Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
File: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft (raw, json)
Hash identifier: OWqZdRDvpzBnNqS9j6gcBGegPSD5b4j8HFKaOK+5a80=
Subject key identifier: C0:04:81:AD:2D:0F:32:4D:EE:73:D8:75:5E:EA:94:0F:22:5F:21:C5
Authority key identifier: 88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
Certificate issuer: /CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Certificate serial: 019A4EF496F3532FEF016CED2BEF214C9912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 13:00:43 +0000
Manifest this update: Tue 04 Nov 2025 13:00:43 +0000
Manifest next update: Wed 05 Nov 2025 13:00:43 +0000
Files and hashes: 1: YOyr4rKnnzDrXdmtMOktrTLMhdg.roa (hash: 9XaoEGH44aifrIE9gnosDm/sLWWt90nSBonwPhD6BKU=)
2: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl (hash: eyZhiY1s4ZZ3Vkx2TYeBdg4Cni0HY1efQKJjCXVjdME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:96:f3:53:2f:ef:01:6c:ed:2b:ef:21:4c:99:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Validity
Not Before: Nov 4 13:00:43 2025 GMT
Not After : Nov 5 13:00:43 2025 GMT
Subject: CN=c00481ad2d0f324dee73d8755eea940f225f21c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:f7:ff:c8:dc:03:6a:8c:37:37:2a:cb:3f:
a7:18:29:d1:b4:85:03:12:42:06:27:5a:28:f3:37:
df:c2:fd:26:91:53:1a:a3:b6:04:83:32:92:2e:e0:
25:b4:5b:01:c9:d2:dc:91:37:43:7e:58:bc:84:2f:
3d:05:1f:1c:b2:96:58:8e:09:a9:d8:f1:7a:2b:0e:
0f:6c:f3:60:0a:5a:f8:0a:65:52:88:08:f7:ae:15:
a4:d0:56:a4:d7:26:70:64:07:b1:e3:d1:49:dd:c7:
b7:a2:fc:39:81:47:d1:88:95:43:5f:ea:48:90:13:
48:39:35:44:cc:b4:93:13:68:30:6c:c4:64:e0:4f:
19:d7:86:40:03:5b:47:86:f2:0a:91:fe:90:44:4f:
f6:ed:7b:27:6e:59:29:9c:46:1f:25:4b:82:ab:f6:
47:77:21:b6:7f:06:da:41:0d:ec:7d:45:e9:40:f2:
58:6b:69:cd:d3:d7:8b:46:72:66:df:62:b3:d1:8d:
ea:7c:0a:62:d7:a2:b1:54:6c:c5:76:e4:aa:6c:ef:
33:f7:de:f5:45:86:c6:6c:23:ac:a3:73:c1:fd:dd:
25:24:28:8c:b4:65:1c:7f:7f:4d:83:28:3c:7a:02:
4d:8a:6b:15:32:a6:78:91:95:b2:e8:8b:c0:19:35:
dd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:04:81:AD:2D:0F:32:4D:EE:73:D8:75:5E:EA:94:0F:22:5F:21:C5
X509v3 Authority Key Identifier:
keyid:88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d9:7b:8e:e0:c2:bb:26:90:3d:a9:62:95:ec:ca:91:13:8e:
36:1b:a3:81:26:57:b7:65:c0:04:1b:e4:c9:c4:d3:1e:3f:c4:
17:80:5c:74:a2:9e:72:98:91:93:77:f3:ee:d4:0c:1e:6e:6e:
aa:42:5c:31:a7:f4:76:ec:6f:4c:27:93:ec:1a:27:70:d0:d0:
73:f6:d4:ab:82:dc:53:99:04:7d:4f:7a:ae:a6:f4:62:f7:2a:
3e:b9:73:7d:0b:ef:6d:e6:b0:9f:54:8a:ee:39:36:ed:27:ac:
6d:0d:c3:0e:00:77:50:ce:fd:5f:d8:16:af:cc:1d:09:f4:25:
17:73:50:11:8c:e6:58:e9:7c:b9:6b:33:a7:29:56:00:1e:6c:
8a:a4:4c:3c:cf:21:37:60:7a:8a:f8:b7:51:d6:9b:4b:7b:cf:
ac:40:e8:13:25:49:f7:62:0d:c4:66:75:f2:f9:9b:89:3a:bc:
54:dd:70:12:86:fe:be:d4:11:98:50:b3:dc:46:5c:df:c7:52:
0b:29:e7:d6:08:a5:d4:f0:7c:0d:a3:71:24:cc:8e:6c:6c:c2:
f7:21:72:f4:7e:fd:d2:c6:6d:c3:95:5a:51:bd:2a:c5:4d:18:
98:02:29:a4:ae:92:45:87:b0:7a:d6:7c:f3:7d:ec:90:60:39:
a5:58:2c:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9JbzUy/vAWztK+8hTJkSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NzdkYTNkNDgzMDI3YTAxZWRkY2QwZTQzNWU4Mjg1ZjFi
MWJiOWUwHhcNMjUxMTA0MTMwMDQzWhcNMjUxMTA1MTMwMDQzWjAzMTEwLwYDVQQD
EyhjMDA0ODFhZDJkMGYzMjRkZWU3M2Q4NzU1ZWVhOTQwZjIyNWYyMWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5H3/8jcA2qMNzcqyz+nGCnRtIUD
EkIGJ1oo8zffwv0mkVMao7YEgzKSLuAltFsBydLckTdDfli8hC89BR8cspZYjgmp
2PF6Kw4PbPNgClr4CmVSiAj3rhWk0Fak1yZwZAex49FJ3ce3ovw5gUfRiJVDX+pI
kBNIOTVEzLSTE2gwbMRk4E8Z14ZAA1tHhvIKkf6QRE/27XsnblkpnEYfJUuCq/ZH
dyG2fwbaQQ3sfUXpQPJYa2nN09eLRnJm32Kz0Y3qfApi16KxVGzFduSqbO8z9971
RYbGbCOso3PB/d0lJCiMtGUcf39Ngyg8egJNimsVMqZ4kZWy6IvAGTXdnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAEga0tDzJN7nPYdV7qlA8iXyHFMB8GA1UdIwQY
MBaAFIh32j1IMCegHt3NDkNegoXxsbueMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUhmYVBVZ3dKNkFlM2MwT1ExNkNoZkd4dTU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jYjljNjYtZjdjYy00ZGUxLWJkYzEt
MmY1ZjRjNTUyNjJmLzEvaUhmYVBVZ3dKNkFlM2MwT1ExNkNoZkd4dTU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9jYjljNjYtZjdjYy00ZGUxLWJkYzEtMmY1ZjRjNTUyNjJm
LzEvaUhmYVBVZ3dKNkFlM2MwT1ExNkNoZkd4dTU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI9l7juDC
uyaQPalilezKkROONhujgSZXt2XABBvkycTTHj/EF4BcdKKecpiRk3fz7tQMHm5u
qkJcMaf0duxvTCeT7BoncNDQc/bUq4LcU5kEfU96rqb0YvcqPrlzfQvvbeawn1SK
7jk27SesbQ3DDgB3UM79X9gWr8wdCfQlF3NQEYzmWOl8uWszpylWAB5siqRMPM8h
N2B6ivi3UdabS3vPrEDoEyVJ92INxGZ18vmbiTq8VN1wEob+vtQRmFCz3EZc38dS
Cynn1gil1PB8DaNxJMyObGzC9yFy9H790sZtw5VaUb0qxU0YmAIppK6SRYewetZ8
833skGA5pVgs6Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:43 2025 by rpki-client