Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
File: ifnCFo0tgt39inBjfUQBivMLH5c.mft (raw, json)
Hash identifier: oY7hEb8Yvd1AYfr2f+GOVMzw7IrZEnpHgHRntJIGfaI=
Subject key identifier: 15:1D:B0:79:62:A7:6C:7B:C7:1E:EF:47:0D:3A:ED:35:73:83:04:3E
Authority key identifier: 89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
Certificate issuer: /CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Certificate serial: 0199FE46BA8CAC5B5DE49AD6EB7BE5207317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
Manifest number: 021B
Signing time: Sun 19 Oct 2025 21:01:11 +0000
Manifest this update: Sun 19 Oct 2025 21:01:11 +0000
Manifest next update: Mon 20 Oct 2025 21:01:11 +0000
Files and hashes: 1: ifnCFo0tgt39inBjfUQBivMLH5c.crl (hash: SJGFxzmijV/QTrIXGuUTScc0SOugD0OKuHSd5sQOn3A=)
2: spqKrZZlSshpL2qYZip0d0WaBBs.roa (hash: nNDCN5SzdqIQPR24IlLa7l1TyfR2hVXqn06sMz/jemo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:ba:8c:ac:5b:5d:e4:9a:d6:eb:7b:e5:20:73:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Validity
Not Before: Oct 19 21:01:11 2025 GMT
Not After : Oct 20 21:01:11 2025 GMT
Subject: CN=151db07962a76c7bc71eef470d3aed357383043e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:21:f5:03:7c:b3:a5:16:a2:97:b3:44:28:7b:
ec:5d:ba:39:f4:62:38:3e:34:7d:e2:35:39:03:0c:
d2:01:f8:a6:33:f1:4e:33:88:62:30:f6:8a:23:e9:
89:6d:d8:f5:90:f4:e3:1a:82:da:08:ad:97:51:42:
30:66:a6:50:58:2e:d5:88:12:c5:ee:4d:8b:56:8e:
43:e9:16:ad:69:a7:e2:7a:7f:1b:d4:78:f3:02:e4:
cd:3b:09:66:7b:29:4d:85:df:d5:b4:48:41:03:04:
d8:b4:2b:fc:4e:76:82:c4:0e:15:1d:68:bc:f1:2b:
04:17:78:0d:75:d6:35:cf:f2:98:0c:3c:44:ad:a3:
b8:b2:25:87:b0:dd:bb:51:dd:47:7a:78:9d:21:2a:
ab:88:2e:b0:e6:64:bd:25:cb:82:36:cd:a0:e2:38:
d7:38:a6:6a:7e:18:2b:42:30:d2:a4:14:86:d8:c4:
a1:b2:bc:05:65:56:9c:01:5d:71:fb:af:2b:2e:a8:
a9:e0:c3:a8:09:dc:78:4a:d3:e5:c9:7b:dc:bc:45:
d3:3e:5a:59:79:6d:26:77:b6:b7:a3:ee:76:ce:d0:
ef:2a:27:f5:99:5b:85:8f:3e:c0:e1:ba:4d:84:dd:
c6:10:4f:e6:02:4c:d2:a1:0b:f0:ba:59:00:8b:5e:
c0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1D:B0:79:62:A7:6C:7B:C7:1E:EF:47:0D:3A:ED:35:73:83:04:3E
X509v3 Authority Key Identifier:
keyid:89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a0:7a:79:a3:72:86:6a:89:99:61:9f:5c:f5:82:db:f5:15:
5b:2d:5c:cf:d5:08:7e:35:17:23:83:68:ca:38:b9:8c:14:47:
0d:27:f2:c9:3f:55:ac:b6:11:fb:fd:7d:3f:cb:21:16:cf:22:
79:b1:9a:d1:5e:e4:5a:ac:d2:21:23:13:ac:bd:d8:c3:a8:10:
ea:7a:29:85:f2:6b:3a:fc:02:ac:55:61:de:3b:e2:0d:a4:9d:
99:d6:1d:b5:eb:8b:6f:66:b0:ff:24:27:03:65:d1:ad:41:f1:
2e:19:aa:e6:48:c5:83:75:b3:d9:38:2b:4d:77:ec:02:71:90:
1c:9b:2a:dd:08:52:fb:0b:6a:3e:97:16:d3:68:0b:c0:c5:d5:
f0:97:2c:e8:db:55:9d:48:89:bc:f0:e1:29:0d:30:d2:7a:3c:
39:2f:6e:0e:e0:92:24:ae:38:ae:c4:1c:e0:40:fe:32:44:51:
22:7e:e4:18:7e:82:64:ba:76:2b:d3:6a:21:04:61:d5:2d:ed:
b3:a4:d7:f8:da:e9:a5:73:93:ed:25:b0:79:cb:30:03:b2:03:
8f:9e:d4:df:ca:43:ff:0c:f5:10:7b:46:b4:c8:c7:26:87:b3:
e2:3c:6a:9f:9e:91:6e:e8:71:6d:27:78:ac:ff:e8:bc:60:38:
d2:8c:47:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+RrqMrFtd5JrW63vlIHMXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZjljMjE2OGQyZDgyZGRmZDhhNzA2MzdkNDQwMThhZjMw
YjFmOTcwHhcNMjUxMDE5MjEwMTExWhcNMjUxMDIwMjEwMTExWjAzMTEwLwYDVQQD
EygxNTFkYjA3OTYyYTc2YzdiYzcxZWVmNDcwZDNhZWQzNTczODMwNDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiH1A3yzpRail7NEKHvsXbo59GI4
PjR94jU5AwzSAfimM/FOM4hiMPaKI+mJbdj1kPTjGoLaCK2XUUIwZqZQWC7ViBLF
7k2LVo5D6Rataafien8b1HjzAuTNOwlmeylNhd/VtEhBAwTYtCv8TnaCxA4VHWi8
8SsEF3gNddY1z/KYDDxEraO4siWHsN27Ud1HenidISqriC6w5mS9JcuCNs2g4jjX
OKZqfhgrQjDSpBSG2MShsrwFZVacAV1x+68rLqip4MOoCdx4StPlyXvcvEXTPlpZ
eW0md7a3o+52ztDvKif1mVuFjz7A4bpNhN3GEE/mAkzSoQvwulkAi17A3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUdsHlip2x7xx7vRw067TVzgwQ+MB8GA1UdIwQY
MBaAFIn5whaNLYLd/YpwY31EAYrzCx+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lMWVhOWItZDUyOS00OGJhLThiYTIt
YmFjYWUwMzBlMzc0LzEvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9lMWVhOWItZDUyOS00OGJhLThiYTItYmFjYWUwMzBlMzc0
LzEvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPqB6eaNy
hmqJmWGfXPWC2/UVWy1cz9UIfjUXI4Noyji5jBRHDSfyyT9VrLYR+/19P8shFs8i
ebGa0V7kWqzSISMTrL3Yw6gQ6nophfJrOvwCrFVh3jviDaSdmdYdteuLb2aw/yQn
A2XRrUHxLhmq5kjFg3Wz2TgrTXfsAnGQHJsq3QhS+wtqPpcW02gLwMXV8Jcs6NtV
nUiJvPDhKQ0w0no8OS9uDuCSJK44rsQc4ED+MkRRIn7kGH6CZLp2K9NqIQRh1S3t
s6TX+NrppXOT7SWwecswA7IDj57U38pD/wz1EHtGtMjHJoez4jxqn56RbuhxbSd4
rP/ovGA40oxHoQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:23:50 2025 by rpki-client