Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
File: Ib-54hnhX-2mrdKWObjXP1ws2AI.mft (raw, json)
Hash identifier: bzU2BNOJfKLLM5Ek/J1sBghuLp7iNqNUcwVNx0VgKsc=
Subject key identifier: 06:78:BE:AC:A4:9A:C1:6C:2D:A9:95:DA:BC:AA:D5:28:26:59:9C:44
Authority key identifier: 21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
Certificate issuer: /CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Certificate serial: 0199FCC69232E4DACF1206D49C4F2E15303E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
Manifest number: 0D5E
Signing time: Sun 19 Oct 2025 14:01:35 +0000
Manifest this update: Sun 19 Oct 2025 14:01:35 +0000
Manifest next update: Mon 20 Oct 2025 14:01:35 +0000
Files and hashes: 1: Ib-54hnhX-2mrdKWObjXP1ws2AI.crl (hash: ce/eKtBtMoqpmcUr3Ra/3/PfV7q6GvMT456a0AYgTro=)
2: efjuARdCpmdiyPaUU3_AH5I4td0.roa (hash: 4c8sivagBq88/iXFQqILtQVXJqZtsZ5vEblRM7AxfcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:92:32:e4:da:cf:12:06:d4:9c:4f:2e:15:30:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfb9e219e15feda6add29639b8d73f5c2cd802
Validity
Not Before: Oct 19 14:01:35 2025 GMT
Not After : Oct 20 14:01:35 2025 GMT
Subject: CN=0678beaca49ac16c2da995dabcaad52826599c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:01:de:d5:7e:5f:b9:40:a6:58:37:fa:eb:89:
77:f4:d1:a1:f5:57:c3:a1:40:66:be:c5:3c:62:73:
c5:6e:82:d8:5e:28:92:48:ba:85:1b:40:95:44:da:
52:2a:56:ca:36:c2:ba:83:fd:eb:4a:63:31:1e:a3:
85:f4:b7:a5:c8:27:85:5e:a2:00:b8:09:d2:6c:a1:
53:5a:13:85:98:3a:10:b1:95:0f:6e:4b:9a:21:4a:
df:5d:e3:88:2f:a2:0e:7c:a6:33:bb:75:3d:5c:83:
4c:dc:52:30:64:9d:e5:53:c8:86:39:7c:2b:cb:34:
05:9b:94:5b:fc:60:07:b4:f7:bf:b9:fc:d1:23:4f:
35:77:cd:34:1e:2b:fd:41:98:87:70:20:4c:e7:67:
3f:1f:19:0f:66:1b:1f:13:43:1d:2e:40:95:ad:0c:
6c:69:db:26:7d:28:31:68:23:8c:0a:11:a1:0b:b5:
45:73:1f:91:d9:0b:6a:b5:5e:04:ef:45:15:77:ef:
15:a0:a1:b9:d3:30:71:1d:75:91:54:c3:86:a2:c8:
ed:00:0d:32:43:23:59:3d:e7:99:a6:5a:db:e1:02:
65:0a:a0:71:ee:5a:3f:52:58:52:f0:08:4b:7a:96:
05:92:6d:df:44:71:51:56:a0:c4:79:44:e3:7d:d8:
bf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:78:BE:AC:A4:9A:C1:6C:2D:A9:95:DA:BC:AA:D5:28:26:59:9C:44
X509v3 Authority Key Identifier:
keyid:21:BF:B9:E2:19:E1:5F:ED:A6:AD:D2:96:39:B8:D7:3F:5C:2C:D8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-54hnhX-2mrdKWObjXP1ws2AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/aaae38-1b28-449d-be82-73fd2c035eb5/1/Ib-54hnhX-2mrdKWObjXP1ws2AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:84:55:c5:79:7f:44:18:bc:25:c0:a8:63:39:d7:a1:a9:98:
