Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
File: IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft (raw, json)
Hash identifier: TKg4TOh1JJ6GiILd24r+uSSqKgYWFquDA8RUZ+f0/4k=
Subject key identifier: 42:C5:3D:94:1E:19:47:41:D2:79:7F:46:69:9C:E9:28:9F:5E:A7:10
Authority key identifier: 20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54
Certificate issuer: /CN=2046367390224a07684d7977f9165a0950f03d54
Certificate serial: 019A4E500D1B8FF53CAFA228197092C9E52F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
Manifest number: 1419
Signing time: Tue 04 Nov 2025 10:01:00 +0000
Manifest this update: Tue 04 Nov 2025 10:01:00 +0000
Manifest next update: Wed 05 Nov 2025 10:01:00 +0000
Files and hashes: 1: ICVbUtHfbHYJwV7ucXI2K_14ylU.roa (hash: d0or5/9y3dY5/PzUShTK41fVXw4MjWFCN4HTk7PqBCg=)
2: IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl (hash: KgSgUxFhOPgfAGXkhKP7a5assposWWVfABQIOu6Wk2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:50:0d:1b:8f:f5:3c:af:a2:28:19:70:92:c9:e5:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2046367390224a07684d7977f9165a0950f03d54
Validity
Not Before: Nov 4 10:01:00 2025 GMT
Not After : Nov 5 10:01:00 2025 GMT
Subject: CN=42c53d941e194741d2797f46699ce9289f5ea710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:60:2e:8f:f5:e8:40:fb:3b:d0:aa:b7:74:05:
2c:29:e9:c7:a3:89:b4:8f:69:b0:67:6f:59:f9:d1:
40:dc:c8:4d:35:fa:b2:93:81:c0:10:0d:aa:f9:1b:
50:2b:3a:6e:f0:b0:f1:b6:f3:06:0a:91:94:63:4e:
44:01:80:df:42:47:59:6f:31:5b:ba:0b:35:94:ca:
7d:db:81:c1:77:c4:e6:32:70:91:72:22:1d:65:d4:
20:3d:c8:bf:53:c0:0e:74:b9:a8:ac:e9:4a:97:f8:
30:3b:04:b0:66:19:83:5f:04:50:90:71:e8:3a:9e:
45:70:52:3a:91:b2:1c:2c:ff:6e:74:02:f3:0c:6e:
46:de:49:af:e8:98:17:fc:95:e8:4d:0f:f4:5d:e4:
b4:30:cd:5c:9f:25:6e:26:b1:e8:b5:9c:82:09:33:
84:3c:3e:3d:b0:be:11:1f:8d:9a:98:95:b7:8c:86:
1f:c7:1d:39:0a:e5:4e:5b:e6:04:99:fd:77:2c:e8:
fd:6c:02:96:87:e9:33:00:b9:28:67:38:d5:13:65:
72:f2:a0:35:9c:70:37:46:50:42:1a:92:3c:93:9b:
55:5c:37:a4:0a:bb:3f:97:71:08:57:d3:68:ef:da:
a4:f8:7e:29:a8:3d:7e:ed:d2:94:8b:4b:16:8d:ef:
79:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C5:3D:94:1E:19:47:41:D2:79:7F:46:69:9C:E9:28:9F:5E:A7:10
X509v3 Authority Key Identifier:
keyid:20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:74:8b:9b:b0:2f:71:9d:02:5b:c7:33:f9:b7:5c:66:39:1d:
18:6d:57:d5:8c:33:5a:39:06:9e:39:40:99:c3:7d:31:13:62:
e1:0b:a4:8e:b0:ef:50:68:d4:bf:b1:64:1c:33:0f:25:a0:96:
f5:81:a0:9b:0a:23:36:cd:91:6c:6f:b3:17:55:a9:6f:89:d7:
e4:74:04:49:18:4f:b8:b6:c8:66:c2:10:b4:33:b3:55:8d:68:
e7:36:45:f9:2f:85:e7:14:c4:a4:ad:8a:44:f8:93:de:be:c0:
3c:28:22:ae:10:7e:a4:f8:50:4c:4c:8c:28:21:1b:9a:6d:ae:
11:ce:be:ae:8d:be:42:0e:0d:27:66:94:12:dd:8b:cb:21:f5:
13:4c:00:17:31:4c:0f:7e:ed:44:cf:75:67:fc:6e:fd:37:7d:
30:89:ad:1b:6b:d9:fa:2b:2d:de:5f:c5:c5:74:0e:1e:f3:d6:
4a:a5:49:e8:73:b5:ac:16:63:28:c1:92:50:e6:4e:00:eb:b2:
f1:a8:95:a7:a3:e5:78:c8:f9:ca:f4:f5:2a:29:1d:0f:18:19:
eb:c6:6a:eb:c4:3f:a6:7d:a9:62:6f:4a:bf:b1:b6:41:22:68:
d9:d4:01:bb:55:ec:70:d3:ec:0b:d4:b1:3d:fe:b6:02:d4:39:
e4:83:0f:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOUA0bj/U8r6IoGXCSyeUvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNDYzNjczOTAyMjRhMDc2ODRkNzk3N2Y5MTY1YTA5NTBm
MDNkNTQwHhcNMjUxMTA0MTAwMTAwWhcNMjUxMTA1MTAwMTAwWjAzMTEwLwYDVQQD
Eyg0MmM1M2Q5NDFlMTk0NzQxZDI3OTdmNDY2OTljZTkyODlmNWVhNzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGAuj/XoQPs70Kq3dAUsKenHo4m0
j2mwZ29Z+dFA3MhNNfqyk4HAEA2q+RtQKzpu8LDxtvMGCpGUY05EAYDfQkdZbzFb
ugs1lMp924HBd8TmMnCRciIdZdQgPci/U8AOdLmorOlKl/gwOwSwZhmDXwRQkHHo
Op5FcFI6kbIcLP9udALzDG5G3kmv6JgX/JXoTQ/0XeS0MM1cnyVuJrHotZyCCTOE
PD49sL4RH42amJW3jIYfxx05CuVOW+YEmf13LOj9bAKWh+kzALkoZzjVE2Vy8qA1
nHA3RlBCGpI8k5tVXDekCrs/l3EIV9No79qk+H4pqD1+7dKUi0sWje957QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELFPZQeGUdB0nl/Rmmc6SifXqcQMB8GA1UdIwQY
MBaAFCBGNnOQIkoHaE15d/kWWglQ8D1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUVZMmM1QWlTZ2RvVFhsMy1SWmFDVkR3UFZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9mODYwMTMtZmUxZC00MWJlLWFmZTgt
YzhmYzYxNjM5NDJiLzEvSUVZMmM1QWlTZ2RvVFhsMy1SWmFDVkR3UFZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9mODYwMTMtZmUxZC00MWJlLWFmZTgtYzhmYzYxNjM5NDJi
LzEvSUVZMmM1QWlTZ2RvVFhsMy1SWmFDVkR3UFZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXSLm7Av
cZ0CW8cz+bdcZjkdGG1X1YwzWjkGnjlAmcN9MRNi4QukjrDvUGjUv7FkHDMPJaCW
9YGgmwojNs2RbG+zF1Wpb4nX5HQESRhPuLbIZsIQtDOzVY1o5zZF+S+F5xTEpK2K
RPiT3r7APCgirhB+pPhQTEyMKCEbmm2uEc6+ro2+Qg4NJ2aUEt2LyyH1E0wAFzFM
D37tRM91Z/xu/Td9MImtG2vZ+ist3l/FxXQOHvPWSqVJ6HO1rBZjKMGSUOZOAOuy
8aiVp6PleMj5yvT1KikdDxgZ68Zq68Q/pn2pYm9Kv7G2QSJo2dQBu1XscNPsC9Sx
Pf62AtQ55IMPwg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:58 2025 by rpki-client