Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
File: IPpO3bIfCQGSPBifQej1x0mmWCk.mft (raw, json)
Hash identifier: p+S8ftpkYbFHjOLBrL1YTEAmNpNpVDVZoiSHZ6NQm/c=
Subject key identifier: 17:D7:DE:41:D1:B9:39:D6:38:1F:1B:56:F7:D4:2A:ED:12:10:14:B0
Authority key identifier: 20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
Certificate issuer: /CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Certificate serial: 019A522CA4676AFCBEECD286D727B388B5F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
Manifest number: 89
Signing time: Wed 05 Nov 2025 04:00:48 +0000
Manifest this update: Wed 05 Nov 2025 04:00:48 +0000
Manifest next update: Thu 06 Nov 2025 04:00:48 +0000
Files and hashes: 1: IPpO3bIfCQGSPBifQej1x0mmWCk.crl (hash: jnR2aBylxOTtRy4cDPeY9QvG9cZUbolCztRT92Q2MoE=)
2: Y_oYNTABqXVE9GTLe20SGiBKmm8.roa (hash: oNuhka5sSAjP9HueZy64ACfp5Ut+NkJyfMXj1b7/13Y=)
3: efy5oJUo9vlNOp71j63zeVEmmxU.roa (hash: CC82OGeCqrXuJ1H3eqUShF4IKs0H5muAyFZDrElp2iw=)
4: gfJqz6llA6HPBbhUclOoBOQtzwA.roa (hash: RevaPA0FwqLm6G8w6EGXV/kc0l56ywZoZvqxJEm3YF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:a4:67:6a:fc:be:ec:d2:86:d7:27:b3:88:b5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20fa4eddb21f0901923c189f41e8f5c749a65829
Validity
Not Before: Nov 5 04:00:48 2025 GMT
Not After : Nov 6 04:00:48 2025 GMT
Subject: CN=17d7de41d1b939d6381f1b56f7d42aed121014b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:84:a0:8c:5e:c5:a4:c1:05:ee:b3:41:24:00:
b7:dd:ae:a3:0a:49:b2:c4:e4:43:d2:6c:a4:34:14:
3f:b6:84:ca:24:19:ee:ae:e8:d1:7b:2b:fe:2e:08:
54:02:f2:3b:2c:d6:eb:a0:a8:f7:be:15:02:3d:1c:
33:bc:18:e6:90:67:ef:7c:36:00:a4:a0:4a:e2:b7:
b2:2b:2e:39:fe:4c:e5:f8:cf:45:93:5a:c3:47:bc:
4b:4f:b2:01:40:1a:57:0e:45:f8:38:61:d7:07:3f:
86:dc:2b:be:ad:8a:e9:20:c4:41:73:64:e6:cb:a6:
d7:35:46:51:f7:02:b9:59:7f:a2:f6:4f:b5:24:6f:
12:63:cd:27:73:9d:21:24:c2:78:64:c2:32:12:d0:
74:41:b2:f5:f1:fe:bc:e9:21:ac:81:c5:08:03:dc:
17:56:6f:af:93:48:83:70:e5:bf:43:2d:79:dc:58:
9c:fa:e9:b6:66:4a:f5:47:78:70:24:fb:22:aa:52:
e1:ab:b2:43:d1:d5:f6:e7:49:d3:61:ae:f0:66:ae:
89:05:b0:b9:ac:eb:73:3f:23:c7:96:05:54:24:cc:
bb:45:47:f2:49:05:2b:06:20:03:a4:bc:f5:38:f6:
f6:a6:18:17:a7:aa:93:38:61:8e:63:27:41:09:30:
4d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D7:DE:41:D1:B9:39:D6:38:1F:1B:56:F7:D4:2A:ED:12:10:14:B0
X509v3 Authority Key Identifier:
keyid:20:FA:4E:DD:B2:1F:09:01:92:3C:18:9F:41:E8:F5:C7:49:A6:58:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPpO3bIfCQGSPBifQej1x0mmWCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/951b18-5244-4b2b-a22d-ed5f00c95067/1/IPpO3bIfCQGSPBifQej1x0mmWCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:fa:f9:8e:d4:20:19:42:1a:a8:b2:81:08:40:5c:36:bd:fa:
