Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
File: IuSOFh5JBZI_bUqirgohUw8t4gs.mft (raw, json)
Hash identifier: LgOsvXJzW45NyDTO3Ww2fABmVH44pPhcc/N9XSp0BQQ=
Subject key identifier: 03:4C:EA:FD:ED:66:01:7A:1C:B4:45:B7:39:CA:84:4F:DB:96:9D:E9
Authority key identifier: 22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
Certificate issuer: /CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Certificate serial: 0199FBEAF5F7DB9603DB10F072A3D29BAC26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:01:43 +0000
Manifest this update: Sun 19 Oct 2025 10:01:43 +0000
Manifest next update: Mon 20 Oct 2025 10:01:43 +0000
Files and hashes: 1: IuSOFh5JBZI_bUqirgohUw8t4gs.crl (hash: h65SKsQY0IsoKDbQ6vQouuYjx9BAmW6UjIZUDrK2G90=)
2: OUi5qBFFBiQ3EGmTWiGmad22xM4.roa (hash: KwdKSyLAfkRw0QNUdiy6X/wiXk2JmvHy0XAz3/ojAhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:f5:f7:db:96:03:db:10:f0:72:a3:d2:9b:ac:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Validity
Not Before: Oct 19 10:01:43 2025 GMT
Not After : Oct 20 10:01:43 2025 GMT
Subject: CN=034ceafded66017a1cb445b739ca844fdb969de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d2:36:73:2c:bf:71:94:d6:e2:08:62:2c:36:
ca:2f:e2:15:2d:f8:e0:9f:d7:56:f7:d4:23:05:71:
95:d3:bb:db:75:0d:6d:9d:c1:0f:56:b2:38:70:90:
d9:1c:db:fd:3f:ea:84:18:1b:96:b7:af:2d:d3:58:
84:f3:b7:74:ed:4d:9f:13:54:38:1f:7b:f6:61:a0:
8e:b7:00:e9:c7:cf:f8:2b:3e:4b:74:fc:0b:07:d3:
0a:e6:3c:1d:49:89:2c:ca:71:e6:fb:6a:20:09:60:
8b:43:6e:3d:ce:d3:83:4a:60:e2:bb:01:9b:65:7f:
eb:5e:c0:52:eb:c7:8b:9b:b4:a8:32:ca:85:c2:fa:
d7:a2:c4:99:98:a6:3a:1e:c6:9a:22:17:08:97:70:
cd:4b:ec:f6:b0:ce:93:ce:7f:a2:68:10:40:68:0d:
e6:4a:ff:44:b5:93:a4:d4:f7:4e:18:c6:ad:d6:52:
11:89:7f:ba:7c:52:70:0a:b1:7b:99:50:e6:10:fe:
19:b5:07:48:f9:f9:f3:af:f7:d3:c6:d6:eb:e9:a9:
db:78:a0:8d:91:4d:92:a1:89:c2:d4:6d:cc:0f:4b:
13:95:a1:17:81:62:d3:96:bb:8c:2a:17:03:c1:4e:
94:08:f5:d3:93:11:f1:cb:aa:4b:eb:ce:3a:3a:08:
1a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4C:EA:FD:ED:66:01:7A:1C:B4:45:B7:39:CA:84:4F:DB:96:9D:E9
X509v3 Authority Key Identifier:
keyid:22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0e:91:01:f0:41:75:1a:ff:41:14:34:9f:a5:52:32:cb:8a:
27:91:29:33:c6:02:bb:b1:35:aa:be:2b:eb:5d:80:d5:46:46:
dd:07:3c:09:71:52:01:d7:04:37:99:a5:d4:cc:15:ba:49:65:
62:92:d6:2a:40:b8:64:33:cb:51:47:e6:66:20:ec:af:70:b9:
aa:fd:ac:7b:98:05:50:d2:88:3d:dc:90:84:2c:f0:59:9f:ad:
72:70:9c:26:9d:d4:13:97:29:f6:4d:04:1b:f0:de:a6:9d:ab:
e1:ea:b5:95:ce:6f:92:e4:a0:aa:78:7e:72:f1:f1:15:7c:97:
24:33:53:ed:d0:d8:ef:b6:d5:47:ec:9c:37:6f:b7:3e:91:83:
68:6f:dc:12:59:86:77:59:74:bc:9b:63:26:d4:85:25:47:85:
6a:e4:9e:a2:6b:67:35:35:29:8f:73:63:ae:fb:4e:0d:64:d3:
6d:62:7d:68:58:73:79:52:c7:62:eb:eb:45:e4:35:5e:04:c8:
74:ef:67:14:3e:ad:fe:18:d4:1e:d6:65:23:75:b3:5b:aa:12:
c4:aa:01:37:42:44:46:f5:23:b0:43:9a:14:02:7a:34:82:e5:
62:0a:f3:38:1a:e8:16:df:4d:7b:6f:75:bf:e9:ae:99:2d:04:
0b:32:ed:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76vX325YD2xDwcqPSm6wmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZTQ4ZTE2MWU0OTA1OTIzZjZkNGFhMmFlMGEyMTUzMGYy
ZGUyMGIwHhcNMjUxMDE5MTAwMTQzWhcNMjUxMDIwMTAwMTQzWjAzMTEwLwYDVQQD
EygwMzRjZWFmZGVkNjYwMTdhMWNiNDQ1YjczOWNhODQ0ZmRiOTY5ZGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNI2cyy/cZTW4ghiLDbKL+IVLfjg
n9dW99QjBXGV07vbdQ1tncEPVrI4cJDZHNv9P+qEGBuWt68t01iE87d07U2fE1Q4
H3v2YaCOtwDpx8/4Kz5LdPwLB9MK5jwdSYksynHm+2ogCWCLQ249ztODSmDiuwGb
ZX/rXsBS68eLm7SoMsqFwvrXosSZmKY6HsaaIhcIl3DNS+z2sM6Tzn+iaBBAaA3m
Sv9EtZOk1PdOGMat1lIRiX+6fFJwCrF7mVDmEP4ZtQdI+fnzr/fTxtbr6anbeKCN
kU2SoYnC1G3MD0sTlaEXgWLTlruMKhcDwU6UCPXTkxHxy6pL6846OggagwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANM6v3tZgF6HLRFtznKhE/blp3pMB8GA1UdIwQY
MBaAFCLkjhYeSQWSP21Koq4KIVMPLeILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXVTT0ZoNUpCWklfYlVxaXJnb2hVdzh0NGdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yYzM0ZTktNzU1OS00MWE2LTljYWMt
M2U2Yjc1MWE1NWY0LzEvSXVTT0ZoNUpCWklfYlVxaXJnb2hVdzh0NGdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8yYzM0ZTktNzU1OS00MWE2LTljYWMtM2U2Yjc1MWE1NWY0
LzEvSXVTT0ZoNUpCWklfYlVxaXJnb2hVdzh0NGdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATA6RAfBB
dRr/QRQ0n6VSMsuKJ5EpM8YCu7E1qr4r612A1UZG3Qc8CXFSAdcEN5ml1MwVukll
YpLWKkC4ZDPLUUfmZiDsr3C5qv2se5gFUNKIPdyQhCzwWZ+tcnCcJp3UE5cp9k0E
G/Depp2r4eq1lc5vkuSgqnh+cvHxFXyXJDNT7dDY77bVR+ycN2+3PpGDaG/cElmG
d1l0vJtjJtSFJUeFauSeomtnNTUpj3NjrvtODWTTbWJ9aFhzeVLHYuvrReQ1XgTI
dO9nFD6t/hjUHtZlI3WzW6oSxKoBN0JERvUjsEOaFAJ6NILlYgrzOBroFt9Ne291
v+mumS0ECzLtSQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:32 2025 by rpki-client