Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
File: ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft (raw, json)
Hash identifier: +VjsDShKa7Pi4TGk/AgsL5m04Gu0zSjw9w2Xl0/XNvs=
Subject key identifier: 09:0C:F1:90:6D:94:BD:4D:39:39:E8:3C:5E:B3:BE:74:84:56:EE:7C
Authority key identifier: 89:F1:85:8C:D3:7F:B3:8B:2A:CF:A5:CB:4E:F4:3E:3C:30:8D:3D:61
Certificate issuer: /CN=89f1858cd37fb38b2acfa5cb4ef43e3c308d3d61
Certificate serial: 0199FD33FC1247207D6C0C46C8053B37F8A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 16:01:06 +0000
Manifest this update: Sun 19 Oct 2025 16:01:06 +0000
Manifest next update: Mon 20 Oct 2025 16:01:06 +0000
Files and hashes: 1: ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl (hash: Oow3XfbeftZ1o9HeK88+2xxFAEcYlExfC+KKGxyuwjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:fc:12:47:20:7d:6c:0c:46:c8:05:3b:37:f8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f1858cd37fb38b2acfa5cb4ef43e3c308d3d61
Validity
Not Before: Oct 19 16:01:06 2025 GMT
Not After : Oct 20 16:01:06 2025 GMT
Subject: CN=090cf1906d94bd4d3939e83c5eb3be748456ee7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:50:12:d0:49:0c:be:bf:6b:58:f9:1a:30:81:
5c:cc:a7:21:6a:2d:e4:be:63:c7:cd:49:07:74:47:
32:f2:a2:74:c1:14:2c:7d:96:52:48:30:db:a5:4a:
0f:a9:a9:56:e1:de:e8:92:5d:16:0f:f2:f3:09:8b:
5d:79:e1:58:81:89:93:eb:c0:69:ee:5c:3c:e2:ad:
59:30:52:5f:db:7e:54:49:cd:c2:55:80:09:87:6e:
fc:e3:da:e2:0c:96:06:c0:bc:2c:65:8d:31:2d:69:
87:aa:7e:cd:68:01:1c:a4:e5:84:cd:a9:46:d4:12:
c8:02:c1:a7:c9:17:03:7a:2c:03:d3:41:38:81:e7:
11:7b:8d:60:2a:06:7d:13:ea:62:27:59:65:0d:e7:
43:99:40:b5:27:11:b3:62:e7:f3:af:f9:fe:ce:76:
75:66:32:52:ea:a2:0c:c6:7e:06:2f:dd:d6:92:e2:
d1:48:1a:f8:fe:5e:ec:96:fb:2b:8c:d7:9a:ce:f0:
4a:d5:6e:a8:c7:e5:1e:3f:fc:c9:66:3a:f7:59:1b:
3f:4d:69:a9:b3:5a:91:cd:a2:b9:32:9c:05:f2:90:
fc:08:6e:a8:f7:86:e0:89:72:dd:82:8c:34:33:10:
4f:e2:7b:46:3e:c3:2b:46:f6:42:83:70:82:75:9f:
f2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0C:F1:90:6D:94:BD:4D:39:39:E8:3C:5E:B3:BE:74:84:56:EE:7C
X509v3 Authority Key Identifier:
keyid:89:F1:85:8C:D3:7F:B3:8B:2A:CF:A5:CB:4E:F4:3E:3C:30:8D:3D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:09:07:9c:5d:36:c5:84:9f:00:ac:e8:df:b5:9a:83:be:99:
b2:19:44:cd:99:67:ad:04:ff:6f:d6:af:9f:69:eb:83:c0:85:
