Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
File: ix22ROoOJ0ndbtAirs0SGUvLlvI.mft (raw, json)
Hash identifier: 5sOHct3CivWPLm5wWXLbpcZZC5Zq3vJ2Ev2K3Fl22F4=
Subject key identifier: 4D:8D:3B:93:34:99:A8:9E:84:FC:22:45:37:FE:74:4D:D6:24:18:4A
Authority key identifier: 8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2
Certificate issuer: /CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2
Certificate serial: 019A4D747E47CDEAEB2E38366BDBFA66DC3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 06:01:11 +0000
Manifest this update: Tue 04 Nov 2025 06:01:11 +0000
Manifest next update: Wed 05 Nov 2025 06:01:11 +0000
Files and hashes: 1: A41bCmeGcRe18SujefEGCOd0pEc.roa (hash: NjleSysihCL9A6oaK71bgTpnAO+ec2pn28x66pipbdA=)
2: ix22ROoOJ0ndbtAirs0SGUvLlvI.crl (hash: bflLQZmmj4ogkbr+SgT52A2FWm0kC/k7EZahJFB0ggU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:7e:47:cd:ea:eb:2e:38:36:6b:db:fa:66:dc:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2
Validity
Not Before: Nov 4 06:01:11 2025 GMT
Not After : Nov 5 06:01:11 2025 GMT
Subject: CN=4d8d3b933499a89e84fc224537fe744dd624184a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:43:8b:06:31:a1:4c:1f:92:38:3f:99:28:d3:
d5:1c:aa:cf:11:77:89:c9:ba:b5:ae:5e:ac:12:13:
c6:78:9e:24:6c:54:4d:72:ae:ec:7e:9d:5b:37:14:
a3:d7:f8:dd:f3:0f:8f:c4:c6:45:ca:ec:b1:ad:4c:
aa:80:50:c9:f5:0e:3b:41:f3:b2:f3:9b:29:6d:f9:
10:2e:56:97:53:e3:d8:97:0f:47:a7:a0:7e:f7:9e:
e2:4a:1a:6e:3a:17:a5:cb:6c:c1:9e:fb:d4:95:cd:
0e:0c:71:ae:66:a5:8f:12:a1:ed:d4:0a:bd:f3:5e:
b9:d9:39:cc:60:b5:fd:bc:c9:f0:33:68:c1:52:3a:
04:6f:ac:ea:b4:44:4e:83:92:0b:a3:37:b1:f3:b8:
5f:3e:7f:55:06:23:eb:46:ed:2a:15:4d:74:57:76:
db:8e:fd:a6:7f:3d:65:12:db:c9:cb:bc:3f:f2:76:
9e:08:2f:68:28:6e:c3:1c:67:e8:26:73:df:07:e9:
54:c6:b4:b5:21:5e:fe:55:b3:8b:56:3b:91:c6:2d:
9a:a5:52:44:61:53:f4:93:1e:94:09:7b:fa:34:5e:
fc:3e:0c:56:b3:c6:b6:41:4a:d7:fb:d0:28:72:dd:
64:08:41:00:ec:f6:f1:f7:2d:78:79:5a:13:62:06:
1e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8D:3B:93:34:99:A8:9E:84:FC:22:45:37:FE:74:4D:D6:24:18:4A
X509v3 Authority Key Identifier:
keyid:8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c1:42:3d:d2:d8:69:29:b0:96:c4:dc:70:28:7f:fa:74:ea:
28:eb:ec:23:e9:13:34:05:32:f4:6b:8f:da:a8:df:3d:c3:3e:
32:b9:db:c0:d3:32:8c:85:99:20:ee:d0:68:f1:b3:fe:d6:d9:
c1:fa:2f:be:56:57:9b:23:c6:99:16:1e:14:f7:a6:fe:b0:18:
b8:17:e0:7a:91:eb:07:f3:cc:ce:a4:19:1d:cd:2f:c6:e0:c1:
9e:d9:bf:fb:fe:b9:88:ab:66:52:51:64:8a:15:04:7a:30:26:
96:72:8b:aa:1f:dd:b2:72:8b:8a:4e:85:0f:6c:59:5a:e1:90:
84:c9:e3:69:52:48:cf:82:3e:7d:a1:bd:b6:6c:42:dc:3d:37:
d4:d4:2f:43:8d:46:d0:12:2f:ff:1d:86:08:4c:3d:4d:3a:bd:
cf:6c:2c:c3:89:a8:b2:30:c2:76:c7:80:de:60:bd:68:dc:e7:
30:ad:a4:82:ea:3e:f3:ec:6f:38:e6:a5:72:49:3e:e4:20:b2:
af:35:48:8d:a3:2c:a0:5b:55:c8:55:e3:3f:53:76:55:95:10:
d1:56:13:dd:ac:4b:2e:2e:d3:fc:9d:c1:91:51:eb:ab:82:83:
3b:f7:02:14:95:25:4f:bd:76:5a:db:16:e4:d6:30:53:7d:c3:
49:ed:00:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdH5HzerrLjg2a9v6Ztw9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMWRiNjQ0ZWEwZTI3NDlkZDZlZDAyMmFlY2QxMjE5NGJj
Yjk2ZjIwHhcNMjUxMTA0MDYwMTExWhcNMjUxMTA1MDYwMTExWjAzMTEwLwYDVQQD
Eyg0ZDhkM2I5MzM0OTlhODllODRmYzIyNDUzN2ZlNzQ0ZGQ2MjQxODRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0OLBjGhTB+SOD+ZKNPVHKrPEXeJ
ybq1rl6sEhPGeJ4kbFRNcq7sfp1bNxSj1/jd8w+PxMZFyuyxrUyqgFDJ9Q47QfOy
85spbfkQLlaXU+PYlw9Hp6B+957iShpuOhely2zBnvvUlc0ODHGuZqWPEqHt1Aq9
81652TnMYLX9vMnwM2jBUjoEb6zqtEROg5ILozex87hfPn9VBiPrRu0qFU10V3bb
jv2mfz1lEtvJy7w/8naeCC9oKG7DHGfoJnPfB+lUxrS1IV7+VbOLVjuRxi2apVJE
YVP0kx6UCXv6NF78PgxWs8a2QUrX+9Aoct1kCEEA7Pbx9y14eVoTYgYe5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2NO5M0maiehPwiRTf+dE3WJBhKMB8GA1UdIwQY
MBaAFIsdtkTqDidJ3W7QIq7NEhlLy5byMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXgyMlJPb09KMG5kYnRBaXJzMFNHVXZMbHZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9kYzljNmEtNTUwYS00ZWUxLWI0ZmMt
NTQzNzc2ZjdjOTJlLzEvaXgyMlJPb09KMG5kYnRBaXJzMFNHVXZMbHZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9kYzljNmEtNTUwYS00ZWUxLWI0ZmMtNTQzNzc2ZjdjOTJl
LzEvaXgyMlJPb09KMG5kYnRBaXJzMFNHVXZMbHZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcFCPdLY
aSmwlsTccCh/+nTqKOvsI+kTNAUy9GuP2qjfPcM+MrnbwNMyjIWZIO7QaPGz/tbZ
wfovvlZXmyPGmRYeFPem/rAYuBfgepHrB/PMzqQZHc0vxuDBntm/+/65iKtmUlFk
ihUEejAmlnKLqh/dsnKLik6FD2xZWuGQhMnjaVJIz4I+faG9tmxC3D031NQvQ41G
0BIv/x2GCEw9TTq9z2wsw4mosjDCdseA3mC9aNznMK2kguo+8+xvOOalckk+5CCy
rzVIjaMsoFtVyFXjP1N2VZUQ0VYT3axLLi7T/J3BkVHrq4KDO/cCFJUlT712WtsW
5NYwU33DSe0ALA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:38:11 2025 by rpki-client