Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
File: IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft (raw, json)
Hash identifier: V8YkAUo8/v8jdZQEAWaXfhBWJWJ8KPCPLVRLT0tFt+s=
Subject key identifier: 1C:32:85:3D:10:8D:14:AE:AD:14:BF:33:85:A6:20:EF:B1:7E:17:B6
Authority key identifier: 21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61
Certificate issuer: /CN=218af26f9a36653f4d996719d4a410fe84af4861
Certificate serial: 0199FCFDA00AC488651282ACC82100C1F964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
Manifest number: 05A7
Signing time: Sun 19 Oct 2025 15:01:43 +0000
Manifest this update: Sun 19 Oct 2025 15:01:43 +0000
Manifest next update: Mon 20 Oct 2025 15:01:43 +0000
Files and hashes: 1: 8aRFc9FMZuB39L9ezbDQe4rTWqI.roa (hash: d0kPdTmIfua7sOVHFgh6TKa6BfDr4mbqEziPITcO1vw=)
2: IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl (hash: xDDsTK27L2c3UqDlzfg/pTUpamPki+1zkuntAHubkzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:a0:0a:c4:88:65:12:82:ac:c8:21:00:c1:f9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218af26f9a36653f4d996719d4a410fe84af4861
Validity
Not Before: Oct 19 15:01:43 2025 GMT
Not After : Oct 20 15:01:43 2025 GMT
Subject: CN=1c32853d108d14aead14bf3385a620efb17e17b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ba:02:75:6d:28:1a:79:4d:da:12:91:bd:f9:
52:43:df:99:6e:01:11:28:cf:d4:40:bb:c0:61:d1:
b5:ab:6a:d7:ac:de:d6:d1:ce:ad:4e:18:6f:81:1f:
35:36:ac:1e:b7:7c:de:95:c1:ad:38:7c:db:ef:a9:
1b:a6:1a:52:34:26:f6:ff:7e:e1:09:63:4e:db:d7:
0f:c7:56:5e:1b:e7:16:2f:64:f4:a1:d9:6b:aa:ac:
23:cc:2c:69:e7:68:0a:61:7c:18:1d:a5:9c:08:a0:
e0:56:b9:c8:b4:48:95:e7:8d:66:66:64:19:54:c0:
1c:d8:17:89:1c:15:e0:5a:8d:ec:16:f1:1e:69:8c:
48:cc:c6:8d:bd:00:d6:39:b4:b0:9f:56:ac:30:0b:
04:ac:bc:bc:6f:13:4e:18:a3:ea:2b:22:c0:91:a8:
56:d0:a1:b7:c7:e2:05:77:ea:dd:c6:e0:e2:d8:a2:
2a:21:a0:de:52:f8:bd:de:40:95:28:98:4a:2f:2e:
a1:59:1c:36:1c:fe:ad:e1:f1:21:43:d3:b4:84:c9:
f5:bc:d2:35:0d:00:72:53:6c:4f:c8:32:e1:bb:d9:
a4:06:f8:9b:29:3b:14:00:45:e1:e9:f9:46:ff:d7:
21:bc:ae:57:6c:c2:01:7a:15:a1:75:d3:87:cd:9e:
df:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:32:85:3D:10:8D:14:AE:AD:14:BF:33:85:A6:20:EF:B1:7E:17:B6
X509v3 Authority Key Identifier:
keyid:21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:5e:1a:d7:cd:25:3f:e2:0d:f1:2e:67:08:6d:01:fd:b9:bd:
a5:7c:27:29:e4:02:ed:a5:e3:5f:a1:3f:e9:9d:41:44:65:4c:
fe:da:25:78:9a:7b:f9:bd:13:3f:ba:8c:b4:ab:06:3d:92:2c:
05:5a:a8:e0:b9:92:a7:d7:64:6e:60:21:0e:cc:45:fe:63:d6:
bf:60:64:a4:39:8e:36:0a:e6:a7:9a:0f:a4:f8:a9:d5:04:60:
18:47:2c:8c:bc:45:46:1e:d1:d8:95:05:6f:01:8b:98:25:6d:
01:70:1a:18:f0:3e:23:8c:93:15:b4:62:1b:f8:7a:d2:23:3a:
b8:45:6d:ea:06:70:cc:9f:8f:d5:ed:09:98:89:62:dd:e5:6f:
22:c7:e0:e4:ed:54:86:b0:33:ff:ec:e5:69:4e:99:64:d8:4d:
88:38:c6:67:bc:86:38:ce:5a:4a:2c:1e:d1:a6:c4:a3:e7:8c:
7d:e1:03:57:3d:5e:fe:32:d7:9c:05:28:a7:b2:35:14:a2:49:
5a:c9:e1:2c:46:83:3a:f9:69:0a:70:ef:83:49:0a:d0:57:df:
83:d0:35:af:7a:8c:0e:30:69:d6:27:bb:6b:9a:b8:ee:e6:3e:
66:ce:d3:8a:89:80:25:d8:f8:98:79:b4:58:f1:bf:15:bf:8b:
f6:a7:21:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/aAKxIhlEoKsyCEAwflkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxOGFmMjZmOWEzNjY1M2Y0ZDk5NjcxOWQ0YTQxMGZlODRh
ZjQ4NjEwHhcNMjUxMDE5MTUwMTQzWhcNMjUxMDIwMTUwMTQzWjAzMTEwLwYDVQQD
EygxYzMyODUzZDEwOGQxNGFlYWQxNGJmMzM4NWE2MjBlZmIxN2UxN2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7oCdW0oGnlN2hKRvflSQ9+ZbgER
KM/UQLvAYdG1q2rXrN7W0c6tThhvgR81Nqwet3zelcGtOHzb76kbphpSNCb2/37h
CWNO29cPx1ZeG+cWL2T0odlrqqwjzCxp52gKYXwYHaWcCKDgVrnItEiV541mZmQZ
VMAc2BeJHBXgWo3sFvEeaYxIzMaNvQDWObSwn1asMAsErLy8bxNOGKPqKyLAkahW
0KG3x+IFd+rdxuDi2KIqIaDeUvi93kCVKJhKLy6hWRw2HP6t4fEhQ9O0hMn1vNI1
DQByU2xPyDLhu9mkBvibKTsUAEXh6flG/9chvK5XbMIBehWhddOHzZ7fywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwyhT0QjRSurRS/M4WmIO+xfhe2MB8GA1UdIwQY
MBaAFCGK8m+aNmU/TZlnGdSkEP6Er0hhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlyeWI1bzJaVDlObVdjWjFLUVFfb1N2U0dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zZTQxZDUtYzdmMS00NjM3LWI5MzAt
MTg0NTg2NjAyODg3LzEvSVlyeWI1bzJaVDlObVdjWjFLUVFfb1N2U0dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8zZTQxZDUtYzdmMS00NjM3LWI5MzAtMTg0NTg2NjAyODg3
LzEvSVlyeWI1bzJaVDlObVdjWjFLUVFfb1N2U0dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOV4a180l
P+IN8S5nCG0B/bm9pXwnKeQC7aXjX6E/6Z1BRGVM/toleJp7+b0TP7qMtKsGPZIs
BVqo4LmSp9dkbmAhDsxF/mPWv2BkpDmONgrmp5oPpPip1QRgGEcsjLxFRh7R2JUF
bwGLmCVtAXAaGPA+I4yTFbRiG/h60iM6uEVt6gZwzJ+P1e0JmIli3eVvIsfg5O1U
hrAz/+zlaU6ZZNhNiDjGZ7yGOM5aSiwe0abEo+eMfeEDVz1e/jLXnAUop7I1FKJJ
WsnhLEaDOvlpCnDvg0kK0Fffg9A1r3qMDjBp1ie7a5q47uY+Zs7TiomAJdj4mHm0
WPG/Fb+L9qcheQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:32 2025 by rpki-client