Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
File: IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft (raw, json)
Hash identifier: onrVJRhpmNKMrelJ3xr/+LYc2K56lIUbJf3fvHkCe+A=
Subject key identifier: 0F:AB:80:AA:7A:B2:56:BB:6C:39:73:AF:C8:C6:62:71:5F:FD:DC:D2
Authority key identifier: 20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
Certificate issuer: /CN=20feef391f16300157bb78b2eaea06d61c20c945
Certificate serial: 0199FBEB8BB9E43BCE420EE64B3334CD8BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
Manifest number: 05F5
Signing time: Sun 19 Oct 2025 10:02:21 +0000
Manifest this update: Sun 19 Oct 2025 10:02:21 +0000
Manifest next update: Mon 20 Oct 2025 10:02:21 +0000
Files and hashes: 1: IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl (hash: 8mH+Q9hBgKat4c/NDaMEmVpJmFfen7fcx8pICwo0I2U=)
2: bMgRIHfe9czZPsPUKpcmfdHESeA.roa (hash: xt+uVWCgpmniCKO9lfh4KPFwtigjOiclhRJVmau9h3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:8b:b9:e4:3b:ce:42:0e:e6:4b:33:34:cd:8b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20feef391f16300157bb78b2eaea06d61c20c945
Validity
Not Before: Oct 19 10:02:21 2025 GMT
Not After : Oct 20 10:02:21 2025 GMT
Subject: CN=0fab80aa7ab256bb6c3973afc8c662715ffddcd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c4:e2:61:99:6d:a1:e4:f4:8a:fc:37:97:77:
74:56:c8:ff:0c:01:88:c7:a0:3a:6e:90:b6:97:27:
03:1b:08:67:9d:c7:27:ce:2e:3c:57:f8:53:02:bd:
4c:8d:be:06:ab:70:f0:f4:f6:fd:10:61:61:9c:ae:
57:67:46:61:45:a9:6a:78:7f:73:fb:55:c1:c2:d5:
cd:71:f2:2e:68:b9:f5:9a:43:2b:47:0a:6a:01:ce:
27:db:86:75:b2:4d:f1:ce:38:17:dd:99:01:67:ed:
06:32:76:fc:6d:cb:e9:22:83:00:a7:71:97:dc:0f:
6e:4d:36:30:de:0b:41:96:74:b9:d9:c6:15:50:bc:
cc:8e:87:56:12:ad:60:da:38:d0:7c:82:42:5a:6c:
09:0e:21:0e:1a:ee:bf:d7:0c:37:67:b0:93:b9:03:
89:ca:30:9a:55:6c:97:8d:19:ba:5c:62:6e:51:a8:
c6:e5:4b:49:bb:63:fe:ad:df:13:a9:67:f6:8c:9e:
46:95:d1:42:cb:f8:1f:8b:63:9c:a9:16:3b:80:90:
71:e6:4d:cb:8f:27:17:02:0b:40:61:05:92:65:63:
f9:5e:b3:25:c0:16:45:90:a3:b8:44:a2:96:8f:c7:
21:b1:39:a5:35:0f:05:19:ba:de:4b:db:a7:e6:31:
f6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AB:80:AA:7A:B2:56:BB:6C:39:73:AF:C8:C6:62:71:5F:FD:DC:D2
X509v3 Authority Key Identifier:
keyid:20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:2d:1d:b7:5b:e8:54:d3:6e:c8:01:74:52:31:4e:c5:d6:5f:
c8:d3:06:22:8c:58:3b:dd:61:7c:b5:43:d8:b9:18:91:d6:e8:
96:a5:04:1d:64:3f:47:ca:13:7e:b0:e6:c5:48:88:c6:e5:7a:
3f:27:e5:31:f5:1e:4e:3a:59:1e:17:85:43:ed:88:ff:ee:65:
d1:c3:a4:64:99:35:46:a3:3d:56:fe:89:9f:fd:70:13:dc:70:
43:8c:56:a4:06:53:f5:41:52:dc:ab:22:b5:cf:89:10:7f:d4:
32:66:b1:fa:2a:11:cd:ef:55:a0:87:46:a6:9f:f1:11:b6:90:
96:d3:bf:e2:39:87:a9:5a:1d:ce:3c:80:bd:c5:11:78:41:94:
35:ed:71:1b:6b:c5:15:b8:7f:dc:c4:28:26:8b:8b:b0:c6:52:
69:eb:9b:1f:65:7e:59:ea:34:d7:7e:03:21:bf:ba:d3:23:bc:
89:67:47:e4:d6:0e:2d:51:43:e7:6c:53:30:85:e2:5e:84:03:
36:1f:a0:82:2f:1a:52:8f:bd:28:21:ca:69:49:1b:7f:f4:db:
b7:96:d1:68:49:dc:ec:dd:b1:a8:97:7c:73:97:e5:99:41:53:
58:62:8a:b8:08:bd:d8:db:0e:ce:c5:32:ea:a2:5c:bb:76:12:
e8:6a:7c:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn764u55DvOQg7mSzM0zYvnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZmVlZjM5MWYxNjMwMDE1N2JiNzhiMmVhZWEwNmQ2MWMy
MGM5NDUwHhcNMjUxMDE5MTAwMjIxWhcNMjUxMDIwMTAwMjIxWjAzMTEwLwYDVQQD
EygwZmFiODBhYTdhYjI1NmJiNmMzOTczYWZjOGM2NjI3MTVmZmRkY2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8TiYZltoeT0ivw3l3d0Vsj/DAGI
x6A6bpC2lycDGwhnnccnzi48V/hTAr1Mjb4Gq3Dw9Pb9EGFhnK5XZ0ZhRalqeH9z
+1XBwtXNcfIuaLn1mkMrRwpqAc4n24Z1sk3xzjgX3ZkBZ+0GMnb8bcvpIoMAp3GX
3A9uTTYw3gtBlnS52cYVULzMjodWEq1g2jjQfIJCWmwJDiEOGu6/1ww3Z7CTuQOJ
yjCaVWyXjRm6XGJuUajG5UtJu2P+rd8TqWf2jJ5GldFCy/gfi2OcqRY7gJBx5k3L
jycXAgtAYQWSZWP5XrMlwBZFkKO4RKKWj8chsTmlNQ8FGbreS9un5jH29QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+rgKp6sla7bDlzr8jGYnFf/dzSMB8GA1UdIwQY
MBaAFCD+7zkfFjABV7t4surqBtYcIMlFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVA3dk9SOFdNQUZYdTNpeTZ1b0cxaHdneVVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82NDcyMmItMjk5NS00MGRlLThiODct
MjI2YjhkNGE1ZjYwLzEvSVA3dk9SOFdNQUZYdTNpeTZ1b0cxaHdneVVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC82NDcyMmItMjk5NS00MGRlLThiODctMjI2YjhkNGE1ZjYw
LzEvSVA3dk9SOFdNQUZYdTNpeTZ1b0cxaHdneVVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOy0dt1vo
VNNuyAF0UjFOxdZfyNMGIoxYO91hfLVD2LkYkdbolqUEHWQ/R8oTfrDmxUiIxuV6
PyflMfUeTjpZHheFQ+2I/+5l0cOkZJk1RqM9Vv6Jn/1wE9xwQ4xWpAZT9UFS3Ksi
tc+JEH/UMmax+ioRze9VoIdGpp/xEbaQltO/4jmHqVodzjyAvcUReEGUNe1xG2vF
Fbh/3MQoJouLsMZSaeubH2V+Weo0134DIb+60yO8iWdH5NYOLVFD52xTMIXiXoQD
Nh+ggi8aUo+9KCHKaUkbf/Tbt5bRaEnc7N2xqJd8c5flmUFTWGKKuAi92NsOzsUy
6qJcu3YS6Gp8NA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:35 2025 by rpki-client