Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
File: Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft (raw, json)
Hash identifier: 2rb0lBXUpCFrTERzmf2a4YHojtWyCunAQlzQHgWghTM=
Subject key identifier: 9B:6A:6C:08:7D:00:BB:9A:FE:58:49:A9:7A:F6:8F:12:3F:24:49:6F
Authority key identifier: 23:0D:31:1F:C1:94:63:FD:D3:0A:DE:CC:91:7B:5F:02:98:74:1B:44
Certificate issuer: /CN=230d311fc19463fdd30adecc917b5f0298741b44
Certificate serial: 0199FD6B53EDD1BE845977729690516114EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
Manifest number: 10FF
Signing time: Sun 19 Oct 2025 17:01:33 +0000
Manifest this update: Sun 19 Oct 2025 17:01:33 +0000
Manifest next update: Mon 20 Oct 2025 17:01:33 +0000
Files and hashes: 1: Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl (hash: AcFseiJExg/JQK79J3M1e5p4AdnQkz4EbTE5+Ydb4zQ=)
2: qaZCGy8ImKVej6couAVTC--aSzI.roa (hash: dKUZq0YlDWheyPATDjfQQ4lypZzKgD8qgqRTkln0uKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:53:ed:d1:be:84:59:77:72:96:90:51:61:14:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230d311fc19463fdd30adecc917b5f0298741b44
Validity
Not Before: Oct 19 17:01:33 2025 GMT
Not After : Oct 20 17:01:33 2025 GMT
Subject: CN=9b6a6c087d00bb9afe5849a97af68f123f24496f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2c:5b:60:85:95:b4:cd:91:ab:2c:83:bf:1c:
4f:84:e2:16:51:8a:ae:01:57:6c:c7:bb:6b:d7:bf:
02:47:fa:fd:6a:1e:92:1b:77:75:71:77:4f:d9:d0:
9a:2f:6c:d9:d7:a2:98:01:c3:c7:57:9f:2d:83:74:
65:0d:41:48:dc:43:8a:2a:05:4e:79:51:87:6a:37:
c0:0d:bd:4b:11:43:cd:99:42:e3:bf:7a:da:dd:f3:
89:d5:0e:8f:29:52:f0:3f:75:22:06:4e:99:66:64:
dd:aa:25:74:2b:18:bc:e2:ac:38:ac:68:c2:5c:c4:
60:16:0d:84:f2:de:e1:b6:7a:f1:55:19:cf:f2:de:
09:ce:a9:62:ea:f9:d8:d3:e5:58:f5:f9:e5:bd:9e:
eb:4b:40:71:b3:82:c2:f2:3b:ae:00:74:b4:f1:8f:
5e:8d:b8:4d:4e:93:b2:26:b4:30:25:40:34:7a:93:
7c:5f:23:1e:26:93:6d:69:6f:8f:4b:c0:3c:0d:f5:
41:69:ea:01:1d:ff:3d:41:06:30:32:cf:d1:56:ed:
1e:43:5b:0a:31:55:70:8c:92:9a:cd:83:a8:0e:c0:
cd:71:89:56:5b:42:f8:e5:5e:c8:21:a1:0e:09:a0:
fc:53:eb:b6:f7:0b:fa:ca:6a:17:d6:69:6a:cf:2b:
b6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6A:6C:08:7D:00:BB:9A:FE:58:49:A9:7A:F6:8F:12:3F:24:49:6F
X509v3 Authority Key Identifier:
keyid:23:0D:31:1F:C1:94:63:FD:D3:0A:DE:CC:91:7B:5F:02:98:74:1B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:2a:5c:da:7c:49:9d:2e:a0:ff:16:bc:63:18:17:aa:9f:31:
