Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
File: iVVHgNslskPAotNhl5sTCn8Txg0.mft (raw, json)
Hash identifier: CLoyz9LsHvvlnf80eBsVKcid4SaFbwF/K3xml3lq+Kw=
Subject key identifier: BC:2E:08:A1:F9:9C:33:96:D9:B8:B7:B9:8C:2C:29:15:8C:E2:37:2D
Authority key identifier: 89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
Certificate issuer: /CN=89554780db25b243c0a2d361979b130a7f13c60d
Certificate serial: 0199FC8F557043D114E06D04DF0F9096BA1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
Manifest number: 0C0B
Signing time: Sun 19 Oct 2025 13:01:15 +0000
Manifest this update: Sun 19 Oct 2025 13:01:15 +0000
Manifest next update: Mon 20 Oct 2025 13:01:15 +0000
Files and hashes: 1: Io8_rALEkRmJyvwQSYZoU_nTQg0.roa (hash: IdvBLL1znSmthNlumpub/fXZwL7C6UNAlVvYWPg9Tzc=)
2: fp-LIMQ80k5YBVtTaX91n-J89eo.roa (hash: ItqEQhJ82EwpqjGgmH+0CXCKGMVgFNbNle1pM5dmqlE=)
3: iVVHgNslskPAotNhl5sTCn8Txg0.crl (hash: p5z5pa8y5AkNmLSRi6vWzLYxa9gEJkzLxL4EDd6evKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:55:70:43:d1:14:e0:6d:04:df:0f:90:96:ba:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89554780db25b243c0a2d361979b130a7f13c60d
Validity
Not Before: Oct 19 13:01:15 2025 GMT
Not After : Oct 20 13:01:15 2025 GMT
Subject: CN=bc2e08a1f99c3396d9b8b7b98c2c29158ce2372d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7f:08:c1:ac:63:e6:e4:a3:82:c3:11:2b:05:
75:fc:48:7f:d7:1f:1e:04:0a:7b:5e:03:af:6a:4a:
47:03:7c:cb:45:c2:db:37:d0:7c:0d:7f:f5:11:1e:
f0:97:6a:e2:ef:2c:b2:0f:81:09:3f:82:bc:5d:9d:
c0:e9:50:63:43:10:df:6e:00:2d:13:4a:3d:84:95:
0b:3e:89:f9:f4:53:ed:85:eb:23:c9:bb:ee:04:a5:
ec:67:4d:20:43:ea:4d:82:ae:05:ea:53:f8:b0:3e:
e5:80:ec:44:7e:cf:fd:91:05:7e:47:e4:0d:b2:c8:
f8:8d:3c:15:56:7e:aa:23:fa:b1:8f:43:ca:b9:4e:
bc:44:7c:39:84:e2:1a:e2:04:54:48:e2:2a:09:9e:
50:5c:3a:6f:9a:73:22:6c:d6:77:ff:43:58:b6:6d:
0f:98:c1:a1:57:08:f8:9c:d5:72:e6:2b:cf:d1:0b:
35:e7:02:7e:32:7c:ec:8c:21:f8:70:9c:0a:b2:c3:
71:9c:85:57:60:05:be:72:dd:81:58:db:71:f6:d1:
14:b1:ff:59:20:af:53:5f:f8:50:dd:39:b5:69:d0:
62:66:b7:44:47:aa:e9:8e:dd:33:72:0a:5a:21:13:
88:3c:bf:06:da:c7:59:38:5c:88:ff:10:d0:e5:fb:
93:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2E:08:A1:F9:9C:33:96:D9:B8:B7:B9:8C:2C:29:15:8C:E2:37:2D
X509v3 Authority Key Identifier:
keyid:89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:96:eb:55:67:3e:4a:f6:12:a8:a0:ed:1d:06:8b:9b:f8:d7:
13:01:4a:48:7f:ad:57:fd:c0:44:1f:33:a9:6c:8d:7f:89:35:
da:37:f8:80:0e:c0:58:c2:63:79:2b:bc:6f:5a:b1:4f:00:98:
84:e3:f1:b3:03:74:4d:fb:a5:21:ff:04:48:21:a4:09:bb:75:
2e:22:c2:90:e4:5f:cf:60:53:8c:4f:15:1f:5b:30:e7:35:0d:
3f:8a:87:9d:c3:a6:35:a9:e9:e9:b6:91:3c:ce:41:dc:a4:29:
58:2b:ef:63:2d:86:c8:34:02:b5:3c:5a:18:af:45:0e:03:a3:
a6:49:22:ba:26:6b:2b:b8:47:46:64:08:7c:37:da:21:81:00:
0c:7c:92:1b:98:7e:3d:81:b3:72:5a:47:ac:cc:a6:7a:4f:74:
34:f2:b3:18:0b:3a:79:04:76:58:16:0e:c9:71:7f:69:79:af:
46:10:f5:96:81:f1:43:af:14:47:26:3b:4c:9b:a0:94:66:1e:
8d:5b:8e:6d:9e:99:8d:29:e2:70:ec:32:ac:06:37:a7:61:de:
b9:9d:1d:dc:12:6f:4e:63:ea:30:4b:a8:f2:06:8a:11:14:8b:
88:d4:f8:f4:83:f5:2f:20:a0:43:0e:12:24:fa:69:fb:20:5d:
43:bf:6b:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j1VwQ9EU4G0E3w+QlrocMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NTU0NzgwZGIyNWIyNDNjMGEyZDM2MTk3OWIxMzBhN2Yx
M2M2MGQwHhcNMjUxMDE5MTMwMTE1WhcNMjUxMDIwMTMwMTE1WjAzMTEwLwYDVQQD
EyhiYzJlMDhhMWY5OWMzMzk2ZDliOGI3Yjk4YzJjMjkxNThjZTIzNzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp38Iwaxj5uSjgsMRKwV1/Eh/1x8e
BAp7XgOvakpHA3zLRcLbN9B8DX/1ER7wl2ri7yyyD4EJP4K8XZ3A6VBjQxDfbgAt
E0o9hJULPon59FPthesjybvuBKXsZ00gQ+pNgq4F6lP4sD7lgOxEfs/9kQV+R+QN
ssj4jTwVVn6qI/qxj0PKuU68RHw5hOIa4gRUSOIqCZ5QXDpvmnMibNZ3/0NYtm0P
mMGhVwj4nNVy5ivP0Qs15wJ+MnzsjCH4cJwKssNxnIVXYAW+ct2BWNtx9tEUsf9Z
IK9TX/hQ3Tm1adBiZrdER6rpjt0zcgpaIROIPL8G2sdZOFyI/xDQ5fuTYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwuCKH5nDOW2bi3uYwsKRWM4jctMB8GA1UdIwQY
MBaAFIlVR4DbJbJDwKLTYZebEwp/E8YNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVZWSGdOc2xza1BBb3ROaGw1c1RDbjhUeGcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zZTIwNzctYmMxMC00NjIxLWFiMGIt
ZGJhNGM5Yjg3MDZiLzEvaVZWSGdOc2xza1BBb3ROaGw1c1RDbjhUeGcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8zZTIwNzctYmMxMC00NjIxLWFiMGItZGJhNGM5Yjg3MDZi
LzEvaVZWSGdOc2xza1BBb3ROaGw1c1RDbjhUeGcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATpbrVWc+
SvYSqKDtHQaLm/jXEwFKSH+tV/3ARB8zqWyNf4k12jf4gA7AWMJjeSu8b1qxTwCY
hOPxswN0TfulIf8ESCGkCbt1LiLCkORfz2BTjE8VH1sw5zUNP4qHncOmNanp6baR
PM5B3KQpWCvvYy2GyDQCtTxaGK9FDgOjpkkiuiZrK7hHRmQIfDfaIYEADHySG5h+
PYGzclpHrMymek90NPKzGAs6eQR2WBYOyXF/aXmvRhD1loHxQ68URyY7TJuglGYe
jVuObZ6ZjSnicOwyrAY3p2HeuZ0d3BJvTmPqMEuo8gaKERSLiNT49IP1LyCgQw4S
JPpp+yBdQ79rEQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:50 2025 by rpki-client