Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
File: ilUqhuMbaeXVMg7egdNLsSikXO4.mft (raw, json)
Hash identifier: Os8vL5/4kiW3Qf8gdVutbgCxuTnEjlW//f+ojdPuUak=
Subject key identifier: B7:BB:B1:C1:A9:A0:A7:15:1D:81:2B:06:F7:F2:F8:8E:79:40:C3:2E
Authority key identifier: 8A:55:2A:86:E3:1B:69:E5:D5:32:0E:DE:81:D3:4B:B1:28:A4:5C:EE
Certificate issuer: /CN=8a552a86e31b69e5d5320ede81d34bb128a45cee
Certificate serial: 019A50077C5FAFDEED0E6251A0BBED968883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 18:00:58 +0000
Manifest this update: Tue 04 Nov 2025 18:00:58 +0000
Manifest next update: Wed 05 Nov 2025 18:00:58 +0000
Files and hashes: 1: gx1SCX17EN8yNFFOaZKqHyy38bg.roa (hash: y86l006aIRQbh6g6sMv1/V04L9sTmUKHfB0xrZAQk4Q=)
2: ilUqhuMbaeXVMg7egdNLsSikXO4.crl (hash: GF+gKffsMQoPDhTYZvHth4LqtxuDf5kpmBM8H763VSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:7c:5f:af:de:ed:0e:62:51:a0:bb:ed:96:88:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a552a86e31b69e5d5320ede81d34bb128a45cee
Validity
Not Before: Nov 4 18:00:58 2025 GMT
Not After : Nov 5 18:00:58 2025 GMT
Subject: CN=b7bbb1c1a9a0a7151d812b06f7f2f88e7940c32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6f:52:8a:9b:31:a9:83:66:fe:38:2f:39:f1:
43:1f:83:22:cd:9a:d4:74:d8:d1:02:5d:85:63:f5:
1c:e1:c2:04:d6:94:b3:fa:22:a6:88:a7:f4:a1:12:
55:55:f7:0a:fe:55:16:fc:6c:07:7c:d1:88:a8:78:
18:85:e2:dd:a0:a0:75:33:0e:7c:ad:34:04:35:33:
49:47:e2:f0:7c:6b:d1:a3:ed:13:b2:60:83:65:e2:
b8:59:e5:2d:30:7a:35:c4:ca:a8:7d:e7:09:41:23:
a9:5b:46:6f:96:41:0a:10:42:f7:c1:a4:b9:5d:64:
95:6f:2f:33:b7:cd:cc:47:1e:87:cf:69:c1:16:80:
2f:1b:b9:f7:b5:88:24:9c:74:62:cd:34:fc:3f:99:
e4:aa:44:b1:fd:20:a6:e5:b8:31:f4:19:99:74:a7:
b0:d8:14:91:c7:d6:39:7b:aa:b1:05:07:b9:6e:a2:
65:c8:a9:3e:da:65:9d:d8:dc:e5:52:b2:b4:85:a1:
ff:48:48:1a:a3:20:9f:a1:0f:f1:1b:d3:43:6f:6b:
44:2a:20:6d:53:48:96:c4:46:5a:3a:a2:58:a0:24:
bc:9a:2c:a0:d7:5a:1c:4d:51:cd:b3:c1:d9:46:5f:
b5:c0:83:51:49:24:5c:03:a6:e6:7c:85:8a:4e:e9:
da:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BB:B1:C1:A9:A0:A7:15:1D:81:2B:06:F7:F2:F8:8E:79:40:C3:2E
X509v3 Authority Key Identifier:
keyid:8A:55:2A:86:E3:1B:69:E5:D5:32:0E:DE:81:D3:4B:B1:28:A4:5C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:1a:31:4c:f0:37:52:9e:35:52:26:18:43:6c:4e:af:75:9b:
e3:6b:b9:af:c9:0f:9b:d8:f1:ef:74:1e:26:a3:7a:18:bb:ae:
79:a1:78:b9:4f:42:1e:86:cf:f3:97:66:a6:9a:77:43:cc:a6:
66:a1:3f:19:f5:65:34:bf:2b:13:97:86:7c:d3:70:85:e5:28:
bb:86:7a:a3:fa:51:53:c5:ff:9f:6a:d1:5d:a1:ff:1e:91:30:
08:ac:de:b9:89:89:21:df:00:83:5c:f9:6a:b7:b8:39:4a:98:
13:4e:5e:65:3d:15:4f:55:02:1a:76:29:9c:61:dc:55:c1:43:
65:7c:0e:ef:c9:91:64:51:64:fb:8e:69:35:c3:32:13:ed:51:
64:66:41:3b:f1:72:b4:ae:04:d3:5d:89:64:bf:44:f6:83:0f:
99:b3:8c:f2:d8:5f:49:4e:5b:ec:7c:75:88:ad:f0:9b:08:c3:
3f:14:df:50:f6:b8:aa:fd:c3:5f:83:73:67:e2:02:74:e0:32:
ef:46:fa:17:a5:32:38:3e:e5:06:b1:7d:96:8e:ee:9a:3d:ae:
dd:7f:9d:6c:0d:09:e9:0c:eb:46:b0:3a:69:8c:77:8a:23:ec:
98:5a:13:38:99:d7:01:53:78:1a:2b:f2:3b:05:ec:c3:c4:2e:
de:68:45:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQB3xfr97tDmJRoLvtloiDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNTUyYTg2ZTMxYjY5ZTVkNTMyMGVkZTgxZDM0YmIxMjhh
NDVjZWUwHhcNMjUxMTA0MTgwMDU4WhcNMjUxMTA1MTgwMDU4WjAzMTEwLwYDVQQD
EyhiN2JiYjFjMWE5YTBhNzE1MWQ4MTJiMDZmN2YyZjg4ZTc5NDBjMzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhm9SipsxqYNm/jgvOfFDH4MizZrU
dNjRAl2FY/Uc4cIE1pSz+iKmiKf0oRJVVfcK/lUW/GwHfNGIqHgYheLdoKB1Mw58
rTQENTNJR+LwfGvRo+0TsmCDZeK4WeUtMHo1xMqofecJQSOpW0ZvlkEKEEL3waS5
XWSVby8zt83MRx6Hz2nBFoAvG7n3tYgknHRizTT8P5nkqkSx/SCm5bgx9BmZdKew
2BSRx9Y5e6qxBQe5bqJlyKk+2mWd2NzlUrK0haH/SEgaoyCfoQ/xG9NDb2tEKiBt
U0iWxEZaOqJYoCS8miyg11ocTVHNs8HZRl+1wINRSSRcA6bmfIWKTunaaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLe7scGpoKcVHYErBvfy+I55QMMuMB8GA1UdIwQY
MBaAFIpVKobjG2nl1TIO3oHTS7EopFzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWxVcWh1TWJhZVhWTWc3ZWdkTkxzU2lrWE80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lOTU0YjktODczOC00NDk2LTg5YWQt
NzhhMTI2YmYwYWRjLzEvaWxVcWh1TWJhZVhWTWc3ZWdkTkxzU2lrWE80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lOTU0YjktODczOC00NDk2LTg5YWQtNzhhMTI2YmYwYWRj
LzEvaWxVcWh1TWJhZVhWTWc3ZWdkTkxzU2lrWE80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchoxTPA3
Up41UiYYQ2xOr3Wb42u5r8kPm9jx73QeJqN6GLuueaF4uU9CHobP85dmppp3Q8ym
ZqE/GfVlNL8rE5eGfNNwheUou4Z6o/pRU8X/n2rRXaH/HpEwCKzeuYmJId8Ag1z5
are4OUqYE05eZT0VT1UCGnYpnGHcVcFDZXwO78mRZFFk+45pNcMyE+1RZGZBO/Fy
tK4E012JZL9E9oMPmbOM8thfSU5b7Hx1iK3wmwjDPxTfUPa4qv3DX4NzZ+ICdOAy
70b6F6UyOD7lBrF9lo7umj2u3X+dbA0J6QzrRrA6aYx3iiPsmFoTOJnXAVN4Givy
OwXsw8Qu3mhFtA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:52:13 2025 by rpki-client