Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
File: IJPjg7LMUtXsow_rEml1k8nHiKA.mft (raw, json)
Hash identifier: WDQwdYSY7uoyOs3B2O3L7CClo41TCszOz7d9ahToCo4=
Subject key identifier: 66:37:58:FF:7A:61:3E:41:76:43:B9:64:F5:6A:DB:CB:9C:A1:4B:60
Authority key identifier: 20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0
Certificate issuer: /CN=2093e383b2cc52d5eca30feb12697593c9c788a0
Certificate serial: 0199FC587AF57551BB8AEFCCAEA14F146F0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 12:01:20 +0000
Manifest this update: Sun 19 Oct 2025 12:01:20 +0000
Manifest next update: Mon 20 Oct 2025 12:01:20 +0000
Files and hashes: 1: IFpZrxJhl8wQt7Uq0qRwzYFnZJk.roa (hash: eoMtlnp1ZLGeorMDixEuqh0nobwLwy70mhjbtsKxD5o=)
2: IJPjg7LMUtXsow_rEml1k8nHiKA.crl (hash: pS1uIZ16aYu4LYqXWHGj8j52jaXh5kF3nEoWLRfG2gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:7a:f5:75:51:bb:8a:ef:cc:ae:a1:4f:14:6f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2093e383b2cc52d5eca30feb12697593c9c788a0
Validity
Not Before: Oct 19 12:01:20 2025 GMT
Not After : Oct 20 12:01:20 2025 GMT
Subject: CN=663758ff7a613e417643b964f56adbcb9ca14b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9e:27:86:fe:32:47:ae:9c:91:03:9c:74:46:
8f:ea:a2:92:ac:7c:2b:16:87:bd:df:bc:9c:61:3b:
5e:70:db:3c:c4:6a:03:cb:a5:9c:87:43:c2:c6:a0:
4d:d2:53:08:51:25:d4:34:c2:44:67:b4:ff:49:d4:
a9:62:ad:3f:32:59:aa:18:09:37:d4:dd:4e:dc:93:
29:60:1b:a9:94:82:13:78:e4:11:ec:a2:ce:eb:cb:
ef:e9:58:54:f0:da:98:b3:a7:16:60:b5:df:cf:8a:
39:9f:ec:76:eb:b6:5b:10:db:ab:2b:be:39:2f:4c:
c5:e4:c9:75:3a:7f:5a:65:f4:4c:9f:21:b2:d8:0d:
37:05:9c:a5:f9:59:e1:ee:e3:71:90:29:9e:ff:79:
41:75:2f:5f:34:d8:80:74:b1:3e:3c:e4:fa:53:98:
84:53:ba:5b:00:99:5a:ce:91:df:5d:23:2b:51:66:
15:8a:07:70:53:12:d2:a0:03:b2:f1:1b:0e:d2:f5:
fe:0d:8e:34:88:10:08:8f:ce:03:77:3c:5d:be:9d:
a7:11:3e:36:70:5f:1a:03:23:2c:21:a0:1d:34:d7:
a9:60:dd:90:6b:a7:43:a2:8e:eb:b7:f7:bc:c6:fb:
49:0e:77:9e:95:ba:7e:12:f0:55:f7:2a:da:e5:20:
a0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:37:58:FF:7A:61:3E:41:76:43:B9:64:F5:6A:DB:CB:9C:A1:4B:60
X509v3 Authority Key Identifier:
keyid:20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:8d:bc:c8:bd:6c:00:0b:e3:9c:28:5d:55:c1:10:25:ab:e8:
5d:52:c2:6d:50:c3:ea:2b:a7:33:ad:b0:c5:e2:06:10:ae:70:
