Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
File: IwNA0n5LJPkSSXcyLts2lC4tFgw.mft (raw, json)
Hash identifier: X7V88GDWmuXafW96x+lRKYKvg+piHdkwGyeXs42+3Dk=
Subject key identifier: 7D:4A:01:4D:95:38:A8:9C:A2:7A:F7:D3:B8:FC:21:44:4B:29:89:6F
Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
Certificate issuer: /CN=230340d27e4b24f9124977322edb36942e2d160c
Certificate serial: 0199FBEBBFC443D4A1305F8643C857A4D94B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 10:02:35 +0000
Manifest this update: Sun 19 Oct 2025 10:02:35 +0000
Manifest next update: Mon 20 Oct 2025 10:02:35 +0000
Files and hashes: 1: 8BE15BYRjJfhZasQiCcSRq-1rvE.roa (hash: owl3mrEo7nmudL7UJFk7qfjK5dtTSEPpdF0yRa2bSts=)
2: 8pfPZSOu9OxWh0zIohg91aPGe8w.roa (hash: c5LZlJIp5DIk0u0EVUZdwpG29wBKxdLqbOnohSJsuL0=)
3: IwNA0n5LJPkSSXcyLts2lC4tFgw.crl (hash: MXSF+bUI0VVTfJzB2AQZEwuGcQuI+6UAnetdxeJG3rc=)
4: W5_MS3jBPdXrXt2CXzKVEDSySg4.roa (hash: 5kr0YkXkQlloL0Dx58yHdS9CGeVUoXp4B0GMVprtw4I=)
5: YZdW1FTou_f-R0pbpF5XZ4Tx3hg.roa (hash: zlg3+gSw7tZCxS27EU5I1VhaiNCdA3Z7IiLzIapPksE=)
6: j5QKeuGXTRBwPGjQWWnfRFS80gs.roa (hash: Z4Hp9oqaE6vPUIIGvGUpRfdgDDW4cmfUljTJCbGbKQk=)
7: nAr5TcbaRaUgvGs6GhoEMZYw2k4.roa (hash: PsVErZ9iC+yU1AQTc2kN6DO2ltE02bbxJGF/AxC6Z9Q=)
8: qH4AOngGgCDKos4oiBE8L48PaSU.roa (hash: wAl3jqMD73juUqzGb6OKFl9PHSoZSU+evXbe0KXVLu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:bf:c4:43:d4:a1:30:5f:86:43:c8:57:a4:d9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c
Validity
Not Before: Oct 19 10:02:35 2025 GMT
Not After : Oct 20 10:02:35 2025 GMT
Subject: CN=7d4a014d9538a89ca27af7d3b8fc21444b29896f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7f:45:da:ac:3d:dd:d4:cd:14:f6:14:4f:21:
a9:16:23:3f:f2:b6:99:71:cd:cd:a5:db:1e:de:30:
1b:ac:92:7f:92:84:08:42:ee:6d:0f:58:9e:94:70:
a2:b0:02:98:fb:5f:22:a3:81:88:1e:01:17:e4:c0:
a7:99:8d:f4:99:f9:17:a1:11:ba:1b:25:89:71:75:
50:70:a9:48:f7:d7:67:ec:e1:36:3b:b9:02:d6:82:
cd:89:23:1a:66:45:a6:0b:3a:39:fe:49:2f:c5:98:
e6:5b:2c:28:4c:09:d8:3b:45:c5:02:10:fd:5b:8b:
61:83:ed:70:71:6b:a0:db:35:3f:92:34:2c:91:eb:
87:08:bd:d1:e4:4e:b8:c3:66:8d:47:6e:14:78:79:
a3:26:c2:ef:4b:5f:67:06:da:b8:2b:ec:eb:18:ec:
b3:a7:01:7d:d5:26:b5:38:56:c8:63:5b:6c:9f:a7:
ff:7a:b8:10:5b:1c:90:be:19:21:9d:d5:16:e6:85:
b4:a9:45:fa:61:1b:c5:bb:a7:27:e0:5d:73:80:d5:
bc:79:03:bd:f0:49:71:ea:57:bd:8e:a2:24:db:da:
3a:6a:7d:3f:92:b0:5f:a2:81:86:dd:7d:6b:0b:fc:
f8:26:4b:21:07:71:73:43:2f:a5:52:6c:f8:bd:82:
12:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4A:01:4D:95:38:A8:9C:A2:7A:F7:D3:B8:FC:21:44:4B:29:89:6F
X509v3 Authority Key Identifier:
keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:88:83:a6:f7:57:c4:6e:47:76:52:51:36:b7:e8:aa:71:c3:
b9:e9:1b:d6:48:1c:d7:f1:3b:42:1f:85:39:8f:7b:fb:8c:cb:
13:1f:51:6a:fe:1b:9d:a4:66:f9:67:f7:70:1c:e3:da:47:5a:
72:94:61:8f:d8:4a:96:ea:11:f9:24:e8:24:00:5d:74:86:dd:
19:54:04:52:f0:95:ca:c5:92:71:0a:62:11:16:3f:d1:48:80:
99:c9:69:74:61:3d:a3:db:0a:2a:cc:ce:c5:ae:e5:85:2b:34:
7c:eb:ae:fb:43:ed:e3:77:c6:8b:51:57:86:51:97:7f:38:c3:
b8:7c:8b:b8:c6:07:65:c3:6f:c1:c2:18:52:15:2e:16:2c:53:
32:f4:6e:05:13:9d:ce:92:1b:3a:11:42:5a:c2:68:ab:55:5a:
46:7c:a7:3c:0e:f5:19:fc:1d:42:c8:c6:93:a3:69:ad:99:fa:
fa:63:87:42:3d:90:51:c4:28:96:53:79:f4:f7:08:1d:f7:3e:
55:94:32:10:f7:4f:95:2f:04:48:52:f9:c6:fc:f6:18:bc:10:
a6:b7:d1:7d:4d:46:78:6c:78:6f:4e:cf:da:34:b0:82:d3:9d:
b4:53:d1:ee:7a:08:02:f1:af:57:5d:33:8a:3f:48:32:f9:63:
1d:c9:4a:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn767/EQ9ShMF+GQ8hXpNlLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMDM0MGQyN2U0YjI0ZjkxMjQ5NzczMjJlZGIzNjk0MmUy
ZDE2MGMwHhcNMjUxMDE5MTAwMjM1WhcNMjUxMDIwMTAwMjM1WjAzMTEwLwYDVQQD
Eyg3ZDRhMDE0ZDk1MzhhODljYTI3YWY3ZDNiOGZjMjE0NDRiMjk4OTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX9F2qw93dTNFPYUTyGpFiM/8raZ
cc3Npdse3jAbrJJ/koQIQu5tD1ielHCisAKY+18io4GIHgEX5MCnmY30mfkXoRG6
GyWJcXVQcKlI99dn7OE2O7kC1oLNiSMaZkWmCzo5/kkvxZjmWywoTAnYO0XFAhD9
W4thg+1wcWug2zU/kjQskeuHCL3R5E64w2aNR24UeHmjJsLvS19nBtq4K+zrGOyz
pwF91Sa1OFbIY1tsn6f/ergQWxyQvhkhndUW5oW0qUX6YRvFu6cn4F1zgNW8eQO9
8Elx6le9jqIk29o6an0/krBfooGG3X1rC/z4JkshB3FzQy+lUmz4vYISMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1KAU2VOKiconr307j8IURLKYlvMB8GA1UdIwQY
MBaAFCMDQNJ+SyT5Ekl3Mi7bNpQuLRYMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS83YmRmNTItNmFjNS00YzI0LWJmZDAt
YjU3MDkwN2I1OWViLzEvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS83YmRmNTItNmFjNS00YzI0LWJmZDAtYjU3MDkwN2I1OWVi
LzEvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxIiDpvdX
xG5HdlJRNrfoqnHDuekb1kgc1/E7Qh+FOY97+4zLEx9Rav4bnaRm+Wf3cBzj2kda
cpRhj9hKluoR+SToJABddIbdGVQEUvCVysWScQpiERY/0UiAmclpdGE9o9sKKszO
xa7lhSs0fOuu+0Pt43fGi1FXhlGXfzjDuHyLuMYHZcNvwcIYUhUuFixTMvRuBROd
zpIbOhFCWsJoq1VaRnynPA71GfwdQsjGk6NprZn6+mOHQj2QUcQollN59PcIHfc+
VZQyEPdPlS8ESFL5xvz2GLwQprfRfU1GeGx4b07P2jSwgtOdtFPR7noIAvGvV10z
ij9IMvljHclK6Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:06 2025 by rpki-client