Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
File: iTr8bv5imQomky9A4VCyfu1TnEs.mft (raw, json)
Hash identifier: YtgTpsq2L+YTvBCjod+1JLrtHs5tDGWa50/VYIFQDMQ=
Subject key identifier: D2:79:89:B3:82:1F:31:D5:23:80:DC:C1:EC:3A:27:A6:E7:77:FA:96
Authority key identifier: 89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
Certificate issuer: /CN=893afc6efe62990a26932f40e150b27eed539c4b
Certificate serial: 0199FD33F74007CD6C62D119821983A989C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 16:01:05 +0000
Manifest this update: Sun 19 Oct 2025 16:01:05 +0000
Manifest next update: Mon 20 Oct 2025 16:01:05 +0000
Files and hashes: 1: UvkgBounMtuI2EY4VakFPmSVVf8.roa (hash: B8b+cAv47Fq4zMohD+Ikbfg+w/maMgI605v1qgGvxbU=)
2: aMP60-6kIcycfPRX1mrnGq3rKu4.roa (hash: 3JfLcJd1nqn3CbGO/VzxfaF4cayveMgFQoD5eZc253E=)
3: iTr8bv5imQomky9A4VCyfu1TnEs.crl (hash: okU2RG+EaOP77dDZc8Vph54RDtbxa/e2/rbIKxA/LmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:f7:40:07:cd:6c:62:d1:19:82:19:83:a9:89:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893afc6efe62990a26932f40e150b27eed539c4b
Validity
Not Before: Oct 19 16:01:05 2025 GMT
Not After : Oct 20 16:01:05 2025 GMT
Subject: CN=d27989b3821f31d52380dcc1ec3a27a6e777fa96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a0:4d:dc:f2:7b:d2:21:b2:d2:c3:2e:80:86:
9a:01:9d:6e:3a:da:cc:f5:28:b9:cd:0e:f0:91:24:
ed:8a:dc:bc:b5:5a:ec:ba:bd:54:79:4a:28:bb:35:
f1:b9:f9:47:82:e2:6f:ad:fb:f8:97:96:8b:5a:74:
a8:ed:0b:48:c2:ac:ad:70:bc:91:65:ab:1a:fe:e3:
2b:e1:02:24:1f:e1:33:51:1d:f0:f7:61:35:ec:02:
7f:70:ad:08:64:3a:2d:6f:a0:f3:4c:b7:d8:6e:22:
46:8c:e8:06:a7:9a:9d:99:04:8a:f5:90:82:a9:c6:
82:ad:6e:78:1d:15:bc:f7:af:aa:b6:7d:c8:cb:64:
b6:7b:ae:58:eb:e2:3d:30:3c:9d:a0:06:1f:ca:71:
4f:14:0f:82:f7:de:14:80:3a:b4:0a:4f:b3:54:23:
85:2a:25:c7:db:9a:a3:40:b7:c9:89:a5:18:d7:94:
bf:a4:7d:39:c2:b7:67:06:29:5e:29:1c:17:14:6a:
e1:9d:2b:42:0c:e7:1a:80:3d:fc:31:ad:43:9c:4f:
58:da:89:1d:19:d2:3a:25:07:7d:39:80:1a:5c:31:
d4:7f:81:82:9f:fd:13:67:c1:61:af:dc:48:47:3c:
f6:35:3c:76:5c:f7:2c:19:4c:a4:70:2f:cb:eb:35:
18:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:79:89:B3:82:1F:31:D5:23:80:DC:C1:EC:3A:27:A6:E7:77:FA:96
X509v3 Authority Key Identifier:
keyid:89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:62:44:67:94:ba:dc:27:92:6e:df:63:f0:ba:04:24:4e:85:
3b:cf:8b:8e:01:fc:cf:af:e8:70:cb:69:de:e8:8f:1a:db:01:
