Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
File: ifKArlGVUMen9JU6sn16593rE0E.mft (raw, json)
Hash identifier: kM2nYXkeWJB7b6dWBoadaoSrZw9y+kPVUvepic2pIIo=
Subject key identifier: 31:FE:38:06:D6:F7:B0:A4:71:AA:4A:7F:40:A6:48:11:1E:16:89:9A
Authority key identifier: 89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
Certificate issuer: /CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Certificate serial: 01988BEA05F38122FD67DDFDFC6479B68BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
Manifest number: 15B5
Signing time: Fri 08 Aug 2025 23:00:26 +0000
Manifest this update: Fri 08 Aug 2025 23:00:26 +0000
Manifest next update: Sat 09 Aug 2025 23:00:26 +0000
Files and hashes: 1: 9dTi4wdiI3Tu8z52gakpEQiMUok.roa (hash: 4zYsVsn8fJnXPhGX6xQByXU2W5bf/FC7mJXJpk5+gzY=)
2: ifKArlGVUMen9JU6sn16593rE0E.crl (hash: yX9/I+cCQH5N0wM2zkU46+mPmKkg7Z2R7ZDG4zc++Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:05:f3:81:22:fd:67:dd:fd:fc:64:79:b6:8b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Validity
Not Before: Aug 8 23:00:26 2025 GMT
Not After : Aug 9 23:00:26 2025 GMT
Subject: CN=31fe3806d6f7b0a471aa4a7f40a648111e16899a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ef:fd:0d:f5:5c:4b:e9:61:34:8e:3a:84:79:
16:47:37:a6:db:f3:e6:63:6e:51:60:97:76:c2:d0:
27:9e:04:82:2f:8b:13:7c:1b:0c:18:e0:82:b1:ce:
c7:87:d7:e8:e8:46:20:75:eb:1e:66:37:4c:32:40:
c7:c9:37:3c:cf:cb:92:45:d5:d7:ff:5e:61:8f:ff:
72:53:74:22:2f:76:c8:da:be:1c:35:ec:22:d5:15:
05:ef:aa:44:89:2c:6e:8d:ff:c4:cd:43:6e:bf:50:
b8:ca:f3:4e:0f:1d:bc:23:ff:bb:4e:12:d6:87:51:
b6:50:d6:70:66:b2:c8:10:62:6d:e3:b0:72:75:04:
7b:26:b5:e8:51:a0:66:f9:cc:94:9f:a7:64:e5:31:
90:57:f7:42:0f:cd:f5:f4:23:a7:e8:1d:a6:80:09:
6b:03:81:e3:71:9b:4e:07:10:45:72:9f:47:25:14:
7b:65:58:9e:06:e8:c4:29:98:8a:af:1e:c2:86:54:
d4:24:00:e9:27:17:19:b8:94:2c:f6:9a:fd:dc:5e:
61:e3:68:5c:45:3d:7c:dc:3a:9b:39:a7:ec:53:b3:
6f:2b:1a:1d:2a:41:14:43:69:eb:0b:66:ec:3c:c8:
9b:49:14:ed:69:96:b9:9c:65:e6:7f:19:53:70:cf:
ae:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FE:38:06:D6:F7:B0:A4:71:AA:4A:7F:40:A6:48:11:1E:16:89:9A
X509v3 Authority Key Identifier:
keyid:89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d4:5b:f9:dc:62:61:2b:92:c2:4c:fb:8d:08:e4:b8:57:36:
41:e1:d8:08:e3:86:fb:6a:c4:ab:64:71:10:a6:ad:42:a8:3f:
85:86:60:aa:ce:7c:36:80:ef:49:49:65:c3:80:83:41:bb:15:
73:64:16:96:ec:20:a5:8b:0e:34:ed:75:6d:a5:96:88:61:02:
4c:93:41:bd:e1:d7:e2:fd:c7:e7:5b:3d:01:45:39:3e:94:61:
3d:e0:26:57:df:a4:bb:8e:c3:96:96:68:89:d8:5a:2f:7d:c0:
09:f6:d6:c7:90:74:02:11:9e:05:1a:05:73:7c:09:3b:91:eb:
76:b8:ab:eb:ab:f9:fd:30:67:5f:40:51:99:e2:d9:f1:b5:cf:
af:fa:db:a2:27:bf:39:fc:e8:11:6a:2a:35:66:54:7c:f5:1e:
0f:55:bc:3f:0a:b6:a0:99:f3:36:66:11:83:de:d9:f9:fa:f6:
78:ba:24:51:72:36:33:b3:70:2e:3c:8b:c2:60:ca:52:b9:85:
27:78:cf:d0:68:04:c4:c8:c5:63:05:01:33:98:a6:2d:98:ed:
8d:e2:69:28:32:12:d8:7a:35:12:85:4d:b2:fb:87:63:7e:69:
94:ea:a4:3d:6b:e0:da:cb:f7:b9:7d:e8:14:1e:99:a2:91:26:
c7:68:81:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiL6gXzgSL9Z939/GR5tovuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZjI4MGFlNTE5NTUwYzdhN2Y0OTUzYWIyN2Q3YWU3ZGRl
YjEzNDEwHhcNMjUwODA4MjMwMDI2WhcNMjUwODA5MjMwMDI2WjAzMTEwLwYDVQQD
EygzMWZlMzgwNmQ2ZjdiMGE0NzFhYTRhN2Y0MGE2NDgxMTFlMTY4OTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAre/9DfVcS+lhNI46hHkWRzem2/Pm
Y25RYJd2wtAnngSCL4sTfBsMGOCCsc7Hh9fo6EYgdeseZjdMMkDHyTc8z8uSRdXX
/15hj/9yU3QiL3bI2r4cNewi1RUF76pEiSxujf/EzUNuv1C4yvNODx28I/+7ThLW
h1G2UNZwZrLIEGJt47BydQR7JrXoUaBm+cyUn6dk5TGQV/dCD8319COn6B2mgAlr
A4HjcZtOBxBFcp9HJRR7ZVieBujEKZiKrx7ChlTUJADpJxcZuJQs9pr93F5h42hc
RT183DqbOafsU7NvKxodKkEUQ2nrC2bsPMibSRTtaZa5nGXmfxlTcM+uqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDH+OAbW97CkcapKf0CmSBEeFomaMB8GA1UdIwQY
MBaAFInygK5RlVDHp/SVOrJ9eufd6xNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mZGNlNGMtMmVhNS00N2ViLTk0YmMt
NWI1MGVhODhlZWFiLzEvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9mZGNlNGMtMmVhNS00N2ViLTk0YmMtNWI1MGVhODhlZWFi
LzEvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU9Rb+dxi
YSuSwkz7jQjkuFc2QeHYCOOG+2rEq2RxEKatQqg/hYZgqs58NoDvSUllw4CDQbsV
c2QWluwgpYsONO11baWWiGECTJNBveHX4v3H51s9AUU5PpRhPeAmV9+ku47DlpZo
idhaL33ACfbWx5B0AhGeBRoFc3wJO5Hrdrir66v5/TBnX0BRmeLZ8bXPr/rboie/
OfzoEWoqNWZUfPUeD1W8Pwq2oJnzNmYRg97Z+fr2eLokUXI2M7NwLjyLwmDKUrmF
J3jP0GgExMjFYwUBM5imLZjtjeJpKDIS2Ho1EoVNsvuHY35plOqkPWvg2sv3uX3o
FB6ZopEmx2iBCg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:03:16 2025 by rpki-client