Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
File: cIR_giGJfW6VLobqLDOauqzBMfU.mft (raw, json)
Hash identifier: 1VNbQpUTxtHZ0X/pwMjnb23Kg7jdU3wf5GBpnHEq1BU=
Subject key identifier: 16:6A:79:AE:EE:05:94:03:A7:C8:E7:3E:12:D3:9D:A7:41:2E:24:0A
Authority key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
Certificate issuer: /CN=70847f8221897d6e952e86ea2c339abaacc131f5
Certificate serial: 019A4D06E62D05B8DADA4FC21ADC8BCE74B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
Manifest number: 1016
Signing time: Tue 04 Nov 2025 04:01:28 +0000
Manifest this update: Tue 04 Nov 2025 04:01:28 +0000
Manifest next update: Wed 05 Nov 2025 04:01:28 +0000
Files and hashes: 1: 349zjBrXxWXdbWEBD0TY_PcES-4.roa (hash: dTkBBehXJumOuwcY3aMRaxc4m1QE9Au6OaxONrVwqa8=)
2: FGloAOGdHctONwf864BFw9r6804.roa (hash: idNgzg92xFKVGDg8Q8+8kqcQjJU43tGKLwcMZ1BO8+8=)
3: QeA9h5gc7h5TROkBqdTQKlfxGiI.roa (hash: wvC6P2mkgiV/WDCXbKURUPeQIyZPZgtW7FSvBfEWp/8=)
4: cIR_giGJfW6VLobqLDOauqzBMfU.crl (hash: S1OJdEHxpkg7ZzP/AgA0JopukBjZjXUXLdJOI8b/ENE=)
5: f4DXZiMB_Ff_0JwzJIxf0LcmHB4.roa (hash: BYRfPeQZzgZNAMB4knpfUfsNVjUgJWJmqeqw3IISPlY=)
6: rguLiIijQORjnghvpZcGDmu1SjU.roa (hash: JNesrlv42ZJgaFQwOxaZT3TmKgM6sVVqVrh2EttTKxs=)
7: zWJS9qIiKhPDTGBp07EnN-zc5Ok.roa (hash: UIbGdiKmqLamnBzWNetbuRIAxAE+Pp02kC9Gg2VRxdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:e6:2d:05:b8:da:da:4f:c2:1a:dc:8b:ce:74:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70847f8221897d6e952e86ea2c339abaacc131f5
Validity
Not Before: Nov 4 04:01:28 2025 GMT
Not After : Nov 5 04:01:28 2025 GMT
Subject: CN=166a79aeee059403a7c8e73e12d39da7412e240a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f7:a0:d4:34:42:4d:ad:be:f0:8e:64:dc:03:
3f:59:b2:2b:08:20:96:c2:04:ec:f8:15:83:06:41:
78:fb:8b:e2:1f:72:86:e9:85:52:44:34:05:20:13:
ad:07:da:39:17:5e:ea:6b:fa:08:17:6d:12:5a:39:
56:da:39:ab:9a:53:a3:d0:be:8b:6f:cd:5c:6e:b6:
76:7f:73:93:28:c0:63:28:56:e9:8b:82:69:08:ec:
ee:0e:89:98:f4:fe:9c:cb:a7:bc:62:2b:94:25:dd:
7f:43:c7:32:06:a3:f7:79:34:9d:e2:e1:41:8b:2b:
88:0f:3c:ec:cf:90:c4:3a:e8:fd:02:d7:f6:40:2d:
9f:96:f3:23:9c:8b:a8:ed:03:dc:29:49:96:b4:f1:
a1:41:13:49:a4:dd:79:f2:3d:85:04:fa:f5:c0:c7:
60:b5:49:7a:f4:2b:c2:17:c3:8c:df:0d:92:82:e4:
2e:89:93:66:5d:fb:ef:59:57:0a:95:55:22:8c:c5:
65:03:b7:51:d6:d1:81:38:43:40:c2:ae:9d:1a:04:
43:df:42:05:30:ce:15:14:39:9b:e8:7f:04:cd:5e:
0f:f3:24:6f:15:2c:1d:ba:55:05:c0:c9:34:69:c2:
be:52:67:37:74:3d:21:ef:99:ef:25:8f:c6:22:0b:
