Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
File: IWRiyMAGWgps6vJDmFtpfPE1e_s.mft (raw, json)
Hash identifier: Yoo4wnv3+1RiYCK/prCRNPXuLetf0KUEqD53uwBsU9g=
Subject key identifier: 10:52:6C:30:30:68:69:F5:4E:26:AA:1A:99:72:14:B9:EB:E2:9F:3A
Authority key identifier: 21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
Certificate issuer: /CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Certificate serial: 019A4EF4FD6C60895EE0E1AC2D54AAE18E1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
Manifest number: 13FC
Signing time: Tue 04 Nov 2025 13:01:09 +0000
Manifest this update: Tue 04 Nov 2025 13:01:09 +0000
Manifest next update: Wed 05 Nov 2025 13:01:09 +0000
Files and hashes: 1: 1-BW4odJAyxl12AYDgfFuFOqGWeE.roa (hash: qq64q7wVgL8AHerH5wdm8XW+pg0/VDQN8uM/uUKTeDM=)
2: IWRiyMAGWgps6vJDmFtpfPE1e_s.crl (hash: ekIerLVdwFcMSMfv58UQbpGxjqSugFN7SO+nm5D2K9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:fd:6c:60:89:5e:e0:e1:ac:2d:54:aa:e1:8e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Validity
Not Before: Nov 4 13:01:09 2025 GMT
Not After : Nov 5 13:01:09 2025 GMT
Subject: CN=10526c30306869f54e26aa1a997214b9ebe29f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:50:2f:b7:da:84:91:6a:dc:a6:a8:18:97:b7:
39:67:4a:22:43:71:c0:fd:ff:45:e6:e9:ab:fe:54:
af:d1:5f:bb:3c:74:3c:06:03:80:1d:ff:17:22:63:
0f:a0:86:96:7d:57:e1:e1:33:30:b4:69:ac:82:fa:
ff:4a:81:80:98:52:87:c8:4d:9a:aa:4f:c9:c2:0f:
2b:f2:2a:d6:20:3a:af:53:c8:65:fc:27:ce:bc:d1:
70:ef:24:85:15:fc:85:69:be:d2:b5:b8:21:41:fd:
d4:45:d2:a4:fa:6f:68:91:e6:14:22:f6:07:95:66:
cb:1b:e9:78:52:a2:19:83:36:f1:dc:41:17:cb:bd:
10:2b:51:a7:64:14:70:55:7a:24:fe:8e:7d:e5:fd:
0c:17:98:83:bf:93:b5:e8:76:76:f9:ce:02:63:ed:
c0:5b:70:ee:c6:4d:e7:1a:55:95:ba:4b:33:a5:4b:
ef:33:53:d3:76:9d:21:70:d4:d8:5c:f1:bd:6f:90:
51:0d:56:74:a6:6a:45:a1:c5:c5:94:94:1e:d7:96:
4b:eb:51:22:9e:d5:1d:78:03:aa:e8:d4:bb:dd:1b:
d6:52:af:25:e4:a0:a1:ea:bf:a7:1b:d6:f8:8d:4a:
72:8c:e9:03:cd:de:bd:5e:b7:6e:53:76:7b:bc:bd:
48:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:52:6C:30:30:68:69:F5:4E:26:AA:1A:99:72:14:B9:EB:E2:9F:3A
X509v3 Authority Key Identifier:
keyid:21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:21:1e:01:5c:76:70:31:1c:8c:35:67:c3:2e:db:3d:3f:82:
47:3e:6d:ac:af:79:e2:61:15:98:55:c4:c6:38:d6:05:02:bf:
