
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
File: IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft (raw, json)
Hash identifier: vkOnV3n/XYllnQjeMebxmw/yaX1qhiLIgRU8pRoasq0=
Subject key identifier: C7:0B:99:2E:E9:0D:4B:5C:2C:5F:20:16:4E:50:DB:BC:41:33:28:8B
Authority key identifier: 22:24:FD:65:00:3C:39:49:0A:BE:AA:9E:1E:FE:5F:20:24:6D:C7:7B
Certificate issuer: /CN=2224fd65003c39490abeaa9e1efe5f20246dc77b
Certificate serial: 0199FBEAD0347F2BDE0AF44963C1FF947EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
Manifest number: 0D5E
Signing time: Sun 19 Oct 2025 10:01:33 +0000
Manifest this update: Sun 19 Oct 2025 10:01:33 +0000
Manifest next update: Mon 20 Oct 2025 10:01:33 +0000
Files and hashes: 1: IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl (hash: ADVtwkTMM+hNbvCevbRpTDgeX/rNPhZuzAWy2W6uAWg=)
2: gJhF5evxe8g-iDe3hBXACq-nKPk.roa (hash: qM5+n5uw27ndltKhnl7N0lO0fW10CmbET7TyhvcxHok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d0:34:7f:2b:de:0a:f4:49:63:c1:ff:94:7e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2224fd65003c39490abeaa9e1efe5f20246dc77b
Validity
Not Before: Oct 19 10:01:33 2025 GMT
Not After : Oct 20 10:01:33 2025 GMT
Subject: CN=c70b992ee90d4b5c2c5f20164e50dbbc4133288b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9e:4f:cf:3c:f9:71:cb:10:03:0c:bc:17:84:
a1:ad:e0:a6:24:ef:3a:26:8b:6f:83:d7:00:a3:a2:
ef:f6:98:77:ed:37:72:89:bc:32:22:2b:09:da:65:
83:4e:b8:13:36:25:86:91:a6:ff:6e:b8:05:f1:a1:
69:3d:2a:2f:92:15:69:4f:56:bd:46:39:45:3c:c2:
96:a4:ac:f3:09:2c:7f:43:f0:6c:0f:f2:e1:1e:ef:
bc:ab:ea:33:52:53:ec:c8:7e:e2:f7:82:1d:9b:50:
1f:f8:5f:d2:3a:3f:da:42:50:79:c9:82:74:67:ce:
02:f5:3b:70:80:2e:df:02:01:b3:36:87:ae:24:67:
36:79:b1:b1:12:39:db:d7:36:30:72:76:db:5a:f1:
3a:9c:c0:11:2b:91:ea:77:bb:57:02:7e:e2:4f:67:
0d:74:b9:de:ef:08:21:ba:d6:e5:8f:e1:83:dd:ff:
3f:24:ff:d4:e4:62:71:ae:64:d3:ab:a6:3e:75:cb:
b2:98:c8:a3:bc:da:60:38:cc:ab:5c:99:e8:57:9c:
89:00:f2:fa:f4:e0:a2:5a:12:34:3b:ca:fb:43:3a:
8e:75:2b:d2:83:eb:7d:cd:b0:18:45:40:82:cb:1e:
99:3d:d8:84:bf:4a:db:6c:dd:23:a5:96:a3:d6:f9:
bc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0B:99:2E:E9:0D:4B:5C:2C:5F:20:16:4E:50:DB:BC:41:33:28:8B
X509v3 Authority Key Identifier:
keyid:22:24:FD:65:00:3C:39:49:0A:BE:AA:9E:1E:FE:5F:20:24:6D:C7:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:8e:9f:46:8f:77:0d:db:fe:e5:1c:53:ad:32:f0:f1:d1:7d:
29:7a:99:7b:75:f3:f6:7a:fe:1c:71:18:cd:cd:ab:86:8d:83:
fc:54:e5:97:fb:53:af:54:11:cd:c8:21:69:b8:c8:69:62:34:
3d:fa:46:f6:b4:ab:3f:c3:42:7d:8d:44:83:40:36:e1:f8:0e:
fa:2f:5f:77:e9:f5:6c:c7:37:95:53:05:a1:2b:43:82:c7:65:
b5:ee:07:70:83:af:17:8f:40:b5:89:13:b8:c1:1d:f8:2b:1a:
68:e0:dc:b5:36:09:c9:d6:b2:c2:03:db:9a:d9:73:80:5a:13:
c9:f6:8b:a9:24:38:9b:59:39:e7:70:e6:a4:ac:d6:33:af:3b:
ea:91:1a:87:b9:16:32:df:c2:54:33:92:54:59:f9:5b:fe:6a:
fa:f9:f1:2b:18:5e:75:78:06:56:3f:36:9d:e4:e4:04:c1:b9:
6c:2d:c2:fb:20:77:c2:0e:a2:0a:e2:31:7e:71:bb:d1:ee:3a:
d4:80:e0:43:cf:ca:59:dc:48:d7:ed:22:a1:de:10:eb:b8:ce:
e2:7b:48:b4:8b:1c:cd:27:2f:87:70:12:53:7d:96:54:dd:0e:
31:20:d5:34:dd:bf:fe:7a:70:5b:5c:08:ee:be:85:69:61:4c:
35:1b:19:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76tA0fyveCvRJY8H/lH7gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMjRmZDY1MDAzYzM5NDkwYWJlYWE5ZTFlZmU1ZjIwMjQ2
ZGM3N2IwHhcNMjUxMDE5MTAwMTMzWhcNMjUxMDIwMTAwMTMzWjAzMTEwLwYDVQQD
EyhjNzBiOTkyZWU5MGQ0YjVjMmM1ZjIwMTY0ZTUwZGJiYzQxMzMyODhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs55Pzzz5ccsQAwy8F4ShreCmJO86
Jotvg9cAo6Lv9ph37TdyibwyIisJ2mWDTrgTNiWGkab/brgF8aFpPSovkhVpT1a9
RjlFPMKWpKzzCSx/Q/BsD/LhHu+8q+ozUlPsyH7i94Idm1Af+F/SOj/aQlB5yYJ0
Z84C9TtwgC7fAgGzNoeuJGc2ebGxEjnb1zYwcnbbWvE6nMARK5Hqd7tXAn7iT2cN
dLne7wghutblj+GD3f8/JP/U5GJxrmTTq6Y+dcuymMijvNpgOMyrXJnoV5yJAPL6
9OCiWhI0O8r7QzqOdSvSg+t9zbAYRUCCyx6ZPdiEv0rbbN0jpZaj1vm8twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcLmS7pDUtcLF8gFk5Q27xBMyiLMB8GA1UdIwQY
MBaAFCIk/WUAPDlJCr6qnh7+XyAkbcd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWlUOVpRQThPVWtLdnFxZUh2NWZJQ1J0eDNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85YjQ5MDAtMDg1YS00YTBlLWE5OGYt
YzZkYjM0YzJmN2U5LzEvSWlUOVpRQThPVWtLdnFxZUh2NWZJQ1J0eDNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85YjQ5MDAtMDg1YS00YTBlLWE5OGYtYzZkYjM0YzJmN2U5
LzEvSWlUOVpRQThPVWtLdnFxZUh2NWZJQ1J0eDNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPY6fRo93
Ddv+5RxTrTLw8dF9KXqZe3Xz9nr+HHEYzc2rho2D/FTll/tTr1QRzcghabjIaWI0
PfpG9rSrP8NCfY1Eg0A24fgO+i9fd+n1bMc3lVMFoStDgsdlte4HcIOvF49AtYkT
uMEd+CsaaODctTYJydaywgPbmtlzgFoTyfaLqSQ4m1k553DmpKzWM6876pEah7kW
Mt/CVDOSVFn5W/5q+vnxKxhedXgGVj82neTkBMG5bC3C+yB3wg6iCuIxfnG70e46
1IDgQ8/KWdxI1+0iod4Q67jO4ntItIsczScvh3ASU32WVN0OMSDVNN2//npwW1wI
7r6FaWFMNRsZ7Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:51 2025 by rpki-client