Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
File: IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft (raw, json)
Hash identifier: 9y4SwTj8sVO6RELSUTcyoPFVJKHvFwA2PLv0AiVnO6c=
Subject key identifier: CD:F8:B1:D1:E8:7F:56:EE:7B:57:46:1B:FF:37:C1:64:12:29:0F:F5
Authority key identifier: 21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
Certificate issuer: /CN=215a409d27b9a69346324004694da11beae02dbb
Certificate serial: 019A4F9911EDA3F7B47B7320D5EA9C04AA70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
Manifest number: 0FE3
Signing time: Tue 04 Nov 2025 16:00:22 +0000
Manifest this update: Tue 04 Nov 2025 16:00:22 +0000
Manifest next update: Wed 05 Nov 2025 16:00:22 +0000
Files and hashes: 1: 5Nxb95AjDYyihX948d4SpKIggZQ.roa (hash: LXnf6zKJW6C6S9ESb5TMXAjwJki5kjy7RI6/DxC0q14=)
2: IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl (hash: cwA38aC5dbCWhS705EEKPDoNStgg4EvYcrGvjhddYgQ=)
3: g00WlqoayNMboio4aQJxi5oYUAs.roa (hash: Hyc0gnAg44yWXRt2jBl8ZFxFJUhWTRX2EA3Xr0Vxj/g=)
4: lZSfaFLQsnTkwdvn0B3rZGkqRuA.roa (hash: QyBiQ/S33Pxg+43BukzMj/PPueurFOtFulFm03RWAS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:11:ed:a3:f7:b4:7b:73:20:d5:ea:9c:04:aa:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215a409d27b9a69346324004694da11beae02dbb
Validity
Not Before: Nov 4 16:00:22 2025 GMT
Not After : Nov 5 16:00:22 2025 GMT
Subject: CN=cdf8b1d1e87f56ee7b57461bff37c16412290ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:85:9a:66:69:9b:21:de:ba:de:c0:fc:94:31:
82:18:51:8a:44:64:91:0f:39:e0:3e:68:7d:09:63:
e3:24:53:db:43:10:f3:e4:4f:f2:a8:9d:e6:43:5a:
f8:d3:ce:ea:ef:b7:79:5f:7a:d3:9c:30:02:6c:a6:
1d:6f:e7:4c:0b:79:35:9b:fc:c8:16:45:c2:a3:d9:
52:0b:3c:8b:a2:f5:66:88:db:0b:ca:f9:1e:8b:88:
f0:a5:b2:28:17:01:89:66:48:d1:cd:b0:49:f3:27:
05:21:8d:78:9e:a2:5f:c2:67:c8:00:e1:68:c2:51:
b5:cf:85:10:d0:61:c4:d2:f8:51:a3:4a:cc:8c:42:
da:71:6a:08:9e:f2:39:8b:b5:99:15:8f:1e:9c:d8:
4f:1d:b8:61:c5:2b:e4:c2:85:2c:af:41:d3:18:96:
94:01:dc:b3:e1:f3:87:f8:a9:34:eb:68:4f:97:a9:
ce:ec:8d:96:e2:d1:30:e3:79:f2:88:e8:9b:d1:eb:
84:fe:90:21:ae:f2:9d:a8:19:88:5e:e5:fc:ef:3f:
e0:01:b6:cb:54:f2:ff:7f:0b:28:a5:f8:7b:ae:cd:
04:ec:1b:60:b6:ec:78:07:5a:9a:b4:44:a4:32:ce:
98:e1:56:6d:35:a8:2f:88:30:fb:4f:f2:b5:52:95:
04:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F8:B1:D1:E8:7F:56:EE:7B:57:46:1B:FF:37:C1:64:12:29:0F:F5
X509v3 Authority Key Identifier:
keyid:21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:1d:a7:3e:e7:5c:b9:cb:e1:75:3c:05:65:fa:af:ce:01:5f:
55:07:b6:03:c3:f9:5f:ac:02:13:32:46:73:70:5e:d3:6c:4b:
d2:a2:59:67:89:17:68:57:f3:9a:37:77:cd:6d:26:e0:84:29:
1f:23:9d:3b:4a:ff:9d:24:ed:1c:34:2a:38:1c:85:6e:4a:63:
96:6c:bc:c7:2d:98:02:24:c6:75:2f:20:05:31:63:bd:eb:eb:
53:10:41:b8:b9:d0:ef:0a:2b:ee:5c:1f:38:f4:c8:9b:cf:eb:
7f:b0:85:18:28:6d:01:89:f4:c7:87:be:a4:8e:5a:f4:81:62:
df:7c:5d:9b:e3:a0:7c:3e:7f:cc:2b:a7:20:e5:bb:2e:36:16:
d7:dd:9c:1a:f5:d1:42:6b:97:06:80:00:61:10:64:28:d2:b8:
b8:c2:36:68:66:b2:ba:5e:79:2c:95:e2:db:cc:dc:7a:9d:82:
bf:85:36:b4:1f:3a:60:dd:87:9c:b9:bd:a8:79:78:e8:51:f4:
7c:fc:dc:a1:07:28:f4:7c:07:e2:ab:4d:44:8f:ab:a3:40:e2:
45:d6:fd:72:27:ab:7d:dd:39:f1:48:cb:5a:85:0d:d1:c8:66:
29:f3:b1:98:3a:9a:25:70:21:e1:68:61:f8:8c:ea:c3:3d:40:
45:8e:fe:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmRHto/e0e3Mg1eqcBKpwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNWE0MDlkMjdiOWE2OTM0NjMyNDAwNDY5NGRhMTFiZWFl
MDJkYmIwHhcNMjUxMTA0MTYwMDIyWhcNMjUxMTA1MTYwMDIyWjAzMTEwLwYDVQQD
EyhjZGY4YjFkMWU4N2Y1NmVlN2I1NzQ2MWJmZjM3YzE2NDEyMjkwZmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoWaZmmbId663sD8lDGCGFGKRGSR
DzngPmh9CWPjJFPbQxDz5E/yqJ3mQ1r4087q77d5X3rTnDACbKYdb+dMC3k1m/zI
FkXCo9lSCzyLovVmiNsLyvkei4jwpbIoFwGJZkjRzbBJ8ycFIY14nqJfwmfIAOFo
wlG1z4UQ0GHE0vhRo0rMjELacWoInvI5i7WZFY8enNhPHbhhxSvkwoUsr0HTGJaU
Adyz4fOH+Kk062hPl6nO7I2W4tEw43nyiOib0euE/pAhrvKdqBmIXuX87z/gAbbL
VPL/fwsopfh7rs0E7Btgtux4B1qatESkMs6Y4VZtNagviDD7T/K1UpUEbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM34sdHof1bue1dGG/83wWQSKQ/1MB8GA1UdIwQY
MBaAFCFaQJ0nuaaTRjJABGlNoRvq4C27MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVZwQW5TZTVwcE5HTWtBRWFVMmhHLXJnTGJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mMGM5ZTMtMWM0MC00ZjMzLTk1Y2Ut
OThkMmZlZTBmODdhLzEvSVZwQW5TZTVwcE5HTWtBRWFVMmhHLXJnTGJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9mMGM5ZTMtMWM0MC00ZjMzLTk1Y2UtOThkMmZlZTBmODdh
LzEvSVZwQW5TZTVwcE5HTWtBRWFVMmhHLXJnTGJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKR2nPudc
ucvhdTwFZfqvzgFfVQe2A8P5X6wCEzJGc3Be02xL0qJZZ4kXaFfzmjd3zW0m4IQp
HyOdO0r/nSTtHDQqOByFbkpjlmy8xy2YAiTGdS8gBTFjvevrUxBBuLnQ7wor7lwf
OPTIm8/rf7CFGChtAYn0x4e+pI5a9IFi33xdm+OgfD5/zCunIOW7LjYW192cGvXR
QmuXBoAAYRBkKNK4uMI2aGayul55LJXi28zcep2Cv4U2tB86YN2HnLm9qHl46FH0
fPzcoQco9HwH4qtNRI+ro0DiRdb9cierfd058UjLWoUN0chmKfOxmDqaJXAh4Whh
+Izqwz1ARY7+Fw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:50 2025 by rpki-client