Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
File: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft (raw, json)
Hash identifier: iEXjby0azWF7yzulpHLWVXR+1s0hS7U3kSEeEUpZMsw=
Subject key identifier: 06:25:67:39:44:74:4F:0D:2A:7C:37:C3:26:80:54:A7:A2:4F:10:79
Authority key identifier: 20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
Certificate issuer: /CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Certificate serial: 0199FC21AD326360E47E3F9B7167B3000CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:29 +0000
Manifest this update: Sun 19 Oct 2025 11:01:29 +0000
Manifest next update: Mon 20 Oct 2025 11:01:29 +0000
Files and hashes: 1: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl (hash: PwXRzRkc1pbdWIFfCfEKycnTlgpP1HoEkY8/5yweGF4=)
2: LkiVXeukns_JdhONh74qaRMFBIM.roa (hash: sMLMXJ4GQAf8vdiNw4uFl/nK1+dFlOKAlp+mNZ+YliU=)
3: cd1yHX5UcqryiXUb-rkYleNrwXs.roa (hash: 6h3q+Ehg11sL4jSJjG152eGWFDBSFWsjBJ9eqGT5BtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:ad:32:63:60:e4:7e:3f:9b:71:67:b3:00:0c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Validity
Not Before: Oct 19 11:01:29 2025 GMT
Not After : Oct 20 11:01:29 2025 GMT
Subject: CN=0625673944744f0d2a7c37c3268054a7a24f1079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:88:bb:5c:fe:f7:f4:15:eb:ee:ba:b2:f4:
87:9f:83:78:db:59:c1:e4:12:1c:77:b7:78:bb:7e:
bf:21:dd:e3:f4:13:94:73:73:cb:35:57:a0:1a:84:
1d:9e:65:31:32:53:79:b5:f0:bd:bd:7b:cb:c2:60:
cb:0e:b4:64:94:35:5d:a7:69:fc:19:0a:b3:88:66:
87:81:b2:4e:7c:b3:fc:a4:66:60:7f:42:77:e8:1c:
78:e8:41:82:99:c7:49:18:79:e8:8b:22:4a:81:18:
c8:a4:0b:cd:27:3c:c3:96:0e:c7:5a:10:87:db:96:
22:d2:3a:f7:fb:43:9a:b6:5a:13:1f:72:35:f2:ee:
17:27:86:5c:68:a7:05:e1:bf:ed:08:a2:a3:af:33:
2a:e0:f1:64:64:ec:57:1b:e8:a6:c5:99:aa:e3:da:
92:56:f8:b1:b5:43:6f:08:7d:27:28:8a:12:80:30:
34:6e:02:ff:89:f4:48:ec:d0:c6:37:55:b8:3c:9d:
d3:0d:e0:13:b9:37:7b:6c:1d:2b:7c:7c:54:21:8f:
c5:15:25:fb:b9:6f:f9:7c:73:05:8e:08:41:7f:ef:
bf:21:7d:99:e9:4e:1a:27:d5:a5:ff:75:53:18:55:
f3:6b:b8:da:34:92:fc:40:7e:6c:30:79:82:4d:9e:
27:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:25:67:39:44:74:4F:0D:2A:7C:37:C3:26:80:54:A7:A2:4F:10:79
X509v3 Authority Key Identifier:
keyid:20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:c3:86:cc:ac:b7:ae:5a:09:5c:b5:36:15:fa:cb:46:47:bd:
c3:83:a2:fc:92:e8:21:e8:c7:46:32:99:0f:7e:e1:a9:10:68:
25:30:f9:9b:cf:02:5c:2e:c4:d4:20:10:47:dc:c3:02:d2:53:
93:0f:98:74:06:df:17:0b:bb:7e:0f:c7:04:9b:d0:61:30:24:
33:4d:c1:e8:d8:14:83:69:26:e3:92:70:cc:ac:27:50:82:89:
65:ac:e1:9b:b0:51:75:ef:9b:79:49:ba:9e:b8:bb:7d:a0:41:
e2:ee:02:80:d5:45:31:8f:cf:9b:ae:a4:97:ad:5f:2f:e0:cb:
ad:49:4d:78:69:b8:ad:b1:f2:a0:ad:86:f2:23:ef:ad:9a:4b:
60:40:53:57:01:b0:cb:1a:a6:8e:5c:e7:dd:f0:42:52:62:6b:
f8:c1:aa:56:22:1d:94:d0:32:92:2a:5a:ed:64:a0:2d:fd:b1:
51:f2:3e:35:10:49:03:ad:21:92:1e:9b:cd:d1:9e:b6:b1:07:
5d:42:01:2e:c5:fc:ff:40:2f:06:67:f9:a7:99:b1:41:5e:d5:
4d:25:9f:7f:b4:f6:35:bd:ac:11:8f:9a:08:a8:c3:63:44:cc:
65:2c:c3:75:d3:d5:b1:9e:14:c9:84:f4:ed:cb:0b:a4:f3:10:
96:c8:4d:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8Ia0yY2Dkfj+bcWezAAzgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNmY2ODA4ZTA2MDQ2OTcyNzBmYWEzYzNkYjE1OWY3ZmU5
OGVjZGQwHhcNMjUxMDE5MTEwMTI5WhcNMjUxMDIwMTEwMTI5WjAzMTEwLwYDVQQD
EygwNjI1NjczOTQ0NzQ0ZjBkMmE3YzM3YzMyNjgwNTRhN2EyNGYxMDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK+Iu1z+9/QV6+66svSHn4N421nB
5BIcd7d4u36/Id3j9BOUc3PLNVegGoQdnmUxMlN5tfC9vXvLwmDLDrRklDVdp2n8
GQqziGaHgbJOfLP8pGZgf0J36Bx46EGCmcdJGHnoiyJKgRjIpAvNJzzDlg7HWhCH
25Yi0jr3+0OatloTH3I18u4XJ4ZcaKcF4b/tCKKjrzMq4PFkZOxXG+imxZmq49qS
VvixtUNvCH0nKIoSgDA0bgL/ifRI7NDGN1W4PJ3TDeATuTd7bB0rfHxUIY/FFSX7
uW/5fHMFjghBf++/IX2Z6U4aJ9Wl/3VTGFXza7jaNJL8QH5sMHmCTZ4ntQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYlZzlEdE8NKnw3wyaAVKeiTxB5MB8GA1UdIwQY
MBaAFCBvaAjgYEaXJw+qPD2xWff+mOzdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUc5b0NPQmdScGNuRDZvOFBiRlo5XzZZN04wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yNjVkM2EtYWVkNi00YmUyLWI0MmUt
ZWI2MmU4YzRkZmE5LzEvSUc5b0NPQmdScGNuRDZvOFBiRlo5XzZZN04wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8yNjVkM2EtYWVkNi00YmUyLWI0MmUtZWI2MmU4YzRkZmE5
LzEvSUc5b0NPQmdScGNuRDZvOFBiRlo5XzZZN04wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5MOGzKy3
rloJXLU2FfrLRke9w4Oi/JLoIejHRjKZD37hqRBoJTD5m88CXC7E1CAQR9zDAtJT
kw+YdAbfFwu7fg/HBJvQYTAkM03B6NgUg2km45JwzKwnUIKJZazhm7BRde+beUm6
nri7faBB4u4CgNVFMY/Pm66kl61fL+DLrUlNeGm4rbHyoK2G8iPvrZpLYEBTVwGw
yxqmjlzn3fBCUmJr+MGqViIdlNAykipa7WSgLf2xUfI+NRBJA60hkh6bzdGetrEH
XUIBLsX8/0AvBmf5p5mxQV7VTSWff7T2Nb2sEY+aCKjDY0TMZSzDddPVsZ4UyYT0
7csLpPMQlshNQw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:46 2025 by rpki-client