Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
File: IG0YKjtEp74F0-5w3JCoXVer-40.mft (raw, json)
Hash identifier: X+wgGFRtdLyBoUbU8W9uu2CcUOLKIm7LLvLRG8/NQmI=
Subject key identifier: DD:B5:A6:AE:C1:50:DD:99:B2:1B:20:79:F5:B9:53:3F:66:F2:16:3B
Authority key identifier: 20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D
Certificate issuer: /CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
Certificate serial: 019A5187F6F0767DED55D1CC42170348C931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
Manifest number: 1670
Signing time: Wed 05 Nov 2025 01:00:56 +0000
Manifest this update: Wed 05 Nov 2025 01:00:56 +0000
Manifest next update: Thu 06 Nov 2025 01:00:56 +0000
Files and hashes: 1: IG0YKjtEp74F0-5w3JCoXVer-40.crl (hash: oRpS+060UDYt9i3ESJZjNDTEBpQW3EhQ24MsFrntGWY=)
2: oL5s4daZ2-CvSDbZedMFWpoaJg4.roa (hash: rBJTh0rRi4HBxgXoejT0Pcmh+tBjyPVq1RYIy0Ljiec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:f6:f0:76:7d:ed:55:d1:cc:42:17:03:48:c9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
Validity
Not Before: Nov 5 01:00:56 2025 GMT
Not After : Nov 6 01:00:56 2025 GMT
Subject: CN=ddb5a6aec150dd99b21b2079f5b9533f66f2163b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d4:41:8c:3d:25:15:6c:3a:65:31:d9:49:96:
c4:9c:dd:44:cd:b0:94:e1:33:ea:39:f3:de:39:26:
c5:2b:91:d5:0e:6e:be:a9:6f:73:55:62:6a:f2:b0:
c9:d3:6a:fe:db:f9:41:08:68:da:da:43:ae:cb:59:
7f:eb:e1:ac:24:96:1d:26:08:2b:c9:15:14:b5:9d:
83:d2:4e:79:37:82:25:ff:a1:73:0e:cd:80:5e:37:
ab:94:c7:ea:aa:f2:8a:f6:41:92:9d:e0:32:ae:e0:
5d:f6:65:53:4b:74:10:99:ea:0b:26:9d:82:21:b1:
72:f1:85:fa:d1:59:81:4e:24:c4:db:4d:16:5d:ad:
da:93:b3:43:19:9b:4e:38:f3:ef:fa:75:81:11:32:
f2:35:08:e1:06:86:ca:9a:3b:96:b6:e3:27:ed:01:
94:a8:b4:45:34:a8:f2:a6:69:78:aa:7b:21:df:1f:
77:2b:3d:5f:e2:4d:19:b9:8a:3d:84:9d:fe:45:c0:
71:b6:48:3a:a0:cf:91:e8:73:fd:83:16:f7:bb:f6:
95:38:08:c4:fc:fa:af:a6:49:d8:cc:14:7b:ea:10:
74:e9:17:e5:fc:cf:e2:d3:25:60:a1:ce:24:96:76:
8b:91:bc:a2:7b:07:ad:40:7c:73:86:68:d0:9d:f9:
b5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B5:A6:AE:C1:50:DD:99:B2:1B:20:79:F5:B9:53:3F:66:F2:16:3B
X509v3 Authority Key Identifier:
keyid:20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:77:c8:f1:2b:f2:34:b9:c9:f5:5b:b1:59:6f:a9:8e:27:cf:
f5:20:84:5c:0f:e3:56:60:d6:5c:20:98:a0:c5:d4:52:a4:a6:
e2:3e:6b:f6:4d:8a:5d:e2:a6:80:7c:75:31:d5:6c:69:e5:9f:
f0:b9:85:9d:85:ad:c9:bd:5d:82:23:66:c8:75:78:c8:62:19:
33:64:11:37:d7:30:a4:56:f6:59:0b:de:57:6a:73:d3:ce:51:
b5:6d:4e:1e:92:21:78:31:a1:04:ce:01:2b:63:bd:35:e4:39:
da:ea:c3:cf:cd:e0:e6:03:9e:86:63:7e:ed:7b:22:06:39:92:
71:33:45:c8:5d:2f:82:ca:9a:3b:7f:85:d4:2f:e2:6f:ad:e0:
c8:c6:01:f3:7f:f6:53:d4:d8:f6:74:07:6e:5c:8f:d4:a8:a8:
75:1f:f1:57:20:62:9a:88:61:7b:9e:dd:06:2c:b6:8c:01:4a:
aa:67:db:84:45:0d:db:5f:eb:58:ce:f4:a5:0a:ee:7a:00:6a:
0f:bb:20:96:88:d5:57:98:3f:b2:60:88:ce:45:93:ba:c1:05:
ae:21:51:e6:1f:1a:8f:94:be:cc:5f:2e:34:5f:78:fd:44:83:
cc:92:78:5e:cf:68:0e:96:c5:a5:ba:e5:48:e5:bd:53:16:32:
04:0b:52:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh/bwdn3tVdHMQhcDSMkxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNmQxODJhM2I0NGE3YmUwNWQzZWU3MGRjOTBhODVkNTdh
YmZiOGQwHhcNMjUxMTA1MDEwMDU2WhcNMjUxMTA2MDEwMDU2WjAzMTEwLwYDVQQD
EyhkZGI1YTZhZWMxNTBkZDk5YjIxYjIwNzlmNWI5NTMzZjY2ZjIxNjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtRBjD0lFWw6ZTHZSZbEnN1EzbCU
4TPqOfPeOSbFK5HVDm6+qW9zVWJq8rDJ02r+2/lBCGja2kOuy1l/6+GsJJYdJggr
yRUUtZ2D0k55N4Il/6FzDs2AXjerlMfqqvKK9kGSneAyruBd9mVTS3QQmeoLJp2C
IbFy8YX60VmBTiTE200WXa3ak7NDGZtOOPPv+nWBETLyNQjhBobKmjuWtuMn7QGU
qLRFNKjypml4qnsh3x93Kz1f4k0ZuYo9hJ3+RcBxtkg6oM+R6HP9gxb3u/aVOAjE
/PqvpknYzBR76hB06Rfl/M/i0yVgoc4klnaLkbyiewetQHxzhmjQnfm10wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN21pq7BUN2ZshsgefW5Uz9m8hY7MB8GA1UdIwQY
MBaAFCBtGCo7RKe+BdPucNyQqF1Xq/uNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUcwWUtqdEVwNzRGMC01dzNKQ29YVmVyLTQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lNmYyZWUtMDQ3Ni00MGI0LWJiNmEt
NjYwNzc4MDk5YjNkLzEvSUcwWUtqdEVwNzRGMC01dzNKQ29YVmVyLTQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9lNmYyZWUtMDQ3Ni00MGI0LWJiNmEtNjYwNzc4MDk5YjNk
LzEvSUcwWUtqdEVwNzRGMC01dzNKQ29YVmVyLTQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg3fI8Svy
NLnJ9VuxWW+pjifP9SCEXA/jVmDWXCCYoMXUUqSm4j5r9k2KXeKmgHx1MdVsaeWf
8LmFnYWtyb1dgiNmyHV4yGIZM2QRN9cwpFb2WQveV2pz085RtW1OHpIheDGhBM4B
K2O9NeQ52urDz83g5gOehmN+7XsiBjmScTNFyF0vgsqaO3+F1C/ib63gyMYB83/2
U9TY9nQHblyP1KiodR/xVyBimohhe57dBiy2jAFKqmfbhEUN21/rWM70pQruegBq
D7sglojVV5g/smCIzkWTusEFriFR5h8aj5S+zF8uNF94/USDzJJ4Xs9oDpbFpbrl
SOW9UxYyBAtSew==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:30:34 2025 by rpki-client