Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
File: ihzh0TW_LPjowT8z7BHIUjcD3HU.mft (raw, json)
Hash identifier: CLiNbVJm6FnNDI0YBpr8Ed0iPBGDBzyaXVcKz7+TUt4=
Subject key identifier: 4E:6E:E3:5B:12:75:02:69:E1:C6:DB:88:0C:39:99:15:88:CF:FB:74
Authority key identifier: 8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
Certificate issuer: /CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Certificate serial: 019A4EF47ACFA1C5F56EE173ED52C5294DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
Manifest number: 1600
Signing time: Tue 04 Nov 2025 13:00:36 +0000
Manifest this update: Tue 04 Nov 2025 13:00:36 +0000
Manifest next update: Wed 05 Nov 2025 13:00:36 +0000
Files and hashes: 1: 0bVvhAd6bRTtpMiMWU5m6m_mX6s.roa (hash: k+FefGaNlibbtGtr5Aq6DThKW8SPKZcgwMtTZ3i/xpM=)
2: 2L9tST2xxsB46ZV-Wm7-7d0Z8Yc.roa (hash: 2H+U81Sea1KvCbnxcSszHg71YCfhD1GEm2cdKStIW6w=)
3: AEk4t1mqQHdHzuvnZ8F04P17d44.roa (hash: 7D43zZS2UD0q0VGySwNpiUk+9PmD8nPWUlHBvAE5epk=)
4: ihzh0TW_LPjowT8z7BHIUjcD3HU.crl (hash: Z3/TJsA7IeG26TaGp2JKIXzUTmrY9svZDAbTyHxCKJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:7a:cf:a1:c5:f5:6e:e1:73:ed:52:c5:29:4d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Validity
Not Before: Nov 4 13:00:36 2025 GMT
Not After : Nov 5 13:00:36 2025 GMT
Subject: CN=4e6ee35b12750269e1c6db880c39991588cffb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:da:a4:8f:51:36:39:0c:c2:7b:d4:d4:6a:
12:7e:48:29:1b:d6:86:77:55:6a:f1:e1:1b:05:66:
25:29:12:41:66:62:5e:1f:c4:bc:4f:f1:69:b2:02:
27:96:33:ec:7f:ba:cc:5b:87:ed:67:94:f6:85:e4:
2b:45:d3:8b:4c:2c:d6:61:70:ac:e2:71:1d:0a:db:
6c:5f:e5:0f:30:a9:77:31:12:1c:34:4a:5e:c5:85:
03:15:e9:4b:0f:3a:1c:90:77:58:8a:7e:d1:10:1e:
24:91:35:cb:9e:36:7d:a7:b8:fa:29:72:ee:00:93:
e0:64:19:ab:75:1f:24:84:9a:7f:e9:b6:df:85:2b:
48:3f:ff:55:c2:77:9c:3d:4e:ad:d6:c0:e0:90:1b:
1a:da:45:8a:f5:29:37:93:cc:75:a3:04:71:bc:3a:
f3:b1:38:a1:60:98:0a:cb:c7:32:89:e8:71:6c:52:
fe:93:7d:ab:10:15:eb:a5:76:45:93:5e:2f:bc:10:
41:97:41:f1:0a:b2:fc:77:b0:52:d7:61:2e:50:21:
61:e2:c3:36:e2:da:ef:b5:e5:3f:9c:65:ee:ce:2d:
03:98:ca:66:b4:04:c9:1f:f1:d0:0f:60:ed:e5:2c:
cc:26:23:4e:e5:cb:43:4d:72:80:f1:57:5e:2d:62:
03:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6E:E3:5B:12:75:02:69:E1:C6:DB:88:0C:39:99:15:88:CF:FB:74
X509v3 Authority Key Identifier:
keyid:8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d1:44:73:ce:bc:98:08:16:0a:20:99:1c:fa:5f:dc:6a:12:
9a:c0:fb:84:d6:2f:0c:b8:ca:4e:be:a6:b5:70:14:ec:58:e8:
4e:00:9c:88:61:74:ad:3d:39:4f:a0:b5:94:fb:65:b8:98:4a:
f2:2a:69:4d:9e:b3:47:75:9d:85:f4:e7:d0:d1:3c:1a:8c:eb:
b8:d3:10:15:8c:97:ab:cc:ff:44:57:db:7c:ff:22:4a:c1:ae:
50:92:8e:70:ce:1f:8f:95:2a:fe:48:6c:c8:b8:2f:59:36:c3:
4c:62:da:47:9e:17:e4:3f:2a:f1:cb:c1:db:05:fb:22:08:7b:
ef:11:27:a7:ff:33:f4:61:be:c9:35:be:cb:2a:3f:7e:60:46:
ff:39:d6:02:d8:e1:73:d2:11:db:63:60:65:c6:25:ab:8b:66:
62:36:64:e7:3d:20:10:db:76:98:c1:44:de:3d:3c:2a:e8:46:
c5:a5:a1:a0:d8:f2:c8:61:a5:54:03:13:83:05:4e:0f:ba:5c:
4c:2d:44:96:7f:2a:4e:82:ee:b7:b3:a7:bc:a2:55:ea:27:3e:
09:44:28:93:a4:b4:48:88:0f:9f:c7:58:b4:e6:0e:df:07:e4:
0c:de:04:c1:50:eb:5e:02:41:05:07:0a:a6:e9:78:89:05:1a:
78:dc:57:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9HrPocX1buFz7VLFKU3AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMWNlMWQxMzViZjJjZjhlOGMxM2YzM2VjMTFjODUyMzcw
M2RjNzUwHhcNMjUxMTA0MTMwMDM2WhcNMjUxMTA1MTMwMDM2WjAzMTEwLwYDVQQD
Eyg0ZTZlZTM1YjEyNzUwMjY5ZTFjNmRiODgwYzM5OTkxNTg4Y2ZmYjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum7apI9RNjkMwnvU1GoSfkgpG9aG
d1Vq8eEbBWYlKRJBZmJeH8S8T/FpsgInljPsf7rMW4ftZ5T2heQrRdOLTCzWYXCs
4nEdCttsX+UPMKl3MRIcNEpexYUDFelLDzockHdYin7REB4kkTXLnjZ9p7j6KXLu
AJPgZBmrdR8khJp/6bbfhStIP/9VwnecPU6t1sDgkBsa2kWK9Sk3k8x1owRxvDrz
sTihYJgKy8cyiehxbFL+k32rEBXrpXZFk14vvBBBl0HxCrL8d7BS12EuUCFh4sM2
4trvteU/nGXuzi0DmMpmtATJH/HQD2Dt5SzMJiNO5ctDTXKA8VdeLWIDIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5u41sSdQJp4cbbiAw5mRWIz/t0MB8GA1UdIwQY
MBaAFIoc4dE1vyz46ME/M+wRyFI3A9x1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWh6aDBUV19MUGpvd1Q4ejdCSElVamNEM0hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kYWY5NjAtZDA2MC00OWZjLWFmNDIt
ZGVlMjkyZWE4N2EzLzEvaWh6aDBUV19MUGpvd1Q4ejdCSElVamNEM0hVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9kYWY5NjAtZDA2MC00OWZjLWFmNDItZGVlMjkyZWE4N2Ez
LzEvaWh6aDBUV19MUGpvd1Q4ejdCSElVamNEM0hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKNFEc868
mAgWCiCZHPpf3GoSmsD7hNYvDLjKTr6mtXAU7FjoTgCciGF0rT05T6C1lPtluJhK
8ippTZ6zR3WdhfTn0NE8GozruNMQFYyXq8z/RFfbfP8iSsGuUJKOcM4fj5Uq/khs
yLgvWTbDTGLaR54X5D8q8cvB2wX7Igh77xEnp/8z9GG+yTW+yyo/fmBG/znWAtjh
c9IR22NgZcYlq4tmYjZk5z0gENt2mMFE3j08KuhGxaWhoNjyyGGlVAMTgwVOD7pc
TC1Eln8qToLut7OnvKJV6ic+CUQok6S0SIgPn8dYtOYO3wfkDN4EwVDrXgJBBQcK
pul4iQUaeNxXlw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:10:16 2025 by rpki-client