1f:80:8c:78:01:7c:b8:6f:ea:4c:08:64:46:9b:22:a8:7e:49:
bb:3b:c9:04:f9:99:b1:03:a3:70:cc:90:b6:49:58:7a:6a:9c:
b0:62:3a:bc:38:fe:f7:3f:f2:49:cd:de:f0:fe:d2:18:47:c6:
19:66:79:78:cc:72:95:d8:ee:4f:98:2b:6e:ce:9d:56:ff:c0:
46:f0:2d:8e:ff:76:25:cb:ae:5d:56:00:ae:3d:05:c2:f8:87:
40:97:ac:55:fa:4f:56:49:05:7c:8e:55:d2:73:c2:57:38:15:
f9:e6:5a:a1:81:20:34:eb:d1:91:1e:4f:fa:e5:53:23:2a:17:
76:cf:df:e2:e8:76:1e:62:88:a1:6b:ff:fb:78:27:2f:b0:a4:
5a:db:3a:6f:9e:14:f3:3d:cc:9c:18:bd:1a:b7:e1:d7:52:62:
73:fc:bb:32:b0:3b:17:d9:ac:14:16:bc:8b:08:b4:05:64:06:
49:71:a5:d2:78:c1:96:eb:b8:70:73:b0:af:e9:d1:19:20:8c:
60:c1:68:a8:d4:12:83:20:b1:35:39:06:56:b7:3f:b2:c9:dc:
ba:17:4b:ed:7f:1b:7b:d2:a0:e5:6d:28:8b:ca:d6:a2:b6:8e:
9d:dd:48:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9a1Pt0b6EWXdylpBRYRTvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMGQzMTFmYzE5NDYzZmRkMzBhZGVjYzkxN2I1ZjAyOTg3
NDFiNDQwHhcNMjUxMDE5MTcwMTMzWhcNMjUxMDIwMTcwMTMzWjAzMTEwLwYDVQQD
Eyg5YjZhNmMwODdkMDBiYjlhZmU1ODQ5YTk3YWY2OGYxMjNmMjQ0OTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwixbYIWVtM2RqyyDvxxPhOIWUYqu
AVdsx7tr178CR/r9ah6SG3d1cXdP2dCaL2zZ16KYAcPHV58tg3RlDUFI3EOKKgVO
eVGHajfADb1LEUPNmULjv3ra3fOJ1Q6PKVLwP3UiBk6ZZmTdqiV0Kxi84qw4rGjC
XMRgFg2E8t7htnrxVRnP8t4Jzqli6vnY0+VY9fnlvZ7rS0Bxs4LC8juuAHS08Y9e
jbhNTpOyJrQwJUA0epN8XyMeJpNtaW+PS8A8DfVBaeoBHf89QQYwMs/RVu0eQ1sK
MVVwjJKazYOoDsDNcYlWW0L45V7IIaEOCaD8U+u29wv6ymoX1mlqzyu2HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtqbAh9ALua/lhJqXr2jxI/JElvMB8GA1UdIwQY
MBaAFCMNMR/BlGP90wrezJF7XwKYdBtEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXcweEg4R1VZXzNUQ3Q3TWtYdGZBcGgwRzBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yODFkZmItMzI5My00YmFiLWJhMjIt
MWJlY2I1ZGNkN2FhLzEvSXcweEg4R1VZXzNUQ3Q3TWtYdGZBcGgwRzBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8yODFkZmItMzI5My00YmFiLWJhMjItMWJlY2I1ZGNkN2Fh
LzEvSXcweEg4R1VZXzNUQ3Q3TWtYdGZBcGgwRzBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyCpc2nxJ
nS6g/xa8YxgXqp8xH4CMeAF8uG/qTAhkRpsiqH5JuzvJBPmZsQOjcMyQtklYemqc
sGI6vDj+9z/ySc3e8P7SGEfGGWZ5eMxyldjuT5grbs6dVv/ARvAtjv92JcuuXVYA
rj0FwviHQJesVfpPVkkFfI5V0nPCVzgV+eZaoYEgNOvRkR5P+uVTIyoXds/f4uh2
HmKIoWv/+3gnL7CkWts6b54U8z3MnBi9Grfh11Jic/y7MrA7F9msFBa8iwi0BWQG
SXGl0njBluu4cHOwr+nRGSCMYMFoqNQSgyCxNTkGVrc/ssncuhdL7X8be9Kg5W0o
i8rWoraOnd1Ilg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:57:23 2025 by rpki-client