Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
File: IWmMHNxm3ChdD4B2KcRiYaiLLec.mft (raw, json)
Hash identifier: uRqT3CvjQkObXbiLdD9kjkKR9SH4qSmngWevinQnvd4=
Subject key identifier: 57:0B:28:86:1F:C8:F9:CC:87:CF:69:89:5B:6A:DA:88:AC:CE:AC:5D
Authority key identifier: 21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
Certificate issuer: /CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Certificate serial: 019A4E867F49DCE4677801E8162B8F763122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 11:00:28 +0000
Manifest this update: Tue 04 Nov 2025 11:00:28 +0000
Manifest next update: Wed 05 Nov 2025 11:00:28 +0000
Files and hashes: 1: CMn2soeES3hR-sK_8HvrSujpCpQ.roa (hash: VTuRr4KfXEripqS9AelciewMmdMPiSyij0Vs8ogbZ90=)
2: IWmMHNxm3ChdD4B2KcRiYaiLLec.crl (hash: prFRZjI4I3RWVR3OERZI6HepWkYdwyLIE4uNITN/vVQ=)
3: Yn3cTmXIbvNO5rDZUMkU20vEcu4.roa (hash: iGrYsnlws/ojR0+NVYUlir1CfMVL/ZNyCA/PzakH0rc=)
4: Z_2-Zbi4vsdnVpg2d_lnWwbhvN4.roa (hash: 8GDUJ7ZhRwTXBlYLdtF6LAMc571ge2c8D8UbSUf3lg0=)
5: gKn9w2HjuJeDuvDGB4i7KMCUEOw.roa (hash: 9RL0o8ItMk9D70n/zJYOrxlmErXzvmrmjIlOb2QhCXA=)
6: vobE3yEGfIGL1cB1AJTldnCRmXE.roa (hash: wMXrPRBz6jhuzSeDkQhA2W+belZhJmWY3V+ZCFJ8/9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:7f:49:dc:e4:67:78:01:e8:16:2b:8f:76:31:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Validity
Not Before: Nov 4 11:00:28 2025 GMT
Not After : Nov 5 11:00:28 2025 GMT
Subject: CN=570b28861fc8f9cc87cf69895b6ada88acceac5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:f4:4f:ab:c9:03:d3:d0:01:8e:2a:88:da:
0d:b5:af:a0:ab:e6:c6:e4:aa:c6:96:18:78:ad:c0:
31:0a:c7:46:1c:07:06:ef:25:5d:84:cb:e6:81:4c:
1c:e6:6e:53:01:15:a6:39:b8:bf:bb:5d:f9:71:7c:
c9:ab:0a:11:2a:43:b6:20:65:a6:57:9a:cd:cf:d2:
fd:89:e7:36:e0:aa:8f:ce:0e:f4:c6:82:d8:c1:1d:
37:64:97:d9:12:47:c1:68:49:9f:f5:87:f5:1e:c2:
23:fb:bd:97:69:9c:b6:81:72:d2:a3:8f:3c:56:33:
cb:e0:bc:db:b0:24:bd:b9:5b:a6:0b:7d:c4:33:c4:
69:3d:df:81:40:cd:7b:f5:f9:13:51:a2:ea:f1:14:
4d:26:20:28:3a:3f:e7:47:e1:c0:c5:9c:60:49:ea:
2f:a3:b9:8f:d8:bd:f3:13:fd:43:42:96:4f:ee:58:
9b:d5:df:1e:c8:f5:d4:e1:fe:1e:13:03:cb:51:7d:
9f:be:12:1c:da:67:c6:b8:c1:d7:b8:62:bc:6d:d7:
7d:cc:6c:99:4d:5f:ea:e0:5e:dd:3e:c0:57:cf:bf:
98:b0:44:ac:a4:7d:15:c1:f4:0c:8e:f4:4b:19:86:
71:eb:f5:86:d9:0f:b2:d2:0c:7a:81:9f:1c:a1:06:
60:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0B:28:86:1F:C8:F9:CC:87:CF:69:89:5B:6A:DA:88:AC:CE:AC:5D
X509v3 Authority Key Identifier:
keyid:21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2f:94:b5:8c:8f:26:80:4c:b6:4f:fb:8a:a7:f6:17:2e:19:
69:43:a2:a3:19:65:b7:1a:ff:5e:8e:b8:5b:15:ba:06:7f:4a:
a1:61:90:41:35:32:3f:c7:ef:72:52:65:85:d2:fd:a9:d9:7e:
26:cf:fb:ad:cc:fd:07:0a:1d:ce:a6:d3:68:86:71:bf:d3:dd:
3c:7d:51:54:df:ff:dc:ed:c0:62:84:02:fe:b4:74:6b:a8:17:
98:35:02:0e:36:60:bb:6b:43:0c:99:23:86:48:04:46:ce:84:
3f:9e:ea:97:5e:50:c1:a2:ab:96:be:5d:a2:fb:46:69:a2:a2:
17:89:59:aa:b2:52:e9:06:de:09:0d:52:89:ef:5d:53:f9:f5:
c9:14:08:d2:7f:0b:db:a5:e2:e1:fd:39:20:78:5d:26:fd:8a:
09:a2:06:f8:6f:a4:37:60:d9:ec:c9:6c:19:78:8e:1b:1f:56:
1a:19:b9:a0:14:6f:b3:0f:fd:a0:52:d7:1e:1c:b8:2a:cb:58:
7c:79:8c:97:17:f9:14:ab:0f:f1:c6:55:b5:ce:cf:c7:ad:67:
67:0d:33:6d:51:b7:bf:39:8e:62:1c:70:42:12:2a:ae:65:35:
6d:43:d0:ec:b2:a4:e9:1f:65:ea:33:79:89:95:bf:3c:55:b3:
0c:8e:29:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhn9J3ORneAHoFiuPdjEiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNjk4YzFjZGM2NmRjMjg1ZDBmODA3NjI5YzQ2MjYxYTg4
YjJkZTcwHhcNMjUxMTA0MTEwMDI4WhcNMjUxMTA1MTEwMDI4WjAzMTEwLwYDVQQD
Eyg1NzBiMjg4NjFmYzhmOWNjODdjZjY5ODk1YjZhZGE4OGFjY2VhYzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh70T6vJA9PQAY4qiNoNta+gq+bG
5KrGlhh4rcAxCsdGHAcG7yVdhMvmgUwc5m5TARWmObi/u135cXzJqwoRKkO2IGWm
V5rNz9L9iec24KqPzg70xoLYwR03ZJfZEkfBaEmf9Yf1HsIj+72XaZy2gXLSo488
VjPL4LzbsCS9uVumC33EM8RpPd+BQM179fkTUaLq8RRNJiAoOj/nR+HAxZxgSeov
o7mP2L3zE/1DQpZP7lib1d8eyPXU4f4eEwPLUX2fvhIc2mfGuMHXuGK8bdd9zGyZ
TV/q4F7dPsBXz7+YsESspH0VwfQMjvRLGYZx6/WG2Q+y0gx6gZ8coQZgrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFcLKIYfyPnMh89piVtq2oiszqxdMB8GA1UdIwQY
MBaAFCFpjBzcZtwoXQ+AdinEYmGoiy3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVdtTUhOeG0zQ2hkRDRCMktjUmlZYWlMTGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xMWRjNzEtODE3MC00NWI1LThjNWIt
NGQ3MzczMGY3ZDMyLzEvSVdtTUhOeG0zQ2hkRDRCMktjUmlZYWlMTGVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8xMWRjNzEtODE3MC00NWI1LThjNWItNGQ3MzczMGY3ZDMy
LzEvSVdtTUhOeG0zQ2hkRDRCMktjUmlZYWlMTGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADi+UtYyP
JoBMtk/7iqf2Fy4ZaUOioxlltxr/Xo64WxW6Bn9KoWGQQTUyP8fvclJlhdL9qdl+
Js/7rcz9BwodzqbTaIZxv9PdPH1RVN//3O3AYoQC/rR0a6gXmDUCDjZgu2tDDJkj
hkgERs6EP57ql15QwaKrlr5dovtGaaKiF4lZqrJS6QbeCQ1Sie9dU/n1yRQI0n8L
26Xi4f05IHhdJv2KCaIG+G+kN2DZ7MlsGXiOGx9WGhm5oBRvsw/9oFLXHhy4KstY
fHmMlxf5FKsP8cZVtc7Px61nZw0zbVG3vzmOYhxwQhIqrmU1bUPQ7LKk6R9l6jN5
iZW/PFWzDI4pAg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:52:49 2025 by rpki-client