ee:2c:89:14:82:48:d5:56:3c:ce:fd:20:4a:ff:92:8a:c3:34:
ee:47:e0:b0:d5:d9:2a:33:81:f9:25:77:74:4f:24:bc:e6:ff:
89:c5:6b:54:b9:94:a8:7e:2c:19:37:c9:c5:71:6f:6a:78:b8:
30:80:b1:b1:e7:00:45:ea:f4:8c:14:b9:7e:a2:d6:81:d1:ba:
34:ab:13:fe:65:14:66:ec:33:c5:5e:5a:ab:dc:ce:87:c2:8d:
a4:d6:d8:d2:2d:c7:cf:6b:fe:ab:cc:f9:a6:65:98:aa:bc:17:
ff:2e:b3:ef:f1:44:44:0e:0d:3a:c5:73:a7:e2:e8:47:62:8f:
c9:cc:01:ee:8c:26:41:5a:50:9d:1e:0d:62:df:2f:fd:ea:cb:
b1:62:e4:18:2a:29:cd:e3:9d:77:cc:37:a3:ed:d0:3f:05:a4:
8a:37:c1:4d:67:b3:06:80:47:bc:9f:f9:a5:0e:c7:0a:0e:eb:
84:71:cf:c3:ec:a4:68:7e:07:09:73:03:ab:b1:ee:a4:81:61:
fb:67:03:f3:94:b2:3c:fc:25:8f:a0:64:c9:56:91:f4:29:21:
99:74:a9:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9P1sYIle4OGsLVSq4Y4bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNjQ2MmM4YzAwNjVhMGE2Y2VhZjI0Mzk4NWI2OTdjZjEz
NTdiZmIwHhcNMjUxMTA0MTMwMTA5WhcNMjUxMTA1MTMwMTA5WjAzMTEwLwYDVQQD
EygxMDUyNmMzMDMwNjg2OWY1NGUyNmFhMWE5OTcyMTRiOWViZTI5ZjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFAvt9qEkWrcpqgYl7c5Z0oiQ3HA
/f9F5umr/lSv0V+7PHQ8BgOAHf8XImMPoIaWfVfh4TMwtGmsgvr/SoGAmFKHyE2a
qk/Jwg8r8irWIDqvU8hl/CfOvNFw7ySFFfyFab7StbghQf3URdKk+m9okeYUIvYH
lWbLG+l4UqIZgzbx3EEXy70QK1GnZBRwVXok/o595f0MF5iDv5O16HZ2+c4CY+3A
W3Duxk3nGlWVukszpUvvM1PTdp0hcNTYXPG9b5BRDVZ0pmpFocXFlJQe15ZL61Ei
ntUdeAOq6NS73RvWUq8l5KCh6r+nG9b4jUpyjOkDzd69XrduU3Z7vL1IiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBSbDAwaGn1TiaqGplyFLnr4p86MB8GA1UdIwQY
MBaAFCFkYsjABloKbOryQ5hbaXzxNXv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVdSaXlNQUdXZ3BzNnZKRG1GdHBmUEUxZV9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9mZDkwYzUtMTgzYy00ZDY5LTkyZjEt
NTZiYzcwOTY3ODg1LzEvSVdSaXlNQUdXZ3BzNnZKRG1GdHBmUEUxZV9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9mZDkwYzUtMTgzYy00ZDY5LTkyZjEtNTZiYzcwOTY3ODg1
LzEvSVdSaXlNQUdXZ3BzNnZKRG1GdHBmUEUxZV9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPSEeAVx2
cDEcjDVnwy7bPT+CRz5trK954mEVmFXExjjWBQK/7iyJFIJI1VY8zv0gSv+SisM0
7kfgsNXZKjOB+SV3dE8kvOb/icVrVLmUqH4sGTfJxXFvani4MICxsecARer0jBS5
fqLWgdG6NKsT/mUUZuwzxV5aq9zOh8KNpNbY0i3Hz2v+q8z5pmWYqrwX/y6z7/FE
RA4NOsVzp+LoR2KPycwB7owmQVpQnR4NYt8v/erLsWLkGCopzeOdd8w3o+3QPwWk
ijfBTWezBoBHvJ/5pQ7HCg7rhHHPw+ykaH4HCXMDq7HupIFh+2cD85SyPPwlj6Bk
yVaR9CkhmXSphw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:36:23 2025 by rpki-client