0f:8c:2e:6f:2d:c5:3a:3a:c1:ca:2b:29:97:05:01:3e:5f:f3:
e9:b1:00:85:d9:69:b5:cd:2a:14:4f:e5:63:3b:c1:43:a0:ca:
3f:9d:01:7a:fc:56:f0:bc:c5:39:65:60:16:e6:b5:16:4f:73:
1d:9c:a6:9f:8f:f2:11:f0:2d:36:1f:15:00:a2:3b:79:2d:14:
b8:fc:c7:22:c6:2c:4a:8d:70:71:10:f8:a6:c6:9f:9b:57:90:
6f:3b:99:ee:77:8b:e3:53:ec:42:6a:e9:95:76:59:13:59:6c:
94:0a:13:a4:9c:3b:2a:a4:e2:a5:8e:af:db:b3:76:26:88:25:
35:bf:7f:a9:7d:e8:d2:78:8a:3b:16:ef:c2:6e:76:58:ad:a4:
40:d0:64:2b:f9:cf:c5:12:6f:f8:51:8d:65:d7:25:b8:06:e4:
d2:d1:cf:7e:7f:6c:4a:39:89:1d:8f:f8:63:0c:d4:ee:1a:68:
8e:3c:dc:8b:85:e3:df:54:20:7a:c4:ef:04:87:26:28:bd:2f:
af:01:bc:a9:e3:62:af:2b:5d:46:cb:25:8c:ca:b4:cb:af:1b:
78:bd:6a:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WHr1dVG7iu/MrqFPFG8PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOTNlMzgzYjJjYzUyZDVlY2EzMGZlYjEyNjk3NTkzYzlj
Nzg4YTAwHhcNMjUxMDE5MTIwMTIwWhcNMjUxMDIwMTIwMTIwWjAzMTEwLwYDVQQD
Eyg2NjM3NThmZjdhNjEzZTQxNzY0M2I5NjRmNTZhZGJjYjljYTE0YjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv54nhv4yR66ckQOcdEaP6qKSrHwr
Foe937ycYTtecNs8xGoDy6Wch0PCxqBN0lMIUSXUNMJEZ7T/SdSpYq0/MlmqGAk3
1N1O3JMpYBuplIITeOQR7KLO68vv6VhU8NqYs6cWYLXfz4o5n+x267ZbENurK745
L0zF5Ml1On9aZfRMnyGy2A03BZyl+Vnh7uNxkCme/3lBdS9fNNiAdLE+POT6U5iE
U7pbAJlazpHfXSMrUWYVigdwUxLSoAOy8RsO0vX+DY40iBAIj84Ddzxdvp2nET42
cF8aAyMsIaAdNNepYN2Qa6dDoo7rt/e8xvtJDneelbp+EvBV9yra5SCgxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGY3WP96YT5BdkO5ZPVq28ucoUtgMB8GA1UdIwQY
MBaAFCCT44OyzFLV7KMP6xJpdZPJx4igMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUpQamc3TE1VdFhzb3dfckVtbDFrOG5IaUtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NzMxMzYtMDlhYi00YzgzLThmM2Mt
MDQ1MzRlYmNlMzVlLzEvSUpQamc3TE1VdFhzb3dfckVtbDFrOG5IaUtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85NzMxMzYtMDlhYi00YzgzLThmM2MtMDQ1MzRlYmNlMzVl
LzEvSUpQamc3TE1VdFhzb3dfckVtbDFrOG5IaUtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALI28yL1s
AAvjnChdVcEQJavoXVLCbVDD6iunM62wxeIGEK5wD4wuby3FOjrByisplwUBPl/z
6bEAhdlptc0qFE/lYzvBQ6DKP50BevxW8LzFOWVgFua1Fk9zHZymn4/yEfAtNh8V
AKI7eS0UuPzHIsYsSo1wcRD4psafm1eQbzuZ7neL41PsQmrplXZZE1lslAoTpJw7
KqTipY6v27N2JoglNb9/qX3o0niKOxbvwm52WK2kQNBkK/nPxRJv+FGNZdcluAbk
0tHPfn9sSjmJHY/4YwzU7hpojjzci4Xj31QgesTvBIcmKL0vrwG8qeNirytdRssl
jMq0y68beL1qCA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:12 2025 by rpki-client