
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
File: ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft (raw, json)
Hash identifier: iknwTiLiFw9XzQRieBuP1wYnBuxHtPUEEfLdO/cH1QI=
Subject key identifier: 3F:B3:CD:D8:B9:0E:FA:56:FE:AC:E2:66:BF:F0:C2:C1:DF:68:01:C5
Authority key identifier: 8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
Certificate issuer: /CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Certificate serial: 019A50E2849D7D583543944775A8E57D54B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
Manifest number: 103B
Signing time: Tue 04 Nov 2025 22:00:13 +0000
Manifest this update: Tue 04 Nov 2025 22:00:13 +0000
Manifest next update: Wed 05 Nov 2025 22:00:13 +0000
Files and hashes: 1: ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl (hash: lRCDPDmLf1FLm728YSGVYP5DX3hoLH5WKy/lk++ItXg=)
2: iwkNh3UdWwUz0vScU_NmxlT_kd8.roa (hash: qTLgYZEDj5/iSNL5ILw19yNSQMcWNUWUNm12d5bZdjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:84:9d:7d:58:35:43:94:47:75:a8:e5:7d:54:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Validity
Not Before: Nov 4 22:00:13 2025 GMT
Not After : Nov 5 22:00:13 2025 GMT
Subject: CN=3fb3cdd8b90efa56feace266bff0c2c1df6801c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8a:cc:9a:5b:7f:a2:f5:40:9d:02:18:75:bf:
80:71:72:18:02:de:87:f8:a5:96:53:89:fb:39:c5:
4b:bb:74:3c:cd:49:14:20:bf:70:4c:7f:92:c8:23:
a7:18:28:b7:87:8d:1c:5b:d2:ba:c1:dc:77:ca:dd:
7a:08:28:f3:3c:c1:31:91:b0:8a:58:18:61:82:24:
ba:41:3b:27:29:df:fa:87:e8:10:70:92:00:23:73:
33:2c:eb:24:97:25:c2:96:fc:e5:b0:4b:4a:d6:58:
d5:f8:c6:f4:43:6b:80:c8:c4:83:f9:9a:c4:a0:23:
bd:f8:9d:62:0c:3b:4b:53:93:69:7b:c3:c7:0e:e4:
96:74:7e:b4:3c:ac:a5:10:28:23:92:9f:9c:22:d6:
c8:e7:54:f0:db:f6:9b:e2:6d:4e:16:0c:e7:b2:5b:
bf:10:2e:a5:cd:05:f4:93:ea:d8:52:8b:cc:97:e9:
cd:8f:0d:24:dc:26:63:6d:5f:eb:03:8b:2d:3a:b5:
2f:2e:c3:3c:9b:68:dd:bf:8d:f5:fc:e3:61:b7:b4:
9e:af:4b:68:17:d5:1e:82:b6:5e:81:c1:3c:b2:67:
b1:f8:6d:18:7d:13:66:d8:15:21:77:4d:2f:82:90:
d4:8f:27:dc:6a:70:f3:b6:02:94:f7:f6:c6:67:00:
eb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B3:CD:D8:B9:0E:FA:56:FE:AC:E2:66:BF:F0:C2:C1:DF:68:01:C5
X509v3 Authority Key Identifier:
keyid:8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a6:e4:da:f8:00:3c:d5:fe:43:11:73:5c:92:38:d5:2e:6b:
d6:7c:ad:56:de:71:7f:d5:d0:74:83:b5:c5:ff:2e:34:51:3e:
5b:59:c5:db:14:35:1d:7d:b7:a7:ef:e1:bc:e0:0d:15:b3:bb:
7f:31:b0:23:57:62:f0:f1:db:b6:8d:6f:73:2b:09:ff:58:61:
1c:f5:82:ef:54:5e:af:9e:01:f2:a3:a6:4b:db:fc:98:86:92:
56:8b:13:ff:70:59:79:c5:90:f6:bd:71:10:d2:75:7b:eb:4c:
70:5e:f0:8a:18:43:91:f1:cb:99:a3:67:6e:7e:b9:4a:a5:45:
1b:f9:73:53:76:99:46:13:39:f3:84:95:cd:1e:d1:28:ee:d1:
bf:61:b3:68:ea:28:a4:5b:ec:6f:46:15:fc:0d:e6:ee:ff:26:
8d:99:f1:30:66:10:0d:1a:85:ee:9d:0c:31:11:7c:47:e4:b8:
74:4a:0f:d7:04:2f:35:7e:a5:a4:61:96:d3:d9:ad:6a:e6:6e:
4a:89:17:7d:ec:99:a9:e0:7d:fa:ec:f0:ba:99:4a:6d:66:aa:
f6:17:f1:44:5e:40:94:a3:87:f0:29:00:01:a6:4a:ce:40:87:
5f:15:62:a6:24:bf:c1:95:91:8c:0c:fb:4b:f2:62:5f:dd:01:
a1:fa:c1:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4oSdfVg1Q5RHdajlfVS3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMWUzZjhkMmY5NDJkOGZjMTE2ZWY4ZTU3NTliYzM3Njdm
YjBiMDYwHhcNMjUxMTA0MjIwMDEzWhcNMjUxMTA1MjIwMDEzWjAzMTEwLwYDVQQD
EygzZmIzY2RkOGI5MGVmYTU2ZmVhY2UyNjZiZmYwYzJjMWRmNjgwMWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IrMmlt/ovVAnQIYdb+AcXIYAt6H
+KWWU4n7OcVLu3Q8zUkUIL9wTH+SyCOnGCi3h40cW9K6wdx3yt16CCjzPMExkbCK
WBhhgiS6QTsnKd/6h+gQcJIAI3MzLOsklyXClvzlsEtK1ljV+Mb0Q2uAyMSD+ZrE
oCO9+J1iDDtLU5Npe8PHDuSWdH60PKylECgjkp+cItbI51Tw2/ab4m1OFgznslu/
EC6lzQX0k+rYUovMl+nNjw0k3CZjbV/rA4stOrUvLsM8m2jdv431/ONht7Ser0to
F9UegrZegcE8smex+G0YfRNm2BUhd00vgpDUjyfcanDztgKU9/bGZwDrfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+zzdi5DvpW/qziZr/wwsHfaAHFMB8GA1UdIwQY
MBaAFIoeP40vlC2PwRbvjldZvDdn+wsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWg0X2pTLVVMWV9CRnUtT1YxbThOMmY3Q3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8xYTJmMDMtMWQ3Yi00ZTA0LTk1MWQt
MjVjMTFiNzk2OTgyLzEvaWg0X2pTLVVMWV9CRnUtT1YxbThOMmY3Q3dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8xYTJmMDMtMWQ3Yi00ZTA0LTk1MWQtMjVjMTFiNzk2OTgy
LzEvaWg0X2pTLVVMWV9CRnUtT1YxbThOMmY3Q3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKbk2vgA
PNX+QxFzXJI41S5r1nytVt5xf9XQdIO1xf8uNFE+W1nF2xQ1HX23p+/hvOANFbO7
fzGwI1di8PHbto1vcysJ/1hhHPWC71Rer54B8qOmS9v8mIaSVosT/3BZecWQ9r1x
ENJ1e+tMcF7wihhDkfHLmaNnbn65SqVFG/lzU3aZRhM584SVzR7RKO7Rv2GzaOoo
pFvsb0YV/A3m7v8mjZnxMGYQDRqF7p0MMRF8R+S4dEoP1wQvNX6lpGGW09mtauZu
SokXfeyZqeB9+uzwuplKbWaq9hfxRF5AlKOH8CkAAaZKzkCHXxVipiS/wZWRjAz7
S/JiX90BofrBgw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:56:00 2025 by rpki-client