9e:9c:83:33:50:fb:e8:e0:f4:46:76:2f:51:7b:89:9f:15:87:
48:b5:8a:f5:60:85:8e:15:ea:61:13:83:c3:c6:60:b0:47:0c:
56:97:0a:be:df:00:39:83:57:1c:65:f5:cd:32:3f:5f:59:e6:
3d:9e:15:83:1a:c1:2a:ae:0e:17:dd:62:69:8f:60:32:bf:fd:
73:cc:bc:ff:c0:6f:6f:ce:20:df:84:a5:20:48:1b:56:d4:00:
0c:99:6e:3f:33:32:64:0c:04:de:ea:31:49:6f:99:a6:34:86:
ad:08:f4:03:20:e0:7b:48:29:fb:13:2a:50:4f:87:b1:75:22:
e3:9f:a2:fa:0a:ec:54:89:70:af:d0:10:a2:f3:14:1f:ce:4f:
7a:25:e9:e4:1e:61:27:8b:d8:f8:86:14:e6:e5:02:62:64:96:
9a:93:df:50:cd:94:07:9d:57:da:cb:2f:de:0f:4f:41:a4:f7:
da:7b:e8:d4:eb:a3:c6:e9:00:e0:90:ae:71:be:e0:e3:02:ec:
13:af:a3:64:42:20:03:cc:51:73:7c:75:9d:45:6e:cf:4b:bf:
90:9a:34:2e:7a:f3:e7:f8:1c:1c:56:57:bd:40:57:a8:45:f7:
54:8e:1a:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLKRnavy+7NKG1yeziLX0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZmE0ZWRkYjIxZjA5MDE5MjNjMTg5ZjQxZThmNWM3NDlh
NjU4MjkwHhcNMjUxMTA1MDQwMDQ4WhcNMjUxMTA2MDQwMDQ4WjAzMTEwLwYDVQQD
EygxN2Q3ZGU0MWQxYjkzOWQ2MzgxZjFiNTZmN2Q0MmFlZDEyMTAxNGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYSgjF7FpMEF7rNBJAC33a6jCkmy
xORD0mykNBQ/toTKJBnurujReyv+LghUAvI7LNbroKj3vhUCPRwzvBjmkGfvfDYA
pKBK4reyKy45/kzl+M9Fk1rDR7xLT7IBQBpXDkX4OGHXBz+G3Cu+rYrpIMRBc2Tm
y6bXNUZR9wK5WX+i9k+1JG8SY80nc50hJMJ4ZMIyEtB0QbL18f686SGsgcUIA9wX
Vm+vk0iDcOW/Qy153Fic+um2Zkr1R3hwJPsiqlLhq7JD0dX250nTYa7wZq6JBbC5
rOtzPyPHlgVUJMy7RUfySQUrBiADpLz1OPb2phgXp6qTOGGOYydBCTBNUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfX3kHRuTnWOB8bVvfUKu0SEBSwMB8GA1UdIwQY
MBaAFCD6Tt2yHwkBkjwYn0Ho9cdJplgpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVBwTzNiSWZDUUdTUEJpZlFlajF4MG1tV0NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC85NTFiMTgtNTI0NC00YjJiLWEyMmQt
ZWQ1ZjAwYzk1MDY3LzEvSVBwTzNiSWZDUUdTUEJpZlFlajF4MG1tV0NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC85NTFiMTgtNTI0NC00YjJiLWEyMmQtZWQ1ZjAwYzk1MDY3
LzEvSVBwTzNiSWZDUUdTUEJpZlFlajF4MG1tV0NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/r5jtQg
GUIaqLKBCEBcNr36npyDM1D76OD0RnYvUXuJnxWHSLWK9WCFjhXqYRODw8ZgsEcM
VpcKvt8AOYNXHGX1zTI/X1nmPZ4VgxrBKq4OF91iaY9gMr/9c8y8/8Bvb84g34Sl
IEgbVtQADJluPzMyZAwE3uoxSW+ZpjSGrQj0AyDge0gp+xMqUE+HsXUi45+i+grs
VIlwr9AQovMUH85PeiXp5B5hJ4vY+IYU5uUCYmSWmpPfUM2UB51X2ssv3g9PQaT3
2nvo1OujxukA4JCucb7g4wLsE6+jZEIgA8xRc3x1nUVuz0u/kJo0Lnrz5/gcHFZX
vUBXqEX3VI4aIA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:17:48 2025 by rpki-client