0:02:e2:b4:01:54:66:3f:14:9e:d9:
e9:67:39:0f:50:2a:2f:82:9f:17:24:a7:80:8a:d2:10:a4:9e:
01:c1:4f:8b:cf:bc:f9:ad:69:7f:c4:d6:ae:c2:d8:b1:c8:4c:
3f:0c:eb:52:58:46:6b:d9:06:00:42:fd:16:5b:63:3d:78:d2:
de:04:57:a8:19:9e:6a:f5:19:c6:09:dd:93:10:ed:bb:ad:ad:
87:06:fc:0f:34:cc:2d:bf:ea:27:80:78:ca:8c:84:f4:9a:0f:
9a:d9:38:99:d3:3c:c8:c6:f5:f8:51:66:eb:9f:63:60:68:f4:
d8:03:97:16:d2:2b:8b:6e:bc:66:b8:79:dd:a2:1c:c2:f0:d9:
9b:ed:ff:69:b9:78:68:14:af:18:73:7e:5f:d5:bb:4e:2a:29:
41:32:4f:2b:8e:4a:9a:17:ab:2a:e5:89:41:eb:af:2c:37:e5:
19:41:28:cb:54:b4:a6:c5:b1:a0:72:c8:8a:a3:aa:ae:39:7e:
eb:1f:bd:62:ee:e5:dc:e6:76:f7:91:01:84:e5:9a:e8:69:a3:
12:d5:02:f4:b2:b6:b7:c5:04:4a:38:67:c9:f3:b1:f4:ed:81:
11:00:e8:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8ITfmA844C0FjqLsCOuIoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZjIxMGJjMTUzNGJhZGMwOGZmOTQ3ZDk5MzUwNDcxMTkz
NTMxYjMwHhcNMjUxMDE5MTEwMDU5WhcNMjUxMDIwMTEwMDU5WjAzMTEwLwYDVQQD
Eyg4MWY5ZjdiM2U3NjA3MzJmYTczYzcxM2I4ZTkxZDgwNDI2ZGZhMDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fJ5W/ck9mFaSaqPqZUUOnB2iIvO
CkM9fOMHdRMjXrxFY5KERgAe50OQ3beXNLBsk9xFM0Y3egROLJjr6KXF8v9rMcJS
Ytm1S02vtRQRyRcp2nM5Yd7WLhy7lPkTIxAFwSxb3R/zPwNApDbGzwv3t9SMAfWU
h8vWa8zFEn/n31Ps2qzUlh7zM8y8uvjD6FMrsWxYZKdka9zRu2tmV2z3pvmn/9F0
Jf5db1e7eQ88YYopRwTYZGOUwFYcxYITAyNT7NEvNSuW+UUwlPexcVKIl0Ar5zCk
37pOr+OOya4i63GzRjBjwdBuArGF4uTjgnHQv9cyOlU6sVMaL1mSelJLxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIH597PnYHMvpzxxO46R2AQm36BVMB8GA1UdIwQY
MBaAFCPyELwVNLrcCP+UfZk1BHEZNTGzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSV9JUXZCVTB1dHdJXzVSOW1UVUVjUmsxTWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi80YTY3ZjEtNzQyYi00MWUzLWE2MGYt
MTEzNjNhMmJjZmFiLzEvSV9JUXZCVTB1dHdJXzVSOW1UVUVjUmsxTWJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi80YTY3ZjEtNzQyYi00MWUzLWE2MGYtMTEzNjNhMmJjZmFi
LzEvSV9JUXZCVTB1dHdJXzVSOW1UVUVjUmsxTWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGQdABvMd
ooKMMDDhmeJedtq+JwvDs+MTk/AC4rQBVGY/FJ7Z6Wc5D1AqL4KfFySngIrSEKSe
AcFPi8+8+a1pf8TWrsLYschMPwzrUlhGa9kGAEL9FltjPXjS3gRXqBmeavUZxgnd
kxDtu62thwb8DzTMLb/qJ4B4yoyE9JoPmtk4mdM8yMb1+FFm659jYGj02AOXFtIr
i268Zrh53aIcwvDZm+3/abl4aBSvGHN+X9W7TiopQTJPK45KmherKuWJQeuvLDfl
GUEoy1S0psWxoHLIiqOqrjl+6x+9Yu7l3OZ295EBhOWa6GmjEtUC9LK2t8UESjhn
yfOx9O2BEQDolg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:50 2025 by rpki-client