Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft
File: irCobN7x1oVdGd50F1Nzzcga78w.mft (raw, json)
Hash identifier: 1+eTcOyxzzrV6YaJ3gwxeqblh8yz6XUm4CxAz4lJmpk=
Subject key identifier: 5B:7D:C8:C1:D8:C2:37:C2:8E:E0:85:93:F7:AD:76:C2:73:69:0D:62
Authority key identifier: 8A:B0:A8:6C:DE:F1:D6:85:5D:19:DE:74:17:53:73:CD:C8:1A:EF:CC
Certificate issuer: /CN=8ab0a86cdef1d6855d19de74175373cdc81aefcc
Certificate serial: 0199FDD90AD018880DFCF1DE0DC450B3985B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irCobN7x1oVdGd50F1Nzzcga78w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft
Manifest number: 0198
Signing time: Sun 19 Oct 2025 19:01:23 +0000
Manifest this update: Sun 19 Oct 2025 19:01:23 +0000
Manifest next update: Mon 20 Oct 2025 19:01:23 +0000
Files and hashes: 1: iDD0dIi8FZu6HOhyS7tjvaUtgQE.roa (hash: 0JHKcL5Vnxkq7EPVZmPbz9exzTMRAeW5CIg2FGWWjPE=)
2: irCobN7x1oVdGd50F1Nzzcga78w.crl (hash: VtL55PSC85mdBsVlJn+Ddwqeup6rXGwsMEuxH+EZMZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft
rsync://rpki.ripe.net/repository/DEFAULT/irCobN7x1oVdGd50F1Nzzcga78w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:0a:d0:18:88:0d:fc:f1:de:0d:c4:50:b3:98:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab0a86cdef1d6855d19de74175373cdc81aefcc
Validity
Not Before: Oct 19 19:01:23 2025 GMT
Not After : Oct 20 19:01:23 2025 GMT
Subject: CN=5b7dc8c1d8c237c28ee08593f7ad76c273690d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b4:06:84:89:74:15:67:5b:19:f6:e6:11:f6:
18:87:94:19:f4:ad:12:15:a7:62:34:a3:a3:c8:38:
37:dd:d2:90:83:0f:a1:3b:a8:b4:32:45:6e:e2:55:
8f:ba:7f:6b:bc:53:1f:60:0a:dd:12:93:4a:3e:b0:
1a:48:0d:dc:c4:03:52:ec:4b:f0:f6:85:c6:76:5b:
70:58:21:f7:8a:a8:c9:91:76:83:bd:ce:2d:fb:0a:
34:4b:15:03:f9:73:b9:63:93:88:91:75:49:26:5e:
b3:4a:51:26:85:dc:b9:c8:a2:5d:fb:f4:c9:41:1c:
1a:45:b4:77:32:8d:f3:97:56:75:59:57:ba:6b:ff:
1a:f0:d6:5f:0e:37:4a:1a:c7:12:98:70:8f:4a:91:
48:d8:55:92:33:8f:23:2d:64:9c:95:9e:fc:6d:9d:
a0:cc:9c:d2:fb:35:0b:db:4f:1b:a3:1e:87:8a:85:
d9:5a:26:61:ce:73:c2:a1:c9:4f:a1:40:7d:0a:f9:
bc:c5:49:28:72:f9:16:4f:8f:bb:6d:1d:8f:4e:4b:
f2:86:67:80:69:d4:ab:5b:23:ac:34:9e:6f:7c:cb:
8f:4f:d9:8d:28:fb:d3:dd:de:85:0a:b7:cc:4f:23:
8a:f7:96:f6:71:53:32:53:5e:43:a1:62:1c:3b:06:
6d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7D:C8:C1:D8:C2:37:C2:8E:E0:85:93:F7:AD:76:C2:73:69:0D:62
X509v3 Authority Key Identifier:
keyid:8A:B0:A8:6C:DE:F1:D6:85:5D:19:DE:74:17:53:73:CD:C8:1A:EF:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irCobN7x1oVdGd50F1Nzzcga78w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:6e:6f:aa:52:3c:d3:e7:ec:bc:d9:03:ad:8b:23:91:0f:7b:
66:f0:9d:b7:10:ab:f4:1f:6c:0b:16:9b:ab:36:3f:d9:f4:e9:
df:ca:2f:b8:c7:ad:cc:d7:27:21:09:ab:a9:99:e0:ad:ed:f2:
dd:b5:3b:86:5f:a5:59:a6:66:ae:ad:00:37:c3:f2:9a:e6:66:
83:a5:7c:f4:2d:63:c9:15:f4:85:3d:86:7a:68:21:49:98:40:
a8:00:48:fb:34:ba:62:4e:2d:c4:f1:c2:3a:0b:ab:14:cd:4c:
22:ab:77:3a:ee:71:42:74:a3:1c:46:33:5f:73:15:04:23:4e:
2f:9c:67:5d:8f:d1:8f:f0:eb:fe:2d:b8:97:04:7a:3c:4e:33:
da:bd:03:83:69:cc:0b:2f:b7:cd:3e:ef:45:0f:31:50:00:2c:
94:b3:b3:11:18:14:1c:24:5c:c8:1b:ce:a2:30:de:2a:74:a2:
43:85:b8:e6:a0:29:f5:d6:16:2b:e0:c8:b2:20:b8:76:ae:46:
3e:57:ab:21:6c:ad:11:64:d0:92:5e:f9:24:e1:e5:6b:fb:42:
d9:7d:fb:78:30:23:72:0b:d7:fa:6e:13:2b:20:d0:c7:95:3b:
33:80:76:79:ec:50:f0:91:37:09:a0:2c:67:32:3e:a4:b0:ed:
6b:23:2c:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92QrQGIgN/PHeDcRQs5hbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYjBhODZjZGVmMWQ2ODU1ZDE5ZGU3NDE3NTM3M2NkYzgx
YWVmY2MwHhcNMjUxMDE5MTkwMTIzWhcNMjUxMDIwMTkwMTIzWjAzMTEwLwYDVQQD
Eyg1YjdkYzhjMWQ4YzIzN2MyOGVlMDg1OTNmN2FkNzZjMjczNjkwZDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbQGhIl0FWdbGfbmEfYYh5QZ9K0S
FadiNKOjyDg33dKQgw+hO6i0MkVu4lWPun9rvFMfYArdEpNKPrAaSA3cxANS7Evw
9oXGdltwWCH3iqjJkXaDvc4t+wo0SxUD+XO5Y5OIkXVJJl6zSlEmhdy5yKJd+/TJ
QRwaRbR3Mo3zl1Z1WVe6a/8a8NZfDjdKGscSmHCPSpFI2FWSM48jLWSclZ78bZ2g
zJzS+zUL208box6HioXZWiZhznPCoclPoUB9Cvm8xUkocvkWT4+7bR2PTkvyhmeA
adSrWyOsNJ5vfMuPT9mNKPvT3d6FCrfMTyOK95b2cVMyU15DoWIcOwZtAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFt9yMHYwjfCjuCFk/etdsJzaQ1iMB8GA1UdIwQY
MBaAFIqwqGze8daFXRnedBdTc83IGu/MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXJDb2JON3gxb1ZkR2Q1MEYxTnp6Y2dhNzh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mODIzN2MtZTA0YS00ZGRkLThjZWIt
ZDBmMjQ5YmMzZmVkLzEvaXJDb2JON3gxb1ZkR2Q1MEYxTnp6Y2dhNzh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9mODIzN2MtZTA0YS00ZGRkLThjZWItZDBmMjQ5YmMzZmVk
LzEvaXJDb2JON3gxb1ZkR2Q1MEYxTnp6Y2dhNzh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAam5vqlI8
0+fsvNkDrYsjkQ97ZvCdtxCr9B9sCxabqzY/2fTp38ovuMetzNcnIQmrqZngre3y
3bU7hl+lWaZmrq0AN8PymuZmg6V89C1jyRX0hT2GemghSZhAqABI+zS6Yk4txPHC
OgurFM1MIqt3Ou5xQnSjHEYzX3MVBCNOL5xnXY/Rj/Dr/i24lwR6PE4z2r0Dg2nM
Cy+3zT7vRQ8xUAAslLOzERgUHCRcyBvOojDeKnSiQ4W45qAp9dYWK+DIsiC4dq5G
PlerIWytEWTQkl75JOHla/tC2X37eDAjcgvX+m4TKyDQx5U7M4B2eexQ8JE3CaAs
ZzI+pLDtayMs8g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:31:25 2025 by rpki-client