Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
File: IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft (raw, json)
Hash identifier: Y9UALZ3Uv3E/WyrZJnFPTpc9v6f0+WiGZKPLY4YuZM0=
Subject key identifier: D8:DD:B9:DE:A1:AF:E8:B1:AB:0E:9F:1C:37:C8:A8:C8:1A:ED:19:4A
Authority key identifier: 22:B2:7A:B0:D5:5F:8A:E0:DD:A8:6F:DE:F1:C3:57:24:E1:88:5E:4F
Certificate issuer: /CN=22b27ab0d55f8ae0dda86fdef1c35724e1885e4f
Certificate serial: 019A4F98C4E81ED9FF53803F5BBE2A2D342B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
Manifest number: 068E
Signing time: Tue 04 Nov 2025 16:00:03 +0000
Manifest this update: Tue 04 Nov 2025 16:00:03 +0000
Manifest next update: Wed 05 Nov 2025 16:00:03 +0000
Files and hashes: 1: IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl (hash: 4f3t3W7+VxxK7xSQRisJJcx1iZmEmbUz/vvmYzuwV5Q=)
2: zXLMwVTkvtRtqBEEK8m7kFIV-bU.roa (hash: t9hVNP/nAzK1Dyce9djTLoexqpTbWSAapAI0vD+z2PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:c4:e8:1e:d9:ff:53:80:3f:5b:be:2a:2d:34:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b27ab0d55f8ae0dda86fdef1c35724e1885e4f
Validity
Not Before: Nov 4 16:00:03 2025 GMT
Not After : Nov 5 16:00:03 2025 GMT
Subject: CN=d8ddb9dea1afe8b1ab0e9f1c37c8a8c81aed194a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7e:ab:c6:ea:58:a1:4e:51:46:0e:b4:7e:82:
8c:43:a4:ad:84:34:06:7f:2a:31:38:3f:4d:33:ef:
29:d0:75:64:ed:31:b9:31:d5:f2:55:5b:4b:f0:f9:
8b:8a:2b:ad:d3:c4:7d:96:0d:5e:e5:87:0f:00:60:
d4:46:f4:b9:fd:b0:23:3c:95:c9:69:74:25:da:d8:
ff:e1:0b:a5:01:a5:a4:d8:20:50:62:36:a2:86:59:
7d:ac:f6:b6:73:0a:f3:3e:d3:30:6f:b1:71:d2:13:
00:e5:44:9d:a1:f7:9b:19:2b:70:76:14:9f:db:a8:
73:d2:b2:91:a1:5e:51:1b:2c:97:c6:9f:e1:24:1b:
78:43:84:9e:a2:bf:20:01:b6:9b:e1:6f:ad:63:46:
dd:59:43:88:f3:72:94:91:61:fe:c7:df:32:a7:43:
05:e5:45:07:71:3a:88:fd:8a:47:73:c2:c9:08:b5:
3c:49:c8:2b:e2:1e:72:41:1e:6f:93:3f:2e:51:a0:
15:23:78:f2:ed:b3:23:2f:d6:d8:8d:da:7f:cc:ba:
a7:73:1b:2c:da:36:d6:03:39:1e:10:e3:8f:5b:ac:
8e:6f:48:41:df:63:54:7a:54:60:d3:84:2c:5f:44:
16:3a:1f:12:61:eb:9d:49:5e:0b:14:c6:3c:8f:d9:
5c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DD:B9:DE:A1:AF:E8:B1:AB:0E:9F:1C:37:C8:A8:C8:1A:ED:19:4A
X509v3 Authority Key Identifier:
keyid:22:B2:7A:B0:D5:5F:8A:E0:DD:A8:6F:DE:F1:C3:57:24:E1:88:5E:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f6:28:0e:66:f8:fb:1c:c6:71:6a:26:41:03:1a:e6:08:43:
21:01:48:5d:06:0d:49:14:79:71:08:20:f4:c1:45:c6:1c:24:
c4:cc:7b:69:ce:f6:0d:40:d2:9e:3e:2e:cd:c5:b1:b3:eb:b7:
85:7e:56:d7:50:d3:6b:69:c6:2d:94:3f:ee:61:46:5d:cf:7b:
09:dc:28:04:80:b5:a4:de:90:90:14:61:e8:fd:4b:b3:36:46:
a7:19:0d:dc:99:09:bb:dc:c1:b6:e3:dd:a3:07:49:9c:cf:ca:
e0:5c:09:b9:9e:0b:51:43:6d:a6:3f:30:5b:f4:ee:9d:3c:27:
cb:d8:5d:9a:98:5b:9c:37:a0:52:be:23:14:8a:6a:58:75:bd:
e4:3e:36:e4:5b:d6:77:c8:da:5d:fc:6f:ad:77:89:6f:ab:a6:
52:fe:7f:ee:aa:c2:f6:04:1f:75:90:b6:e6:f8:79:2c:c5:9c:
b5:12:6a:12:5b:cb:2e:d3:23:1d:1d:f6:d0:da:bd:2f:9b:88:
06:59:b3:62:1d:aa:29:bd:cf:44:6a:41:7e:81:36:d7:33:ac:
08:5a:6b:24:1e:32:98:fc:a3:d9:29:29:54:27:3e:d9:69:ce:
52:f1:dd:f2:bf:f6:d8:a6:5b:3e:e1:5f:83:28:97:b9:c5:d1:
71:62:7f:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmMToHtn/U4A/W74qLTQrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYjI3YWIwZDU1ZjhhZTBkZGE4NmZkZWYxYzM1NzI0ZTE4
ODVlNGYwHhcNMjUxMTA0MTYwMDAzWhcNMjUxMTA1MTYwMDAzWjAzMTEwLwYDVQQD
EyhkOGRkYjlkZWExYWZlOGIxYWIwZTlmMWMzN2M4YThjODFhZWQxOTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjH6rxupYoU5RRg60foKMQ6SthDQG
fyoxOD9NM+8p0HVk7TG5MdXyVVtL8PmLiiut08R9lg1e5YcPAGDURvS5/bAjPJXJ
aXQl2tj/4QulAaWk2CBQYjaihll9rPa2cwrzPtMwb7Fx0hMA5USdofebGStwdhSf
26hz0rKRoV5RGyyXxp/hJBt4Q4Seor8gAbab4W+tY0bdWUOI83KUkWH+x98yp0MF
5UUHcTqI/YpHc8LJCLU8Scgr4h5yQR5vkz8uUaAVI3jy7bMjL9bYjdp/zLqncxss
2jbWAzkeEOOPW6yOb0hB32NUelRg04QsX0QWOh8SYeudSV4LFMY8j9lcGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjdud6hr+ixqw6fHDfIqMga7RlKMB8GA1UdIwQY
MBaAFCKyerDVX4rg3ahv3vHDVyThiF5PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXJKNnNOVmZpdURkcUdfZThjTlhKT0dJWGs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iNDU4ZWUtZjZhNS00ZTJjLTgxMTgt
ZGU2NjQ0YzNkYWVkLzEvSXJKNnNOVmZpdURkcUdfZThjTlhKT0dJWGs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9iNDU4ZWUtZjZhNS00ZTJjLTgxMTgtZGU2NjQ0YzNkYWVk
LzEvSXJKNnNOVmZpdURkcUdfZThjTlhKT0dJWGs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn/YoDmb4
+xzGcWomQQMa5ghDIQFIXQYNSRR5cQgg9MFFxhwkxMx7ac72DUDSnj4uzcWxs+u3
hX5W11DTa2nGLZQ/7mFGXc97CdwoBIC1pN6QkBRh6P1LszZGpxkN3JkJu9zBtuPd
owdJnM/K4FwJuZ4LUUNtpj8wW/TunTwny9hdmphbnDegUr4jFIpqWHW95D425FvW
d8jaXfxvrXeJb6umUv5/7qrC9gQfdZC25vh5LMWctRJqElvLLtMjHR320Nq9L5uI
BlmzYh2qKb3PRGpBfoE21zOsCFprJB4ymPyj2SkpVCc+2WnOUvHd8r/22KZbPuFf
gyiXucXRcWJ/PQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:00 2025 by rpki-client