b2:ad:3c:80:11:f6:8d:44:a4:4b:51:f9:a2:bb:4e:06:22:87:
93:bb:88:85:9a:f0:fd:4f:b6:13:73:92:da:24:25:34:17:eb:
b7:15:71:66:c9:02:b9:ac:bd:be:3d:ab:32:15:9f:6b:b2:5e:
fd:b0:43:3f:16:d3:63:e0:48:7d:1e:d0:9d:53:3d:24:44:b1:
de:a0:70:fe:ee:a4:04:6c:03:f9:d1:10:1a:a4:f8:a3:7c:0a:
e9:42:61:4c:e8:f6:49:70:20:65:58:32:7e:b0:4b:71:1d:25:
01:45:74:cf:cb:34:bd:38:89:00:be:e0:21:76:ac:b0:c7:60:
f2:70:5c:3d:b8:9d:fe:1a:27:09:a4:52:28:10:1d:e8:f6:9c:
3d:17:d4:47:b5:4e:d7:d0:9d:05:cf:07:5e:be:46:07:85:c0:
46:9f:ea:f7:94:6c:b4:60:f1:9d:3a:09:0f:9b:3e:23:50:39:
a9:06:b1:63:5f:a1:fb:fc:d2:6a:82:e1:76:09:7c:35:04:ff:
c9:65:16:56:43:f5:f0:45:19:a9:7b:22:9a:a7:79:21:c7:bf:
1e:00:6f:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9M/wSRyB9bAxGyAU7N/ihMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZjE4NThjZDM3ZmIzOGIyYWNmYTVjYjRlZjQzZTNjMzA4
ZDNkNjEwHhcNMjUxMDE5MTYwMTA2WhcNMjUxMDIwMTYwMTA2WjAzMTEwLwYDVQQD
EygwOTBjZjE5MDZkOTRiZDRkMzkzOWU4M2M1ZWIzYmU3NDg0NTZlZTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lAS0EkMvr9rWPkaMIFczKchai3k
vmPHzUkHdEcy8qJ0wRQsfZZSSDDbpUoPqalW4d7okl0WD/LzCYtdeeFYgYmT68Bp
7lw84q1ZMFJf235USc3CVYAJh27849riDJYGwLwsZY0xLWmHqn7NaAEcpOWEzalG
1BLIAsGnyRcDeiwD00E4gecRe41gKgZ9E+piJ1llDedDmUC1JxGzYufzr/n+znZ1
ZjJS6qIMxn4GL93WkuLRSBr4/l7slvsrjNeazvBK1W6ox+UeP/zJZjr3WRs/TWmp
s1qRzaK5MpwF8pD8CG6o94bgiXLdgow0MxBP4ntGPsMrRvZCg3CCdZ/yBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkM8ZBtlL1NOTnoPF6zvnSEVu58MB8GA1UdIwQY
MBaAFInxhYzTf7OLKs+ly070PjwwjT1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWZHRmpOTl9zNHNxejZYTFR2US1QRENOUFdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zODNiNzAtZGJmMy00ZmYzLWIxNTMt
M2ZlNGY3Y2JhZGFiLzEvaWZHRmpOTl9zNHNxejZYTFR2US1QRENOUFdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8zODNiNzAtZGJmMy00ZmYzLWIxNTMtM2ZlNGY3Y2JhZGFi
LzEvaWZHRmpOTl9zNHNxejZYTFR2US1QRENOUFdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAAkHnF02
xYSfAKzo37Wag76ZshlEzZlnrQT/b9avn2nrg8CFsq08gBH2jUSkS1H5ortOBiKH
k7uIhZrw/U+2E3OS2iQlNBfrtxVxZskCuay9vj2rMhWfa7Je/bBDPxbTY+BIfR7Q
nVM9JESx3qBw/u6kBGwD+dEQGqT4o3wK6UJhTOj2SXAgZVgyfrBLcR0lAUV0z8s0
vTiJAL7gIXassMdg8nBcPbid/honCaRSKBAd6PacPRfUR7VO19CdBc8HXr5GB4XA
Rp/q95RstGDxnToJD5s+I1A5qQaxY1+h+/zSaoLhdgl8NQT/yWUWVkP18EUZqXsi
mqd5Ice/HgBvPA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:29:53 2025 by rpki-client