Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
File: IBjvCLVd2yDIgWpiGkWc25J7MgE.mft (raw, json)
Hash identifier: MJOLB+p7oCjurLcL58CL8fegPTfDAwj5EcvX54R3p2U=
Subject key identifier: 5F:8B:73:DD:45:9F:42:B5:BB:9C:B6:3D:0A:9C:B1:63:D9:7D:12:63
Authority key identifier: 20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
Certificate issuer: /CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Certificate serial: 019A4EF415EF49F5682A50E04643329614ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
Manifest number: 16A0
Signing time: Tue 04 Nov 2025 13:00:10 +0000
Manifest this update: Tue 04 Nov 2025 13:00:10 +0000
Manifest next update: Wed 05 Nov 2025 13:00:10 +0000
Files and hashes: 1: IBjvCLVd2yDIgWpiGkWc25J7MgE.crl (hash: K5s4g8bg7qk4yZJtJGZy1ySr4YiKlcE8rQVhf+he24A=)
2: sg6Ke3Csa6eOc_sincTW9jDFk9g.roa (hash: JJ9uMfjWarSgHm6HNb7BDGcOt4jlyu+d939+XIEHnuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:15:ef:49:f5:68:2a:50:e0:46:43:32:96:14:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Validity
Not Before: Nov 4 13:00:10 2025 GMT
Not After : Nov 5 13:00:10 2025 GMT
Subject: CN=5f8b73dd459f42b5bb9cb63d0a9cb163d97d1263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e9:13:ca:75:fb:5a:ed:a5:88:4f:44:49:2d:
fa:8a:b3:a5:41:07:8b:b4:75:2b:ca:ae:3f:38:9b:
cb:3e:51:27:5f:d1:18:d8:0e:13:d5:f1:16:fb:c5:
e4:55:fc:b7:02:b3:f2:74:70:28:eb:32:20:f8:22:
af:64:9b:4f:fb:4c:5e:e5:5f:3d:e3:fe:e0:5b:16:
2e:e7:63:31:23:5d:8a:8d:ca:cc:74:85:62:f6:f3:
63:e3:0b:93:68:52:80:7e:cc:71:56:f4:61:72:da:
36:4f:ca:b8:c1:ea:e1:2c:8f:10:6c:0a:e3:46:4e:
01:c2:7e:94:63:e7:2c:ee:83:38:43:b8:78:b2:6e:
c3:5d:8a:30:9f:27:0c:cb:f9:18:f9:19:f6:13:d9:
cc:89:a0:02:e7:f5:f5:e2:a9:06:35:d3:2b:1e:74:
f6:7c:dd:51:65:51:3d:b8:b6:b3:0f:2f:c4:60:e4:
65:d5:4d:67:ac:bb:da:6b:ca:43:c5:4d:83:66:ef:
42:24:07:31:b2:b1:c1:ac:22:64:30:14:d1:87:a5:
05:be:da:a4:54:23:2e:4f:28:70:54:07:18:bb:04:
2f:52:bd:e4:1b:7f:80:f4:95:2d:4e:5c:b1:91:a0:
cd:1c:01:6b:4e:8f:13:dd:97:5b:eb:a0:38:28:0d:
d2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8B:73:DD:45:9F:42:B5:BB:9C:B6:3D:0A:9C:B1:63:D9:7D:12:63
X509v3 Authority Key Identifier:
keyid:20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:85:00:0a:f4:ce:86:78:c6:7e:cb:e8:7c:27:f7:41:b0:f1:
5a:c6:cf:59:8d:e9:0a:78:a7:47:68:30:a1:33:d1:51:7b:fb:
ed:40:f5:6b:b4:20:5b:c1:6e:ca:85:0c:eb:e5:ca:dd:03:71:
2a:fc:eb:a3:c0:e0:fa:05:c6:cf:71:cd:1b:be:f5:d8:79:67:
6e:50:cf:e4:98:d3:e1:32:45:39:55:86:e3:1a:f1:71:5a:2a:
a1:fa:22:0c:24:37:17:0d:cc:6c:9e:62:cc:f0:1f:0d:99:95:
da:ec:5d:de:8f:6b:9a:fa:82:f4:b4:1c:2f:b8:0b:96:e4:a4:
73:e2:cc:b4:73:88:2c:a1:bf:6c:4c:d6:13:7a:59:b1:a6:b7:
72:46:3d:c2:d7:d7:bf:46:0b:d5:52:53:79:5e:84:22:7e:b4:
e7:c3:92:09:71:42:7b:39:8e:c1:81:6a:9f:ad:db:f4:fa:1f:
85:5c:4b:98:ae:06:dd:83:b5:29:90:23:31:6e:5d:50:23:d1:
b4:f3:38:42:ff:40:35:94:f2:0b:96:3e:f4:49:fa:5c:b4:df:
48:54:9d:b9:2b:8d:79:7c:a1:67:b0:44:2b:69:f6:6a:0e:62:
2a:81:f6:a2:5e:02:7d:67:eb:66:31:95:66:4c:cb:45:94:f3:
59:c8:3f:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9BXvSfVoKlDgRkMylhTtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMThlZjA4YjU1ZGRiMjBjODgxNmE2MjFhNDU5Y2RiOTI3
YjMyMDEwHhcNMjUxMTA0MTMwMDEwWhcNMjUxMTA1MTMwMDEwWjAzMTEwLwYDVQQD
Eyg1ZjhiNzNkZDQ1OWY0MmI1YmI5Y2I2M2QwYTljYjE2M2Q5N2QxMjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOkTynX7Wu2liE9ESS36irOlQQeL
tHUryq4/OJvLPlEnX9EY2A4T1fEW+8XkVfy3ArPydHAo6zIg+CKvZJtP+0xe5V89
4/7gWxYu52MxI12KjcrMdIVi9vNj4wuTaFKAfsxxVvRhcto2T8q4werhLI8QbArj
Rk4Bwn6UY+cs7oM4Q7h4sm7DXYownycMy/kY+Rn2E9nMiaAC5/X14qkGNdMrHnT2
fN1RZVE9uLazDy/EYORl1U1nrLvaa8pDxU2DZu9CJAcxsrHBrCJkMBTRh6UFvtqk
VCMuTyhwVAcYuwQvUr3kG3+A9JUtTlyxkaDNHAFrTo8T3Zdb66A4KA3SFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+Lc91Fn0K1u5y2PQqcsWPZfRJjMB8GA1UdIwQY
MBaAFCAY7wi1XdsgyIFqYhpFnNuSezIBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUJqdkNMVmQyeURJZ1dwaUdrV2MyNUo3TWdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yOGQ3Y2YtMjJmOC00MzYzLWFkMDIt
YTBhYzQ5YWQzNDNmLzEvSUJqdkNMVmQyeURJZ1dwaUdrV2MyNUo3TWdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yOGQ3Y2YtMjJmOC00MzYzLWFkMDItYTBhYzQ5YWQzNDNm
LzEvSUJqdkNMVmQyeURJZ1dwaUdrV2MyNUo3TWdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjoUACvTO
hnjGfsvofCf3QbDxWsbPWY3pCninR2gwoTPRUXv77UD1a7QgW8FuyoUM6+XK3QNx
Kvzro8Dg+gXGz3HNG7712HlnblDP5JjT4TJFOVWG4xrxcVoqofoiDCQ3Fw3MbJ5i
zPAfDZmV2uxd3o9rmvqC9LQcL7gLluSkc+LMtHOILKG/bEzWE3pZsaa3ckY9wtfX
v0YL1VJTeV6EIn6058OSCXFCezmOwYFqn63b9PofhVxLmK4G3YO1KZAjMW5dUCPR
tPM4Qv9ANZTyC5Y+9En6XLTfSFSduSuNeXyhZ7BEK2n2ag5iKoH2ol4CfWfrZjGV
ZkzLRZTzWcg/2A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:57 2025 by rpki-client