Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
File: iBDn48kXXrmP94FdMHb7Aplqc0o.mft (raw, json)
Hash identifier: E/TygMC4HXYDQPfM73RyEnBGzsdN6Zi4jJ2wb0HRl14=
Subject key identifier: 9B:04:0E:3A:6E:01:00:A8:27:47:F9:D7:F3:68:D2:D5:A4:71:ED:CC
Authority key identifier: 88:10:E7:E3:C9:17:5E:B9:8F:F7:81:5D:30:76:FB:02:99:6A:73:4A
Certificate issuer: /CN=8810e7e3c9175eb98ff7815d3076fb02996a734a
Certificate serial: 019A4D06984BCE6293E903CCF59B8CFDCF27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
Manifest number: 0319
Signing time: Tue 04 Nov 2025 04:01:09 +0000
Manifest this update: Tue 04 Nov 2025 04:01:09 +0000
Manifest next update: Wed 05 Nov 2025 04:01:09 +0000
Files and hashes: 1: 98GklQIoHkHkn0CoFh_6Dud54bo.roa (hash: M+9C1iQsySZxvMjL702thfggxvSIoF6cEK1D5Lq/ro4=)
2: iBDn48kXXrmP94FdMHb7Aplqc0o.crl (hash: k+eCgtRFoI+Vv01ndUjS8lIJ8fa68hyixSMd3id4ksk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:98:4b:ce:62:93:e9:03:cc:f5:9b:8c:fd:cf:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8810e7e3c9175eb98ff7815d3076fb02996a734a
Validity
Not Before: Nov 4 04:01:09 2025 GMT
Not After : Nov 5 04:01:09 2025 GMT
Subject: CN=9b040e3a6e0100a82747f9d7f368d2d5a471edcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5a:e6:23:ae:4f:7e:46:98:c7:d9:c1:d8:1d:
3c:0f:d0:84:f4:62:ef:55:92:01:df:3a:d5:b9:44:
62:79:a8:0f:ff:ce:e3:0b:63:c9:70:2f:ee:df:80:
3e:08:05:91:a0:04:0b:e0:99:ab:4c:d6:2c:03:f2:
8f:d2:f5:3d:93:d5:53:6e:36:fc:34:a0:e1:5a:1a:
c3:1e:89:bf:b8:df:34:21:97:09:59:5d:87:d8:82:
57:7d:3e:ee:d5:78:2c:d5:27:0d:ab:ac:5c:d6:5f:
b2:1f:c8:2c:81:19:eb:3d:95:00:c2:cc:d8:c4:25:
56:80:13:ee:63:62:b9:b5:48:4c:ff:fe:33:da:1c:
b0:7e:72:2c:9a:18:e5:b3:40:1e:e5:50:2e:6e:5a:
68:bc:97:23:38:90:54:aa:81:64:90:44:c4:9f:30:
b7:6f:66:41:2f:c0:3c:80:b8:58:62:d9:31:12:37:
25:fe:4e:cb:16:31:75:62:6e:bb:f2:f7:b6:81:c0:
04:13:35:ed:22:fe:38:b0:75:a9:8c:f9:4b:19:5a:
75:d3:b0:2c:84:a4:df:b1:51:6c:10:15:bf:93:19:
19:84:3d:27:27:5e:7c:ce:cd:89:4f:61:08:b7:7f:
1e:f0:e2:e5:b3:64:32:97:d2:66:3d:73:f6:90:2c:
b7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:04:0E:3A:6E:01:00:A8:27:47:F9:D7:F3:68:D2:D5:A4:71:ED:CC
X509v3 Authority Key Identifier:
keyid:88:10:E7:E3:C9:17:5E:B9:8F:F7:81:5D:30:76:FB:02:99:6A:73:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:3e:70:24:dd:38:40:57:7b:a6:95:a2:37:97:9a:fd:b0:ad:
8b:30:73:53:09:ed:cd:42:e8:db:39:34:a2:3c:b1:79:39:8f:
a5:83:ff:d9:01:a0:57:13:e6:f2:9b:6c:e1:bc:e0:50:c8:d2:
d1:7c:40:c9:1a:07:02:cf:0a:30:50:bf:e1:60:f5:53:d8:c0:
d1:f4:c0:80:54:18:55:d4:4c:5b:34:f5:0c:c3:9d:b1:68:5c:
6e:4d:95:b7:9c:4a:70:51:b7:a8:8e:a3:08:ae:31:bf:95:fb:
46:dc:cd:35:f3:4d:84:ba:5b:fe:7c:c2:af:d2:1d:00:07:79:
b9:79:cf:f7:a2:44:74:f6:57:41:c7:be:73:cb:b7:91:84:27:
c1:fd:5f:a3:5e:9b:e6:a7:04:35:a9:db:bf:a3:04:3f:2f:9f:
30:44:32:3c:bc:83:93:61:00:cd:22:55:5d:4b:f2:18:89:d4:
7d:d8:ba:0c:27:8e:5d:7a:35:71:bd:83:4a:92:c4:9a:eb:c3:
71:1f:7e:4a:f1:33:d7:58:ee:7c:67:1f:49:f6:c1:fb:67:68:
1c:56:1a:ab:20:49:26:63:71:0d:ec:d9:03:56:68:2b:6f:39:
80:36:1d:78:4b:35:b8:36:41:4a:db:63:d1:b9:a9:5f:74:d5:
c2:b9:db:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNBphLzmKT6QPM9ZuM/c8nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MTBlN2UzYzkxNzVlYjk4ZmY3ODE1ZDMwNzZmYjAyOTk2
YTczNGEwHhcNMjUxMTA0MDQwMTA5WhcNMjUxMTA1MDQwMTA5WjAzMTEwLwYDVQQD
Eyg5YjA0MGUzYTZlMDEwMGE4Mjc0N2Y5ZDdmMzY4ZDJkNWE0NzFlZGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1rmI65PfkaYx9nB2B08D9CE9GLv
VZIB3zrVuURieagP/87jC2PJcC/u34A+CAWRoAQL4JmrTNYsA/KP0vU9k9VTbjb8
NKDhWhrDHom/uN80IZcJWV2H2IJXfT7u1Xgs1ScNq6xc1l+yH8gsgRnrPZUAwszY
xCVWgBPuY2K5tUhM//4z2hywfnIsmhjls0Ae5VAublpovJcjOJBUqoFkkETEnzC3
b2ZBL8A8gLhYYtkxEjcl/k7LFjF1Ym678ve2gcAEEzXtIv44sHWpjPlLGVp107As
hKTfsVFsEBW/kxkZhD0nJ158zs2JT2EIt38e8OLls2Qyl9JmPXP2kCy3BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsEDjpuAQCoJ0f51/No0tWkce3MMB8GA1UdIwQY
MBaAFIgQ5+PJF165j/eBXTB2+wKZanNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUJEbjQ4a1hYcm1QOTRGZE1IYjdBcGxxYzBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82Y2UwYjEtYzc3Ni00ZWZmLTgxYWMt
MmVlZGFjZTRhYWM5LzEvaUJEbjQ4a1hYcm1QOTRGZE1IYjdBcGxxYzBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My82Y2UwYjEtYzc3Ni00ZWZmLTgxYWMtMmVlZGFjZTRhYWM5
LzEvaUJEbjQ4a1hYcm1QOTRGZE1IYjdBcGxxYzBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARz5wJN04
QFd7ppWiN5ea/bCtizBzUwntzULo2zk0ojyxeTmPpYP/2QGgVxPm8pts4bzgUMjS
0XxAyRoHAs8KMFC/4WD1U9jA0fTAgFQYVdRMWzT1DMOdsWhcbk2Vt5xKcFG3qI6j
CK4xv5X7RtzNNfNNhLpb/nzCr9IdAAd5uXnP96JEdPZXQce+c8u3kYQnwf1fo16b
5qcENanbv6MEPy+fMEQyPLyDk2EAzSJVXUvyGInUfdi6DCeOXXo1cb2DSpLEmuvD
cR9+SvEz11jufGcfSfbB+2doHFYaqyBJJmNxDezZA1ZoK285gDYdeEs1uDZBSttj
0bmpX3TVwrnbrA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:54 2025 by rpki-client