Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
File: IfwUL311pxS5rMZT0LXO0zfKRJU.mft (raw, json)
Hash identifier: NgzBux7dzruOjE6jDy1rrNe4K1BsAs7rsRpSCjyfsdQ=
Subject key identifier: 79:4C:B4:F4:9D:96:DD:14:20:DF:7D:87:AD:D1:82:F4:7B:66:36:9E
Authority key identifier: 21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95
Certificate issuer: /CN=21fc142f7d75a714b9acc653d0b5ced337ca4495
Certificate serial: 019A4F98E37A70427216D85805347801B699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 16:00:11 +0000
Manifest this update: Tue 04 Nov 2025 16:00:11 +0000
Manifest next update: Wed 05 Nov 2025 16:00:11 +0000
Files and hashes: 1: IfwUL311pxS5rMZT0LXO0zfKRJU.crl (hash: SGiEXqOkU0nd6aLPB3F12jkso8Gq+iZeayTeViHt22s=)
2: UipKreH4zZ-JKObDVFkMEdQTy8E.roa (hash: 2lFb7AbIOkpByp+mzj8V6olwzUC3cjME2INFe+siQFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:e3:7a:70:42:72:16:d8:58:05:34:78:01:b6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21fc142f7d75a714b9acc653d0b5ced337ca4495
Validity
Not Before: Nov 4 16:00:11 2025 GMT
Not After : Nov 5 16:00:11 2025 GMT
Subject: CN=794cb4f49d96dd1420df7d87add182f47b66369e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:4d:a5:76:fe:18:14:36:24:cb:4c:85:e5:e1:
ec:67:6e:61:55:ca:29:2f:a0:e6:eb:1a:50:62:4d:
c2:77:2c:fb:6a:22:1f:cf:61:b6:fa:3b:74:14:1c:
ad:13:95:ce:1d:46:c0:db:11:39:da:86:49:5f:be:
ce:0d:f3:07:7b:ef:1f:4f:86:c1:c8:41:3b:c6:78:
c9:c7:10:48:2d:c4:dc:6e:78:44:6e:5e:b5:61:7d:
bc:8e:b4:90:1f:c3:7e:56:f8:50:79:68:79:1d:0f:
cc:9b:ad:21:25:d9:c8:fa:b4:9b:fb:70:ae:9b:fb:
6f:5e:9b:53:43:b8:86:8f:79:eb:4e:d7:e1:06:18:
7e:aa:59:03:14:18:9d:de:10:f9:f9:e7:a3:a3:7e:
9d:9c:e7:42:ef:03:f5:94:d4:b5:d2:ed:3e:34:65:
41:a1:b3:51:9e:41:56:eb:a6:3c:8c:ab:58:51:df:
a4:d1:67:6a:ba:85:9d:db:90:a9:15:41:a0:06:a5:
40:98:12:db:4d:b3:5f:c0:b1:4c:a5:ab:e6:93:1a:
20:84:7c:1a:ed:db:3b:1a:dd:fc:3f:d7:46:c9:2f:
a3:a8:f3:b9:58:8d:96:2d:3f:a1:93:56:73:fa:2d:
d8:e0:60:dd:d2:dc:34:e4:3e:b3:c3:86:43:98:d3:
5f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4C:B4:F4:9D:96:DD:14:20:DF:7D:87:AD:D1:82:F4:7B:66:36:9E
X509v3 Authority Key Identifier:
keyid:21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:3f:f3:e0:33:f3:2e:e1:07:2d:94:de:d5:10:1b:65:3c:56:
b7:00:b3:fd:e5:04:85:35:b7:ae:d8:97:60:4d:87:88:de:eb:
6d:df:85:61:cd:38:d6:43:c8:b5:ee:80:48:ac:3a:d7:ff:ee:
60:4b:8d:1f:03:6f:12:80:07:40:1b:98:0c:b9:f3:18:4e:41:
9a:37:e0:bc:ef:ac:89:50:85:7f:71:65:11:dc:9c:28:1d:b0:
42:ae:83:62:2d:05:d9:94:43:36:91:93:18:58:09:df:cf:94:
03:d7:ed:9b:d2:b8:ca:64:96:12:6c:9b:52:21:58:ab:a5:f7:
9e:d7:a0:57:63:a1:46:9d:a4:1b:7f:88:b2:de:e6:66:50:45:
f9:b1:14:82:9c:b8:ec:c2:94:d5:42:bf:e3:16:99:74:11:fc:
da:ee:cf:d0:09:28:15:05:67:3a:49:f0:69:b8:70:df:74:2f:
43:91:06:c9:80:c7:d8:45:48:1e:6d:f2:f0:0a:d8:6f:71:a5:
91:57:57:5a:dc:a0:a7:12:ca:51:ab:1a:81:79:c8:80:7f:d4:
bb:e5:83:9e:fc:8e:de:2b:1a:b0:dd:b4:73:ee:75:40:6e:d3:
ac:6e:8f:ed:01:ec:6a:bd:9c:5f:12:c0:e9:02:dd:ea:98:bb:
d8:b3:e3:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmON6cEJyFthYBTR4AbaZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxZmMxNDJmN2Q3NWE3MTRiOWFjYzY1M2QwYjVjZWQzMzdj
YTQ0OTUwHhcNMjUxMTA0MTYwMDExWhcNMjUxMTA1MTYwMDExWjAzMTEwLwYDVQQD
Eyg3OTRjYjRmNDlkOTZkZDE0MjBkZjdkODdhZGQxODJmNDdiNjYzNjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+E2ldv4YFDYky0yF5eHsZ25hVcop
L6Dm6xpQYk3Cdyz7aiIfz2G2+jt0FBytE5XOHUbA2xE52oZJX77ODfMHe+8fT4bB
yEE7xnjJxxBILcTcbnhEbl61YX28jrSQH8N+VvhQeWh5HQ/Mm60hJdnI+rSb+3Cu
m/tvXptTQ7iGj3nrTtfhBhh+qlkDFBid3hD5+eejo36dnOdC7wP1lNS10u0+NGVB
obNRnkFW66Y8jKtYUd+k0WdquoWd25CpFUGgBqVAmBLbTbNfwLFMpavmkxoghHwa
7ds7Gt38P9dGyS+jqPO5WI2WLT+hk1Zz+i3Y4GDd0tw05D6zw4ZDmNNfnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlMtPSdlt0UIN99h63RgvR7ZjaeMB8GA1UdIwQY
MBaAFCH8FC99dacUuazGU9C1ztM3ykSVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWZ3VUwzMTFweFM1ck1aVDBMWE8wemZLUkpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80OTBjNTAtNmMwNy00NjQ2LTliZDIt
OGNmMTE1YWEyY2MzLzEvSWZ3VUwzMTFweFM1ck1aVDBMWE8wemZLUkpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC80OTBjNTAtNmMwNy00NjQ2LTliZDItOGNmMTE1YWEyY2Mz
LzEvSWZ3VUwzMTFweFM1ck1aVDBMWE8wemZLUkpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzj/z4DPz
LuEHLZTe1RAbZTxWtwCz/eUEhTW3rtiXYE2HiN7rbd+FYc041kPIte6ASKw61//u
YEuNHwNvEoAHQBuYDLnzGE5BmjfgvO+siVCFf3FlEdycKB2wQq6DYi0F2ZRDNpGT
GFgJ38+UA9ftm9K4ymSWEmybUiFYq6X3ntegV2OhRp2kG3+Ist7mZlBF+bEUgpy4
7MKU1UK/4xaZdBH82u7P0AkoFQVnOknwabhw33QvQ5EGyYDH2EVIHm3y8ArYb3Gl
kVdXWtygpxLKUasagXnIgH/Uu+WDnvyO3isasN20c+51QG7TrG6P7QHsar2cXxLA
6QLd6pi72LPjbA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:58 2025 by rpki-client