Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
File: ibMy1XzhT6sevXRoF91wEGLHSog.mft (raw, json)
Hash identifier: hyrT3mSsD6bsIBs7RfmPH4fYot1MA5TMLbSjRS7lkc0=
Subject key identifier: 7F:D9:AA:14:36:A1:60:99:03:FD:E0:58:C4:96:15:C9:70:E2:A4:A9
Authority key identifier: 89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
Certificate issuer: /CN=89b332d57ce14fab1ebd746817dd701062c74a88
Certificate serial: 0199FC8F90FF0B01EFF4952ACA72E5CDC6F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
Manifest number: 16EC
Signing time: Sun 19 Oct 2025 13:01:31 +0000
Manifest this update: Sun 19 Oct 2025 13:01:31 +0000
Manifest next update: Mon 20 Oct 2025 13:01:31 +0000
Files and hashes: 1: YfIFhU0ONooUeM5LYDIwujefT70.roa (hash: FzOwlF2eZufoM+/Vg+xA3fNm2T39ptzXccEUItomPVo=)
2: gPT7sW4G2ZN9UNmphmg_hk0jbRw.roa (hash: PHxlHQzqJqhF3hMVVWjePq2Bjc4OfaYNDTan7+Vo8UQ=)
3: ibMy1XzhT6sevXRoF91wEGLHSog.crl (hash: zY5ntHcRmgwViZd5y9gVQ+irJp1N98EOwUzvwjWUuZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:90:ff:0b:01:ef:f4:95:2a:ca:72:e5:cd:c6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b332d57ce14fab1ebd746817dd701062c74a88
Validity
Not Before: Oct 19 13:01:31 2025 GMT
Not After : Oct 20 13:01:31 2025 GMT
Subject: CN=7fd9aa1436a1609903fde058c49615c970e2a4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:13:4e:e1:81:cd:41:8a:93:06:d0:fc:3a:02:
ec:c9:8a:88:60:1e:b0:10:2d:d4:c1:86:25:a3:98:
10:0a:35:51:02:60:2e:f0:9c:91:f1:bd:86:1f:2c:
2e:17:b6:32:51:da:c4:c6:55:e7:f0:2e:7b:a8:ae:
b5:36:ee:b0:f7:74:93:3a:16:ad:9d:9e:41:fd:fb:
42:d0:f5:2f:fc:9e:e5:03:6c:e1:49:a8:c9:40:51:
57:84:a0:17:a4:6e:a7:5d:e7:46:67:03:5a:32:0f:
ee:77:f8:31:24:77:e4:e3:0b:02:98:6e:23:06:c3:
bf:66:f0:f8:b6:62:6f:40:3b:db:01:92:98:8c:da:
a4:e4:85:8e:a3:cd:fe:43:d8:b3:ec:11:ad:67:26:
f4:a9:a1:e6:b1:4b:74:aa:c5:d1:cc:7d:d6:d5:f6:
dc:f2:cd:3c:4f:74:ea:a3:be:9a:f4:6f:06:14:14:
93:d9:3f:44:45:04:b4:1a:68:bf:48:56:7a:87:e6:
df:d1:83:42:02:17:cc:47:74:48:51:3e:d0:fc:9e:
6c:14:99:26:28:ff:4c:2c:21:19:40:48:f6:2f:9f:
5b:e3:96:bb:5d:3f:be:cd:39:44:5e:57:94:3a:c6:
d9:24:63:85:17:83:3a:67:d9:27:5c:e3:dc:ad:b3:
b5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D9:AA:14:36:A1:60:99:03:FD:E0:58:C4:96:15:C9:70:E2:A4:A9
X509v3 Authority Key Identifier:
keyid:89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:7b:8c:1e:0f:a8:a7:e0:ba:ce:1c:c2:dd:be:ea:4b:f9:c1:
3c:a2:4f:6b:6b:ac:b2:f0:e2:08:15:03:0c:61:a9:93:98:9c:
46:25:96:f5:14:c0:ae:44:7b:e3:e4:01:9f:90:a9:59:12:1b:
e8:82:ac:f6:77:ad:62:5f:1b:69:13:37:8d:2a:6c:fa:f3:4d:
f8:c2:9c:20:e5:ce:f2:33:0d:8d:85:66:7b:75:7b:fe:1a:7b:
bf:03:87:e2:95:31:ac:eb:76:4e:88:39:d2:0f:8c:e2:7c:a5:
7b:5f:29:6a:03:48:bb:95:04:0b:8a:4f:53:23:0a:7e:21:53:
14:27:84:5a:19:3f:dd:6e:ec:a5:2c:27:e5:c8:e9:5a:ca:64:
f9:44:fe:6e:d7:b5:32:70:fc:ad:29:fd:88:1c:2e:7f:9f:42:
be:ff:20:8a:d4:d4:2a:da:51:52:2c:56:00:0f:71:bc:d9:51:
3a:21:49:91:f0:4b:09:72:d7:1e:d0:42:95:48:5c:9b:41:45:
f1:b4:cc:89:4e:e5:f9:31:bd:d7:06:b0:d7:65:16:08:53:fe:
a2:77:ca:b3:bc:56:d5:7c:b1:2f:ee:de:64:9c:cd:b8:3c:9c:
7e:91:c3:e5:03:5f:b8:17:4e:e5:c4:42:33:4d:99:8c:c6:ef:
69:63:63:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j5D/CwHv9JUqynLlzcbzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YjMzMmQ1N2NlMTRmYWIxZWJkNzQ2ODE3ZGQ3MDEwNjJj
NzRhODgwHhcNMjUxMDE5MTMwMTMxWhcNMjUxMDIwMTMwMTMxWjAzMTEwLwYDVQQD
Eyg3ZmQ5YWExNDM2YTE2MDk5MDNmZGUwNThjNDk2MTVjOTcwZTJhNGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BNO4YHNQYqTBtD8OgLsyYqIYB6w
EC3UwYYlo5gQCjVRAmAu8JyR8b2GHywuF7YyUdrExlXn8C57qK61Nu6w93STOhat
nZ5B/ftC0PUv/J7lA2zhSajJQFFXhKAXpG6nXedGZwNaMg/ud/gxJHfk4wsCmG4j
BsO/ZvD4tmJvQDvbAZKYjNqk5IWOo83+Q9iz7BGtZyb0qaHmsUt0qsXRzH3W1fbc
8s08T3Tqo76a9G8GFBST2T9ERQS0Gmi/SFZ6h+bf0YNCAhfMR3RIUT7Q/J5sFJkm
KP9MLCEZQEj2L59b45a7XT++zTlEXleUOsbZJGOFF4M6Z9knXOPcrbO1eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/ZqhQ2oWCZA/3gWMSWFclw4qSpMB8GA1UdIwQY
MBaAFImzMtV84U+rHr10aBfdcBBix0qIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWJNeTFYemhUNnNldlhSb0Y5MXdFR0xIU29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84MTcxOWQtNDY3Yy00YWY3LWE4MjQt
NDZhMGRmNzc0ZmUxLzEvaWJNeTFYemhUNnNldlhSb0Y5MXdFR0xIU29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84MTcxOWQtNDY3Yy00YWY3LWE4MjQtNDZhMGRmNzc0ZmUx
LzEvaWJNeTFYemhUNnNldlhSb0Y5MXdFR0xIU29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3uMHg+o
p+C6zhzC3b7qS/nBPKJPa2ussvDiCBUDDGGpk5icRiWW9RTArkR74+QBn5CpWRIb
6IKs9netYl8baRM3jSps+vNN+MKcIOXO8jMNjYVme3V7/hp7vwOH4pUxrOt2Tog5
0g+M4nyle18pagNIu5UEC4pPUyMKfiFTFCeEWhk/3W7spSwn5cjpWspk+UT+bte1
MnD8rSn9iBwuf59Cvv8gitTUKtpRUixWAA9xvNlROiFJkfBLCXLXHtBClUhcm0FF
8bTMiU7l+TG91waw12UWCFP+onfKs7xW1XyxL+7eZJzNuDycfpHD5QNfuBdO5cRC
M02ZjMbvaWNjfg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:11:30 2025 by rpki-client