Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
File: I_IfcxbhvXj4bupkJdXCKbmA-aw.mft (raw, json)
Hash identifier: V1rU2sj4GgqdO+u3nSOrdi9wFy2/fecWI876RxQqdG4=
Subject key identifier: 81:2A:A1:1D:2B:DC:F0:81:ED:F2:7B:8A:DD:E5:B3:1D:D6:0B:37:61
Authority key identifier: 23:F2:1F:73:16:E1:BD:78:F8:6E:EA:64:25:D5:C2:29:B9:80:F9:AC
Certificate issuer: /CN=23f21f7316e1bd78f86eea6425d5c229b980f9ac
Certificate serial: 019A4F2B15134AEAD325E5C88C16C3076B57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 14:00:14 +0000
Manifest this update: Tue 04 Nov 2025 14:00:14 +0000
Manifest next update: Wed 05 Nov 2025 14:00:14 +0000
Files and hashes: 1: 15gQ3l_CTz5DpsQh5tCstrbwJks.roa (hash: NBh6zaBQW3FImxNGTreLJET3gJwOeBKW+FttZU4GhEA=)
2: I_IfcxbhvXj4bupkJdXCKbmA-aw.crl (hash: VzyLHLK4aVnjWGHMGSIcf8lKeAurCLMX1DTQ4CunPOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:15:13:4a:ea:d3:25:e5:c8:8c:16:c3:07:6b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f21f7316e1bd78f86eea6425d5c229b980f9ac
Validity
Not Before: Nov 4 14:00:14 2025 GMT
Not After : Nov 5 14:00:14 2025 GMT
Subject: CN=812aa11d2bdcf081edf27b8adde5b31dd60b3761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e5:fd:9e:7d:ea:b9:52:97:1b:a9:d5:08:3e:
f7:cc:83:a3:6e:d3:f9:71:86:69:55:8d:3b:08:a2:
99:37:bf:ff:f3:14:99:5d:5a:0b:83:1b:84:74:f8:
b8:8e:38:ad:fa:10:fa:d7:d4:c4:bf:5e:7c:d6:cb:
12:d0:ce:7e:86:f6:27:e6:d2:cd:94:a0:94:74:24:
21:c2:20:79:39:7f:34:f3:07:ab:5f:75:cd:85:27:
c5:ec:e8:45:bf:50:bb:ab:e1:fa:49:4d:a5:f6:36:
05:dc:df:aa:99:6e:92:e1:73:b2:c1:ea:50:1d:11:
13:ac:59:b0:a4:bf:4f:40:99:10:7d:f4:6f:d5:b7:
e5:99:c1:1c:39:b6:48:48:6a:a7:f6:20:7d:61:8a:
39:a6:14:f6:fa:b9:6d:7b:f6:84:c6:93:ae:e3:cb:
e6:df:3f:30:9c:62:8a:35:54:f1:4e:5c:99:d5:84:
ce:38:7b:78:0f:00:15:7a:bf:a9:e1:2c:4e:bd:f0:
38:fe:c1:b3:c0:65:b8:45:01:75:d0:8c:92:c4:90:
d8:75:b6:fb:13:51:3e:1c:a4:5c:b0:ca:f9:55:a8:
91:d0:4e:4f:ba:66:a7:47:b4:a2:0a:15:2b:d1:70:
9e:81:b0:1f:c0:19:de:ff:b5:a8:98:71:5e:9d:38:
6a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2A:A1:1D:2B:DC:F0:81:ED:F2:7B:8A:DD:E5:B3:1D:D6:0B:37:61
X509v3 Authority Key Identifier:
keyid:23:F2:1F:73:16:E1:BD:78:F8:6E:EA:64:25:D5:C2:29:B9:80:F9:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:54:fd:6a:34:0a:a2:3c:46:b2:4d:8b:5d:64:f8:15:a5:61:
8c:9d:4f:3e:68:63:0b:e8:6e:ce:55:a4:6c:20:25:f7:1d:0d:
52:8f:68:8a:bc:25:e6:3c:32:ee:9c:db:5c:a9:a6:ac:ab:e2:
4b:0b:4c:f0:f5:40:16:e7:c9:e1:13:f2:da:37:13:41:d1:e5:
ee:f6:40:73:90:4b:fa:9b:a8:d2:94:99:76:d4:8c:1b:32:e5:
2a:45:6d:95:2b:80:10:4d:eb:c0:03:75:5e:0e:e8:cd:bf:69:
20:eb:d8:6e:36:7f:68:0e:90:1a:07:b1:af:1b:4d:49:e1:3e:
40:1a:4e:07:3f:c1:ce:64:63:08:74:4a:af:21:36:b6:ac:7f:
2a:73:e4:b0:34:38:e7:8a:67:0d:19:42:12:97:c7:ae:c1:2a:
a8:e4:9b:fe:79:1d:fe:7c:11:56:7a:b2:90:92:06:3d:8d:63:
d7:58:54:61:66:a7:82:a5:93:aa:ef:4e:bc:5f:37:4d:50:c6:
eb:e7:72:50:08:0e:63:48:b7:80:7e:8c:35:7b:d2:f9:95:3c:
e5:b2:80:7f:6b:10:80:4e:62:d8:2b:84:35:57:6b:72:c4:29:
70:e5:f6:9b:f9:5b:da:5e:69:8c:31:2e:e6:87:ff:fe:2d:57:
4f:5f:b0:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPKxUTSurTJeXIjBbDB2tXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZjIxZjczMTZlMWJkNzhmODZlZWE2NDI1ZDVjMjI5Yjk4
MGY5YWMwHhcNMjUxMTA0MTQwMDE0WhcNMjUxMTA1MTQwMDE0WjAzMTEwLwYDVQQD
Eyg4MTJhYTExZDJiZGNmMDgxZWRmMjdiOGFkZGU1YjMxZGQ2MGIzNzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOX9nn3quVKXG6nVCD73zIOjbtP5
cYZpVY07CKKZN7//8xSZXVoLgxuEdPi4jjit+hD619TEv1581ssS0M5+hvYn5tLN
lKCUdCQhwiB5OX808werX3XNhSfF7OhFv1C7q+H6SU2l9jYF3N+qmW6S4XOywepQ
HRETrFmwpL9PQJkQffRv1bflmcEcObZISGqn9iB9YYo5phT2+rlte/aExpOu48vm
3z8wnGKKNVTxTlyZ1YTOOHt4DwAVer+p4SxOvfA4/sGzwGW4RQF10IySxJDYdbb7
E1E+HKRcsMr5VaiR0E5PumanR7SiChUr0XCegbAfwBne/7WomHFenThqZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEqoR0r3PCB7fJ7it3lsx3WCzdhMB8GA1UdIwQY
MBaAFCPyH3MW4b14+G7qZCXVwim5gPmsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSV9JZmN4Ymh2WGo0YnVwa0pkWENLYm1BLWF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84YTU5Y2YtNTA5Mi00NzRkLTgxY2Yt
OTc0YzMxZjI2NjBiLzEvSV9JZmN4Ymh2WGo0YnVwa0pkWENLYm1BLWF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC84YTU5Y2YtNTA5Mi00NzRkLTgxY2YtOTc0YzMxZjI2NjBi
LzEvSV9JZmN4Ymh2WGo0YnVwa0pkWENLYm1BLWF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFT9ajQK
ojxGsk2LXWT4FaVhjJ1PPmhjC+huzlWkbCAl9x0NUo9oirwl5jwy7pzbXKmmrKvi
SwtM8PVAFufJ4RPy2jcTQdHl7vZAc5BL+puo0pSZdtSMGzLlKkVtlSuAEE3rwAN1
Xg7ozb9pIOvYbjZ/aA6QGgexrxtNSeE+QBpOBz/BzmRjCHRKryE2tqx/KnPksDQ4
54pnDRlCEpfHrsEqqOSb/nkd/nwRVnqykJIGPY1j11hUYWangqWTqu9OvF83TVDG
6+dyUAgOY0i3gH6MNXvS+ZU85bKAf2sQgE5i2CuENVdrcsQpcOX2m/lb2l5pjDEu
5of//i1XT1+wrg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:25 2025 by rpki-client