38:2d:8f:59:b1:93:56:69:a4:9a:fa:92:8b:5a:b0:1a:c6:b2:
3b:c0:af:33:e0:48:ad:04:7a:26:8b:cf:09:90:c0:a3:d3:25:
ff:a6:0e:08:c1:08:36:50:84:8b:44:dd:a6:a4:96:88:c0:97:
aa:a4:01:7f:78:cd:d5:d3:61:e2:3c:c2:0d:65:ec:b8:61:be:
bb:77:5c:95:6c:bf:d4:f2:ff:50:11:3e:6c:d1:b3:91:fd:f8:
7d:67:cb:a4:d7:58:74:b7:be:72:04:60:dc:60:9d:11:37:74:
6a:c4:b2:96:76:2d:c8:b4:de:df:16:39:86:35:24:d7:c1:b9:
65:37:03:bf:af:36:96:fc:2e:7f:61:00:8f:6a:e9:0f:a5:96:
e8:87:71:64:e1:87:ea:60:5a:b2:92:7a:0f:c0:5f:e8:40:57:
8b:38:2b:5e:09:67:b2:8d:61:d2:f0:a1:d2:98:79:96:19:72:
a4:3e:d4:81:4e:0a:51:85:d3:e6:44:ee:b6:55:6b:fc:48:25:
45:03:9c:df:64:5c:54:1d:6c:61:1d:71:32:74:a3:2d:d7:ac:
fc:66:70:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9M/dAB81sYtEZghmDqYnJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5M2FmYzZlZmU2Mjk5MGEyNjkzMmY0MGUxNTBiMjdlZWQ1
MzljNGIwHhcNMjUxMDE5MTYwMTA1WhcNMjUxMDIwMTYwMTA1WjAzMTEwLwYDVQQD
EyhkMjc5ODliMzgyMWYzMWQ1MjM4MGRjYzFlYzNhMjdhNmU3NzdmYTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKBN3PJ70iGy0sMugIaaAZ1uOtrM
9Si5zQ7wkSTtity8tVrsur1UeUoouzXxuflHguJvrfv4l5aLWnSo7QtIwqytcLyR
Zasa/uMr4QIkH+EzUR3w92E17AJ/cK0IZDotb6DzTLfYbiJGjOgGp5qdmQSK9ZCC
qcaCrW54HRW896+qtn3Iy2S2e65Y6+I9MDydoAYfynFPFA+C994UgDq0Ck+zVCOF
KiXH25qjQLfJiaUY15S/pH05wrdnBileKRwXFGrhnStCDOcagD38Ma1DnE9Y2okd
GdI6JQd9OYAaXDHUf4GCn/0TZ8Fhr9xIRzz2NTx2XPcsGUykcC/L6zUYfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJ5ibOCHzHVI4Dcwew6J6bnd/qWMB8GA1UdIwQY
MBaAFIk6/G7+YpkKJpMvQOFQsn7tU5xLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVRyOGJ2NWltUW9ta3k5QTRWQ3lmdTFUbkVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83ZTE4ZjAtYWYxZC00N2MxLThkYjUt
NWE1MjMzZGMwY2UwLzEvaVRyOGJ2NWltUW9ta3k5QTRWQ3lmdTFUbkVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi83ZTE4ZjAtYWYxZC00N2MxLThkYjUtNWE1MjMzZGMwY2Uw
LzEvaVRyOGJ2NWltUW9ta3k5QTRWQ3lmdTFUbkVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdWJEZ5S6
3CeSbt9j8LoEJE6FO8+LjgH8z6/ocMtp3uiPGtsBOC2PWbGTVmmkmvqSi1qwGsay
O8CvM+BIrQR6JovPCZDAo9Ml/6YOCMEINlCEi0TdpqSWiMCXqqQBf3jN1dNh4jzC
DWXsuGG+u3dclWy/1PL/UBE+bNGzkf34fWfLpNdYdLe+cgRg3GCdETd0asSylnYt
yLTe3xY5hjUk18G5ZTcDv682lvwuf2EAj2rpD6WW6IdxZOGH6mBaspJ6D8Bf6EBX
izgrXglnso1h0vCh0ph5lhlypD7UgU4KUYXT5kTutlVr/EglRQOc32RcVB1sYR1x
MnSjLdes/GZwAw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:07:00 2025 by rpki-client