cb:d6:ef:e9:4d:d0:97:3a:49:68:7e:78:85:2f:8e:0e:cf:c5:
15:33:49:f9:93:ce:bc:d9:b5:7f:86:1c:99:e7:b5:dd:6f:fe:
0d:28:bc:a5:38:a2:cc:7b:5d:eb:a9:9a:7f:5b:5a:7e:3c:d3:
a3:51:4d:47:e0:12:b5:3b:d3:2a:ab:01:8e:b0:79:3a:97:15:
13:7d:c9:95:bd:5e:d3:30:cd:c1:8b:3d:25:b3:ed:71:5e:9f:
8f:01:44:3a:53:56:97:41:d5:0c:72:c1:db:23:62:69:37:d5:
e0:51:47:ec:6d:12:ea:b9:95:e6:10:44:ee:90:aa:bf:58:7c:
db:de:1e:ac:0c:d8:2c:e9:bc:9e:11:56:3d:5a:ba:21:ca:e7:
0e:52:50:d7:26:27:66:50:b2:a8:be:3d:ba:bb:85:2c:da:c1:
38:95:d6:28:03:61:4d:ed:30:ec:12:3f:80:96:b2:4d:49:fd:
10:48:e7:9e:58:9b:55:25:2c:7e:c7:28:3f:64:a7:90:a5:94:
c4:2f:14:fa:aa:2c:a0:cc:e3:f4:ec:2c:13:78:dd:5c:e6:80:
d6:3c:17:e2:d5:8c:3d:b1:2a:3d:74:f3:f1:26:4c:b0:5e:11:
ac:fe:02:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xpIy5NrPEgbUnE8uFTA+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmZiOWUyMTllMTVmZWRhNmFkZDI5NjM5YjhkNzNmNWMy
Y2Q4MDIwHhcNMjUxMDE5MTQwMTM1WhcNMjUxMDIwMTQwMTM1WjAzMTEwLwYDVQQD
EygwNjc4YmVhY2E0OWFjMTZjMmRhOTk1ZGFiY2FhZDUyODI2NTk5YzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wHe1X5fuUCmWDf664l39NGh9VfD
oUBmvsU8YnPFboLYXiiSSLqFG0CVRNpSKlbKNsK6g/3rSmMxHqOF9LelyCeFXqIA
uAnSbKFTWhOFmDoQsZUPbkuaIUrfXeOIL6IOfKYzu3U9XINM3FIwZJ3lU8iGOXwr
yzQFm5Rb/GAHtPe/ufzRI081d800Hiv9QZiHcCBM52c/HxkPZhsfE0MdLkCVrQxs
adsmfSgxaCOMChGhC7VFcx+R2QtqtV4E70UVd+8VoKG50zBxHXWRVMOGosjtAA0y
QyNZPeeZplrb4QJlCqBx7lo/UlhS8AhLepYFkm3fRHFRVqDEeUTjfdi/wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZ4vqykmsFsLamV2ryq1SgmWZxEMB8GA1UdIwQY
MBaAFCG/ueIZ4V/tpq3Sljm41z9cLNgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hYWFlMzgtMWIyOC00NDlkLWJlODIt
NzNmZDJjMDM1ZWI1LzEvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9hYWFlMzgtMWIyOC00NDlkLWJlODItNzNmZDJjMDM1ZWI1
LzEvSWItNTRobmhYLTJtcmRLV09ialhQMXdzMkFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfoRVxXl/
RBi8JcCoYznXoamYy9bv6U3QlzpJaH54hS+ODs/FFTNJ+ZPOvNm1f4Ycmee13W/+
DSi8pTiizHtd66maf1tafjzTo1FNR+AStTvTKqsBjrB5OpcVE33Jlb1e0zDNwYs9
JbPtcV6fjwFEOlNWl0HVDHLB2yNiaTfV4FFH7G0S6rmV5hBE7pCqv1h8294erAzY
LOm8nhFWPVq6IcrnDlJQ1yYnZlCyqL49uruFLNrBOJXWKANhTe0w7BI/gJayTUn9
EEjnnlibVSUsfscoP2SnkKWUxC8U+qosoMzj9OwsE3jdXOaA1jwX4tWMPbEqPXTz
8SZMsF4RrP4CZw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:23:34 2025 by rpki-client