Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
File: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft (raw, json)
Hash identifier: 4kP23q+OU43zSS9WZH6L5wSTMv/Nz2IXAheXx2tQbQE=
Subject key identifier: DB:F2:3F:EC:A5:E8:DA:5A:6D:50:AC:26:A5:44:9E:36:63:51:4F:B4
Authority key identifier: 8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
Certificate issuer: /CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Certificate serial: 019A4E866C8164FD67A2B9F064ABD49FEB28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 11:00:23 +0000
Manifest this update: Tue 04 Nov 2025 11:00:23 +0000
Manifest next update: Wed 05 Nov 2025 11:00:23 +0000
Files and hashes: 1: IchVUh-bStMtsgJvy34zsTbwcBI.roa (hash: jyAhzg+4uTjXM/tPUldAepJ0O1YeEpK4SQDBYAmWHGg=)
2: LXcAIZsJjKqYcEZ-B4QhCzqX1y4.roa (hash: qXMNjFLmC2o8C7/tTBWAvWSGp3iRQoR6PHBawFPFtHc=)
3: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl (hash: QHXpysypq3TbiHD6LfE9N65EIwFjka23Zw44KIHW2B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:6c:81:64:fd:67:a2:b9:f0:64:ab:d4:9f:eb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Validity
Not Before: Nov 4 11:00:23 2025 GMT
Not After : Nov 5 11:00:23 2025 GMT
Subject: CN=dbf23feca5e8da5a6d50ac26a5449e3663514fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c5:37:6f:95:c7:b6:22:99:29:dc:d8:2b:99:
1b:84:4a:38:b2:7f:d4:12:3e:0b:be:79:0f:a4:d7:
29:34:22:49:8b:d2:2c:79:85:12:87:10:69:00:b9:
da:fe:e1:4d:77:98:60:db:26:af:02:4b:25:4a:43:
32:09:b8:07:17:79:d1:ca:51:57:5d:f5:ff:95:6d:
60:b7:2b:b6:9e:f4:9c:65:34:d7:bb:7f:50:a3:37:
36:23:23:f8:e9:6e:f4:c7:62:d5:48:91:c1:2d:7f:
3a:e8:38:ae:29:9d:e3:51:3e:15:dc:60:15:2d:7e:
9c:b3:8f:30:5e:26:83:ac:d7:54:90:ee:a5:31:8e:
ce:05:2e:e5:1d:f3:80:7d:89:5e:ee:15:b0:fd:90:
6a:d1:8c:2d:59:63:b7:99:12:6c:cd:81:55:a5:b5:
57:f3:cc:fc:a8:a0:4c:c6:ef:54:02:7f:b3:7e:a1:
25:ba:02:f7:d2:6b:00:cf:5c:2b:76:6f:5f:e1:49:
72:70:dd:c8:a3:77:54:55:4d:5a:ae:6e:99:1c:a4:
1a:bd:70:58:d8:77:0b:34:d0:5e:74:2b:56:a4:55:
74:7f:39:0b:4d:c2:ef:04:e4:a8:ff:76:1e:94:34:
c4:e3:d2:4e:51:6f:d3:21:67:a5:3b:30:d1:05:78:
11:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F2:3F:EC:A5:E8:DA:5A:6D:50:AC:26:A5:44:9E:36:63:51:4F:B4
X509v3 Authority Key Identifier:
keyid:8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:20:a4:27:04:f3:24:5b:d2:8c:06:29:b7:f8:2f:bf:6a:c2:
fd:8e:47:cc:2a:c9:27:1e:23:76:99:c0:3a:68:6f:9f:4b:f7:
34:a6:24:d2:10:2c:21:0d:27:4b:26:a2:64:1f:29:c8:ff:cf:
38:af:35:2f:58:d2:cf:9e:72:c1:97:b2:63:8c:34:1c:e3:6d:
64:79:90:1a:5b:f5:27:97:f4:42:3a:2f:ea:13:ae:14:db:b8:
00:6d:22:fc:50:98:59:9d:12:d8:24:51:8a:ee:56:3e:d3:fe:
5e:d2:8d:90:bb:58:71:38:0f:44:9f:eb:77:f7:aa:ff:ca:0a:
4d:81:be:4f:c5:89:48:53:14:90:aa:3b:c2:77:c1:63:0f:58:
2f:67:9c:46:99:01:34:aa:f1:e9:a1:d6:2b:9c:f3:65:53:dd:
4c:a1:b3:d1:ff:6b:5f:36:7a:6b:cd:ba:19:2c:cc:26:47:8e:
a5:0d:7d:b3:57:ba:60:f9:02:46:1e:3b:23:ce:2a:04:42:ee:
54:7e:9e:e3:f0:49:f0:f0:26:7d:87:3c:d1:6d:4a:db:5d:3e:
eb:0c:03:6a:a7:94:22:a5:5f:3b:96:bf:5b:94:2b:72:71:6a:
f2:a6:6e:3c:6f:56:8f:a1:74:bd:a3:c1:3e:62:a4:d6:83:c5:
b5:21:0a:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhmyBZP1nornwZKvUn+soMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMGM4ZDM1ZGQ2NjY1N2JmZmM5MGI2YWM0MTYwMGZmYTYy
M2Q1YjgwHhcNMjUxMTA0MTEwMDIzWhcNMjUxMTA1MTEwMDIzWjAzMTEwLwYDVQQD
EyhkYmYyM2ZlY2E1ZThkYTVhNmQ1MGFjMjZhNTQ0OWUzNjYzNTE0ZmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8U3b5XHtiKZKdzYK5kbhEo4sn/U
Ej4LvnkPpNcpNCJJi9IseYUShxBpALna/uFNd5hg2yavAkslSkMyCbgHF3nRylFX
XfX/lW1gtyu2nvScZTTXu39Qozc2IyP46W70x2LVSJHBLX866DiuKZ3jUT4V3GAV
LX6cs48wXiaDrNdUkO6lMY7OBS7lHfOAfYle7hWw/ZBq0YwtWWO3mRJszYFVpbVX
88z8qKBMxu9UAn+zfqElugL30msAz1wrdm9f4UlycN3Io3dUVU1arm6ZHKQavXBY
2HcLNNBedCtWpFV0fzkLTcLvBOSo/3YelDTE49JOUW/TIWelOzDRBXgRBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvyP+yl6NpabVCsJqVEnjZjUU+0MB8GA1UdIwQY
MBaAFIsMjTXdZmV7/8kLasQWAP+mI9W4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kMjhmZDQtYzM2OC00NmIzLWExN2Qt
NDMxODdlMjliMGUzLzEvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9kMjhmZDQtYzM2OC00NmIzLWExN2QtNDMxODdlMjliMGUz
LzEvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADiCkJwTz
JFvSjAYpt/gvv2rC/Y5HzCrJJx4jdpnAOmhvn0v3NKYk0hAsIQ0nSyaiZB8pyP/P
OK81L1jSz55ywZeyY4w0HONtZHmQGlv1J5f0Qjov6hOuFNu4AG0i/FCYWZ0S2CRR
iu5WPtP+XtKNkLtYcTgPRJ/rd/eq/8oKTYG+T8WJSFMUkKo7wnfBYw9YL2ecRpkB
NKrx6aHWK5zzZVPdTKGz0f9rXzZ6a826GSzMJkeOpQ19s1e6YPkCRh47I84qBELu
VH6e4/BJ8PAmfYc80W1K210+6wwDaqeUIqVfO5a/W5QrcnFq8qZuPG9Wj6F0vaPB
PmKk1oPFtSEKAA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:17 2025 by rpki-client