fe:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6A:79:AE:EE:05:94:03:A7:C8:E7:3E:12:D3:9D:A7:41:2E:24:0A
X509v3 Authority Key Identifier:
keyid:70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:13:5a:43:d2:ba:9d:a5:cb:c4:37:b1:7c:70:52:0a:ce:b9:
83:71:ad:b8:51:fa:bf:91:75:7c:aa:a4:d9:96:be:12:99:ab:
58:a2:5d:75:52:1b:fe:d4:3e:c4:54:7c:fe:9e:2a:37:5f:2f:
1b:49:0c:e5:20:d3:df:b2:69:e2:19:4f:84:7e:cc:97:35:6c:
21:75:b0:e3:ea:51:6c:35:90:0e:34:8a:b0:f2:f9:6f:85:23:
30:21:e1:7a:57:0f:a8:3c:9d:96:37:78:c3:2d:ee:67:17:30:
bf:3a:22:ad:97:1c:fd:16:89:9c:fa:ad:fb:eb:cf:c1:c9:cd:
b4:bd:54:12:be:f5:95:29:ee:ac:b4:5b:f7:cd:fb:f3:d7:db:
26:bc:c0:b3:86:b1:d2:22:0d:b2:6c:67:55:45:4a:4b:48:8f:
55:ea:e8:ea:d2:4a:4e:56:77:db:4a:7c:9b:d0:7c:cb:01:de:
b8:67:33:10:85:fc:17:53:8b:23:56:7c:44:ad:f8:b0:5e:b5:
32:94:98:a0:ac:6f:cf:37:00:1b:d7:f9:db:e8:df:24:20:f1:
0e:75:c4:43:73:d3:20:f3:47:6f:2a:2c:70:27:d5:81:d3:a4:
de:74:8f:7c:59:56:3e:11:4a:16:64:26:e4:a8:19:70:26:28:
04:7f:b8:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNBuYtBbja2k/CGtyLznSwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwODQ3ZjgyMjE4OTdkNmU5NTJlODZlYTJjMzM5YWJhYWNj
MTMxZjUwHhcNMjUxMTA0MDQwMTI4WhcNMjUxMTA1MDQwMTI4WjAzMTEwLwYDVQQD
EygxNjZhNzlhZWVlMDU5NDAzYTdjOGU3M2UxMmQzOWRhNzQxMmUyNDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/eg1DRCTa2+8I5k3AM/WbIrCCCW
wgTs+BWDBkF4+4viH3KG6YVSRDQFIBOtB9o5F17qa/oIF20SWjlW2jmrmlOj0L6L
b81cbrZ2f3OTKMBjKFbpi4JpCOzuDomY9P6cy6e8YiuUJd1/Q8cyBqP3eTSd4uFB
iyuIDzzsz5DEOuj9Atf2QC2flvMjnIuo7QPcKUmWtPGhQRNJpN158j2FBPr1wMdg
tUl69CvCF8OM3w2SguQuiZNmXfvvWVcKlVUijMVlA7dR1tGBOENAwq6dGgRD30IF
MM4VFDmb6H8EzV4P8yRvFSwdulUFwMk0acK+Umc3dD0h75nvJY/GIgv+5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZqea7uBZQDp8jnPhLTnadBLiQKMB8GA1UdIwQY
MBaAFHCEf4IhiX1ulS6G6iwzmrqswTH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83MDZjMDMtN2QzNS00OTEzLThhMTgt
NmU4Nzg0YTdhZDA5LzEvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy83MDZjMDMtN2QzNS00OTEzLThhMTgtNmU4Nzg0YTdhZDA5
LzEvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACRNaQ9K6
naXLxDexfHBSCs65g3GtuFH6v5F1fKqk2Za+EpmrWKJddVIb/tQ+xFR8/p4qN18v
G0kM5SDT37Jp4hlPhH7MlzVsIXWw4+pRbDWQDjSKsPL5b4UjMCHhelcPqDydljd4
wy3uZxcwvzoirZcc/RaJnPqt++vPwcnNtL1UEr71lSnurLRb983789fbJrzAs4ax
0iINsmxnVUVKS0iPVero6tJKTlZ320p8m9B8ywHeuGczEIX8F1OLI1Z8RK34sF61
MpSYoKxvzzcAG9f52+jfJCDxDnXEQ3PTIPNHbyoscCfVgdOk3nSPfFlWPhFKFmQm
5KgZcCYoBH+4iw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:15 2025 by rpki-client