Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
File: IPX_B2cEUj_2vogrh-76gHsYiqk.mft (raw, json)
Hash identifier: BHPai6Gofl8vcB/ax9tcJIpFWeH0OOUUjJFk+vRBlds=
Subject key identifier: 93:31:BD:67:BB:AA:FC:AF:A0:37:11:C0:B2:57:1C:0E:CA:0C:1E:79
Authority key identifier: 20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9
Certificate issuer: /CN=20f5ff076704523ff6be882b87eefa807b188aa9
Certificate serial: 019A4E4F6E55336FEC5C54A72BAACF14E428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 10:00:19 +0000
Manifest this update: Tue 04 Nov 2025 10:00:19 +0000
Manifest next update: Wed 05 Nov 2025 10:00:19 +0000
Files and hashes: 1: GNNeHZyvG9VKvKXPSj2VAqX1Q4o.roa (hash: l5teIcaNt4zv8uIriCA79rj79r37yRmFeLrH41aNJJA=)
2: IPX_B2cEUj_2vogrh-76gHsYiqk.crl (hash: R5R4HmqiBrRkDW1LhCQQhQM3aIjhFhZQD3oazyrK+qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:6e:55:33:6f:ec:5c:54:a7:2b:aa:cf:14:e4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f5ff076704523ff6be882b87eefa807b188aa9
Validity
Not Before: Nov 4 10:00:19 2025 GMT
Not After : Nov 5 10:00:19 2025 GMT
Subject: CN=9331bd67bbaafcafa03711c0b2571c0eca0c1e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:85:a5:09:bb:91:87:26:e1:ff:42:2c:46:ff:
4f:b6:38:f6:41:1b:83:83:e7:00:3e:34:4a:94:7a:
6b:e3:65:9c:89:c7:3e:ac:49:bf:cb:bb:8b:cd:80:
7d:af:4e:e5:a3:1b:66:07:a4:e0:d5:4a:2b:d0:a1:
85:e1:98:ab:07:75:57:82:56:c7:f1:21:68:6e:ee:
64:7b:41:09:d3:73:64:b9:24:c0:98:6a:c8:fb:5d:
25:36:14:3e:99:4f:86:71:82:90:d8:44:c4:bb:96:
fc:f0:e1:64:f6:97:72:6f:32:44:93:40:dd:54:97:
66:1e:1a:01:0a:f5:8f:c7:83:48:f6:ca:f3:02:12:
f4:c3:04:0a:ed:cb:2a:09:86:05:e4:d7:9b:bd:ed:
a6:63:d8:c8:5b:18:85:5f:1d:34:b0:ca:84:1d:a3:
d2:b1:ca:83:42:34:94:77:8e:82:a6:5c:8a:31:91:
1c:38:70:f1:61:43:08:89:18:df:b5:1e:2b:ec:2b:
47:3b:fc:60:14:38:0e:69:35:20:88:cc:41:bb:f0:
04:5f:4d:ae:25:cf:3a:34:76:91:08:3a:67:5f:db:
d0:33:4e:bb:ea:59:f9:ec:89:0b:3f:ee:62:a9:f2:
b3:d7:e8:fe:b8:db:be:f2:c0:ed:c3:ad:58:f9:23:
02:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:31:BD:67:BB:AA:FC:AF:A0:37:11:C0:B2:57:1C:0E:CA:0C:1E:79
X509v3 Authority Key Identifier:
keyid:20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:38:de:c1:54:fb:4b:07:23:dd:83:97:54:eb:8d:40:f3:86:
d7:fe:6a:54:aa:10:fd:e2:aa:f9:e3:38:05:35:28:e9:97:76:
db:ab:04:33:b5:cd:ca:28:2d:f6:4f:34:2d:b3:bb:3a:b1:99:
d7:3d:f5:31:e2:74:91:47:b8:ef:4b:1c:b8:cc:2f:49:21:ff:
4b:f2:06:49:45:e8:f6:50:ed:39:94:47:80:22:a0:ea:79:20:
64:eb:39:0d:52:67:14:23:d1:89:b0:fa:de:20:21:a3:02:b4:
17:89:8a:cc:ff:81:01:45:e1:32:79:f1:f6:ca:05:22:b2:72:
ff:c2:c8:cd:1d:b9:6d:12:35:53:cb:fe:8b:99:c5:0b:d6:17:
5d:de:2b:75:ed:14:99:92:4f:6c:81:2c:ad:56:e4:3c:55:54:
6f:af:36:17:b9:ad:d1:39:fe:04:7b:d7:e6:02:09:b9:04:99:
53:61:04:3b:b5:1d:28:fa:96:de:81:c1:c9:6b:6c:0a:dc:e8:
58:53:9c:1d:a6:56:4b:49:00:f4:39:a4:07:63:22:da:d7:40:
56:73:1b:ce:e8:3f:de:78:3d:02:ea:f3:4e:b1:0d:be:8b:60:
3a:00:2b:0a:1a:09:b5:fb:17:61:b0:a4:ef:fc:00:9e:f2:19:
e9:89:28:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT25VM2/sXFSnK6rPFOQoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZjVmZjA3NjcwNDUyM2ZmNmJlODgyYjg3ZWVmYTgwN2Ix
ODhhYTkwHhcNMjUxMTA0MTAwMDE5WhcNMjUxMTA1MTAwMDE5WjAzMTEwLwYDVQQD
Eyg5MzMxYmQ2N2JiYWFmY2FmYTAzNzExYzBiMjU3MWMwZWNhMGMxZTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYWlCbuRhybh/0IsRv9Ptjj2QRuD
g+cAPjRKlHpr42Wcicc+rEm/y7uLzYB9r07loxtmB6Tg1Uor0KGF4ZirB3VXglbH
8SFobu5ke0EJ03NkuSTAmGrI+10lNhQ+mU+GcYKQ2ETEu5b88OFk9pdybzJEk0Dd
VJdmHhoBCvWPx4NI9srzAhL0wwQK7csqCYYF5Nebve2mY9jIWxiFXx00sMqEHaPS
scqDQjSUd46CplyKMZEcOHDxYUMIiRjftR4r7CtHO/xgFDgOaTUgiMxBu/AEX02u
Jc86NHaRCDpnX9vQM0676ln57IkLP+5iqfKz1+j+uNu+8sDtw61Y+SMCQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMxvWe7qvyvoDcRwLJXHA7KDB55MB8GA1UdIwQY
MBaAFCD1/wdnBFI/9r6IK4fu+oB7GIqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVBYX0IyY0VVal8ydm9ncmgtNzZnSHNZaXFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC83MjcyOTYtMmViYy00ZGZjLWE1NDct
ZjZhN2I0OWY5ODFhLzEvSVBYX0IyY0VVal8ydm9ncmgtNzZnSHNZaXFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC83MjcyOTYtMmViYy00ZGZjLWE1NDctZjZhN2I0OWY5ODFh
LzEvSVBYX0IyY0VVal8ydm9ncmgtNzZnSHNZaXFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnTjewVT7
Swcj3YOXVOuNQPOG1/5qVKoQ/eKq+eM4BTUo6Zd226sEM7XNyigt9k80LbO7OrGZ
1z31MeJ0kUe470scuMwvSSH/S/IGSUXo9lDtOZRHgCKg6nkgZOs5DVJnFCPRibD6
3iAhowK0F4mKzP+BAUXhMnnx9soFIrJy/8LIzR25bRI1U8v+i5nFC9YXXd4rde0U
mZJPbIEsrVbkPFVUb682F7mt0Tn+BHvX5gIJuQSZU2EEO7UdKPqW3oHByWtsCtzo
WFOcHaZWS0kA9DmkB2Mi2tdAVnMbzug/3ng9AurzTrENvotgOgArChoJtfsXYbCk
7/wAnvIZ6YkoIA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:32 2025 by rpki-client