Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
File: ix22ROoOJ0ndbtAirs0SGUvLlvI.mft (raw, json)
Hash identifier: +t/od3jUtsXPrFBRKOJD+N8h+Iyh189sm0WWTaorc8M=
Subject key identifier: 83:22:29:02:0F:81:2A:07:EA:43:2F:DB:DA:CC:B1:3A:CB:09:51:8F
Authority key identifier: 8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2
Certificate issuer: /CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2
Certificate serial: 0199FC58BE9E0B3634A8DD1B20E6AB447727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 12:01:38 +0000
Manifest this update: Sun 19 Oct 2025 12:01:38 +0000
Manifest next update: Mon 20 Oct 2025 12:01:38 +0000
Files and hashes: 1: A41bCmeGcRe18SujefEGCOd0pEc.roa (hash: NjleSysihCL9A6oaK71bgTpnAO+ec2pn28x66pipbdA=)
2: ix22ROoOJ0ndbtAirs0SGUvLlvI.crl (hash: lAHA0rEK6wnOY5gX8bEhickTiUYsaL2AbnEcvrZ0ISg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:be:9e:0b:36:34:a8:dd:1b:20:e6:ab:44:77:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2
Validity
Not Before: Oct 19 12:01:38 2025 GMT
Not After : Oct 20 12:01:38 2025 GMT
Subject: CN=832229020f812a07ea432fdbdaccb13acb09518f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:18:3c:1f:d0:1c:a0:ed:32:ac:86:98:af:1b:
5b:00:b0:00:8f:a1:a9:fa:4f:0c:16:c7:bf:8e:fe:
e3:26:cb:16:86:ee:cb:6d:4c:a2:da:1f:31:0c:7c:
42:5f:a5:7d:9c:d6:c8:40:ac:1e:b9:ca:34:db:3c:
67:0d:6a:27:85:fc:d1:cb:ce:36:0b:47:07:15:7b:
2e:5b:c4:e4:e8:da:22:c0:af:ad:24:86:ab:c4:41:
4e:b3:8f:31:de:1d:55:0e:a6:e6:b3:a4:11:e2:af:
28:59:5b:09:ab:45:ca:75:5a:13:0d:22:d7:48:45:
d9:22:8b:23:44:f0:15:0b:9f:79:fe:7a:a6:68:7a:
1d:e8:f8:c7:41:6d:89:08:df:e4:e7:57:bb:27:17:
b0:2a:82:82:13:70:a8:79:d3:f7:95:b8:ea:be:fe:
8e:99:3a:ff:da:36:e8:88:bf:eb:9c:27:d2:83:79:
8a:9d:ac:4b:06:6a:b1:ce:2e:45:2b:6e:04:e0:28:
a0:e5:cb:6d:02:9e:1d:27:06:57:fe:66:e6:68:9d:
eb:aa:ec:97:5f:31:cb:97:ab:fd:f1:40:19:93:cf:
67:ba:fa:70:ec:8f:5f:09:18:3f:75:4f:1f:b9:a3:
0e:a6:e2:b2:e0:fd:2d:c0:56:5b:c5:84:1f:57:83:
cd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:22:29:02:0F:81:2A:07:EA:43:2F:DB:DA:CC:B1:3A:CB:09:51:8F
X509v3 Authority Key Identifier:
keyid:8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c7:a0:37:4f:95:2d:cd:64:9a:08:2f:ec:45:8d:91:6e:e6:
6a:1b:9e:c3:69:29:95:db:0a:5f:7e:a7:85:02:b7:e9:01:e8:
16:d6:99:68:af:4d:44:71:a5:03:e5:37:87:50:ae:fe:c8:0b:
ab:0e:d7:29:93:ba:97:0b:6a:fe:08:cf:da:d5:09:89:28:b1:
4a:0b:9d:69:06:e7:35:bb:61:16:0e:d2:d9:87:14:7e:4f:fb:
b7:ad:2e:1b:02:ad:2f:0c:6d:1e:bf:5d:26:8e:62:5b:53:49:
40:44:1e:f5:9c:08:f9:9a:57:48:81:61:d7:8d:e4:99:2b:48:
40:64:2a:85:5a:8e:70:f1:51:8c:ad:29:eb:0a:7d:e9:e0:24:
da:63:ba:c7:7a:31:4d:0b:d7:1a:f1:fc:da:c9:f5:fb:4d:76:
97:2d:65:3a:7b:30:a0:0a:17:93:77:3b:15:8e:65:7d:b3:a3:
a4:3e:c2:76:bf:13:4a:08:c0:86:13:70:85:fe:5c:ab:de:54:
1e:3a:25:ba:d4:f7:a9:4b:ba:6c:de:80:92:cd:b4:12:c4:63:
6b:80:18:e6:87:21:14:8f:d8:ce:da:89:37:f2:e8:23:e6:05:
18:c3:b5:45:da:93:bb:e0:8d:92:de:d6:0b:a5:e2:10:2b:71:
70:e3:f3:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WL6eCzY0qN0bIOarRHcnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMWRiNjQ0ZWEwZTI3NDlkZDZlZDAyMmFlY2QxMjE5NGJj
Yjk2ZjIwHhcNMjUxMDE5MTIwMTM4WhcNMjUxMDIwMTIwMTM4WjAzMTEwLwYDVQQD
Eyg4MzIyMjkwMjBmODEyYTA3ZWE0MzJmZGJkYWNjYjEzYWNiMDk1MThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxg8H9AcoO0yrIaYrxtbALAAj6Gp
+k8MFse/jv7jJssWhu7LbUyi2h8xDHxCX6V9nNbIQKweuco02zxnDWonhfzRy842
C0cHFXsuW8Tk6NoiwK+tJIarxEFOs48x3h1VDqbms6QR4q8oWVsJq0XKdVoTDSLX
SEXZIosjRPAVC595/nqmaHod6PjHQW2JCN/k51e7JxewKoKCE3CoedP3lbjqvv6O
mTr/2jboiL/rnCfSg3mKnaxLBmqxzi5FK24E4Cig5cttAp4dJwZX/mbmaJ3rquyX
XzHLl6v98UAZk89nuvpw7I9fCRg/dU8fuaMOpuKy4P0twFZbxYQfV4PNZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMiKQIPgSoH6kMv29rMsTrLCVGPMB8GA1UdIwQY
MBaAFIsdtkTqDidJ3W7QIq7NEhlLy5byMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXgyMlJPb09KMG5kYnRBaXJzMFNHVXZMbHZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9kYzljNmEtNTUwYS00ZWUxLWI0ZmMt
NTQzNzc2ZjdjOTJlLzEvaXgyMlJPb09KMG5kYnRBaXJzMFNHVXZMbHZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9kYzljNmEtNTUwYS00ZWUxLWI0ZmMtNTQzNzc2ZjdjOTJl
LzEvaXgyMlJPb09KMG5kYnRBaXJzMFNHVXZMbHZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABsegN0+V
Lc1kmggv7EWNkW7mahuew2kpldsKX36nhQK36QHoFtaZaK9NRHGlA+U3h1Cu/sgL
qw7XKZO6lwtq/gjP2tUJiSixSgudaQbnNbthFg7S2YcUfk/7t60uGwKtLwxtHr9d
Jo5iW1NJQEQe9ZwI+ZpXSIFh143kmStIQGQqhVqOcPFRjK0p6wp96eAk2mO6x3ox
TQvXGvH82sn1+012ly1lOnswoAoXk3c7FY5lfbOjpD7Cdr8TSgjAhhNwhf5cq95U
HjolutT3qUu6bN6Aks20EsRja4AY5ochFI/YztqJN/LoI+YFGMO1RdqTu+CNkt7W
C6XiECtxcOPzlA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:12 2025 by rpki-client