Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
File: IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft (raw, json)
Hash identifier: LgjbXjPomPraHKRcFW8qKIuRGMCMaKjEyC2mwR9exlw=
Subject key identifier: C9:D0:B4:8F:A0:47:9E:57:23:34:89:36:B8:DD:63:4A:D4:5C:72:54
Authority key identifier: 20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45
Certificate issuer: /CN=2091a77f7c424e9127398473bfa3a2b9727ebb45
Certificate serial: 0199FEEC1B0EFC921C8B78F44E3BE5A638B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
Manifest number: 0A04
Signing time: Mon 20 Oct 2025 00:01:50 +0000
Manifest this update: Mon 20 Oct 2025 00:01:50 +0000
Manifest next update: Tue 21 Oct 2025 00:01:50 +0000
Files and hashes: 1: GE_VINn07eeSJYTvZIuo88WEV3U.roa (hash: 7RURCigC0zQY7NED6IrTycMVsCozhn/RUtlNFgdIpNw=)
2: IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl (hash: Jxqfjic+wuKUEJ0i+Z6QN7LvnHxso1QwH/EVZttuspw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:ec:1b:0e:fc:92:1c:8b:78:f4:4e:3b:e5:a6:38:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2091a77f7c424e9127398473bfa3a2b9727ebb45
Validity
Not Before: Oct 20 00:01:50 2025 GMT
Not After : Oct 21 00:01:50 2025 GMT
Subject: CN=c9d0b48fa0479e5723348936b8dd634ad45c7254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:43:ec:90:c3:0b:9f:ae:9e:87:5a:b1:c8:ba:
74:4f:dd:b3:85:5b:91:f7:3d:34:5d:5e:d1:50:3f:
27:5c:e4:11:71:cc:c4:ef:dc:12:9f:1d:fb:f6:85:
78:34:47:83:54:73:bf:e7:58:d7:a5:fd:82:73:dd:
08:3c:2a:51:e0:e1:8a:d5:68:f0:d2:bb:e8:a3:72:
23:ec:91:c2:74:3d:70:e1:58:f7:8c:1e:d8:87:10:
3b:c4:e3:e7:02:96:35:6a:e6:b9:45:0c:c5:23:61:
23:68:fb:a8:fb:82:45:d0:aa:ca:bc:9b:1f:09:2a:
a0:e3:10:0a:97:7f:9c:74:bb:78:e6:b1:41:96:28:
7b:7e:3a:94:45:20:72:15:31:4a:a8:b2:54:a5:8d:
7b:02:81:cb:c0:54:c8:d3:42:cf:ef:ed:d5:99:66:
91:69:af:15:66:95:ff:8c:35:51:64:71:76:52:3d:
8e:99:b8:2f:11:cd:35:a8:76:b4:8f:3c:3b:44:d6:
d4:82:c5:5a:a0:33:d5:8c:e1:b4:ec:40:39:09:e8:
f6:4e:59:75:a2:69:2e:6d:d8:00:a4:cd:2d:6a:9e:
d4:59:06:00:6d:f2:d4:67:b6:a9:49:36:4c:24:31:
ec:7b:ae:1e:b7:ab:b9:89:e7:35:22:36:fb:85:a3:
33:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D0:B4:8F:A0:47:9E:57:23:34:89:36:B8:DD:63:4A:D4:5C:72:54
X509v3 Authority Key Identifier:
keyid:20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a5:25:a9:e3:bb:34:96:e2:c6:82:cf:9f:97:6a:3a:dc:69:
34:3c:86:1f:47:fa:73:35:18:88:ad:a9:88:36:2a:ac:16:68:
3f:23:25:1c:39:4f:45:b2:e5:62:49:f7:42:ed:27:4e:61:0a:
0a:08:ab:11:0f:2b:5c:41:a4:bd:8e:94:87:1c:46:4c:66:4a:
fa:82:84:f6:ec:e1:79:37:b4:f6:a5:66:bd:14:02:3e:0e:da:
8b:16:5d:1f:58:fb:0d:9f:2e:21:8c:20:03:e5:7e:4a:07:e1:
fb:88:d9:f1:e1:c9:d4:9f:4f:f7:03:aa:f8:93:28:85:5d:23:
01:04:9b:16:97:57:e5:a1:f2:7f:19:cb:c0:83:8c:1b:d3:12:
42:49:42:e5:13:5f:fb:93:8b:80:d0:a1:46:1c:c1:80:f5:5f:
ff:65:c1:7f:c3:04:d0:f2:1a:54:20:94:1a:ac:37:0c:5a:08:
02:2f:95:ff:a4:f6:d9:ca:30:74:57:8d:87:12:c2:29:68:fc:
d8:e4:0b:e0:49:f4:b3:a6:26:97:2e:be:63:6e:e5:a0:37:eb:
e9:24:79:55:d0:4a:88:1f:0a:83:46:93:ac:92:35:87:8c:a2:
0f:74:30:38:51:93:8e:9f:7f:3a:f9:4a:c5:7c:75:00:f0:e7:
a0:15:0c:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+7BsO/JIci3j0TjvlpjiyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOTFhNzdmN2M0MjRlOTEyNzM5ODQ3M2JmYTNhMmI5NzI3
ZWJiNDUwHhcNMjUxMDIwMDAwMTUwWhcNMjUxMDIxMDAwMTUwWjAzMTEwLwYDVQQD
EyhjOWQwYjQ4ZmEwNDc5ZTU3MjMzNDg5MzZiOGRkNjM0YWQ0NWM3MjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEPskMMLn66eh1qxyLp0T92zhVuR
9z00XV7RUD8nXOQRcczE79wSnx379oV4NEeDVHO/51jXpf2Cc90IPCpR4OGK1Wjw
0rvoo3Ij7JHCdD1w4Vj3jB7YhxA7xOPnApY1aua5RQzFI2EjaPuo+4JF0KrKvJsf
CSqg4xAKl3+cdLt45rFBlih7fjqURSByFTFKqLJUpY17AoHLwFTI00LP7+3VmWaR
aa8VZpX/jDVRZHF2Uj2OmbgvEc01qHa0jzw7RNbUgsVaoDPVjOG07EA5Cej2Tll1
omkubdgApM0tap7UWQYAbfLUZ7apSTZMJDHse64et6u5iec1Ijb7haMzWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnQtI+gR55XIzSJNrjdY0rUXHJUMB8GA1UdIwQY
MBaAFCCRp398Qk6RJzmEc7+jorlyfrtFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUpHbmYzeENUcEVuT1lSenY2T2l1WEotdTBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wNmIzMTctOTExNC00MjZiLTk5ODMt
OWEyMjk3ODBlMGJlLzEvSUpHbmYzeENUcEVuT1lSenY2T2l1WEotdTBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8wNmIzMTctOTExNC00MjZiLTk5ODMtOWEyMjk3ODBlMGJl
LzEvSUpHbmYzeENUcEVuT1lSenY2T2l1WEotdTBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY6UlqeO7
NJbixoLPn5dqOtxpNDyGH0f6czUYiK2piDYqrBZoPyMlHDlPRbLlYkn3Qu0nTmEK
CgirEQ8rXEGkvY6UhxxGTGZK+oKE9uzheTe09qVmvRQCPg7aixZdH1j7DZ8uIYwg
A+V+Sgfh+4jZ8eHJ1J9P9wOq+JMohV0jAQSbFpdX5aHyfxnLwIOMG9MSQklC5RNf
+5OLgNChRhzBgPVf/2XBf8ME0PIaVCCUGqw3DFoIAi+V/6T22cowdFeNhxLCKWj8
2OQL4En0s6Ymly6+Y27loDfr6SR5VdBKiB8Kg0aTrJI1h4yiD3QwOFGTjp9/OvlK
xXx1APDnoBUMEQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:47:47 2025 by rpki-client