Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
File: iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft (raw, json)
Hash identifier: RLME34u5kp04RfMB52QNw89VzdTHgpi/ZYkc5LNRiAQ=
Subject key identifier: 03:4D:2A:A3:C9:57:A3:5C:93:63:D7:13:9D:2F:0D:50:50:76:7F:77
Authority key identifier: 89:53:64:DD:8F:F7:30:A9:08:B0:9B:5F:99:13:C1:53:FC:16:AA:3C
Certificate issuer: /CN=895364dd8ff730a908b09b5f9913c153fc16aa3c
Certificate serial: 019A4EF443762F9D557F6F633D1D37CA7B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 13:00:22 +0000
Manifest this update: Tue 04 Nov 2025 13:00:22 +0000
Manifest next update: Wed 05 Nov 2025 13:00:22 +0000
Files and hashes: 1: iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl (hash: k49FoB0L7NCpYmPK6tsVTc/9r7gCXvkfuNetxooJaLQ=)
2: vZncObou1n1Gou3XB_i7Ru4V5WA.roa (hash: iik1zhTFoCIgqbBLWbxX8UR2ffHIMvhG03bvL/Xp/YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:43:76:2f:9d:55:7f:6f:63:3d:1d:37:ca:7b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=895364dd8ff730a908b09b5f9913c153fc16aa3c
Validity
Not Before: Nov 4 13:00:22 2025 GMT
Not After : Nov 5 13:00:22 2025 GMT
Subject: CN=034d2aa3c957a35c9363d7139d2f0d5050767f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:39:8e:ff:69:df:e8:4b:18:f2:a7:77:48:f0:
33:42:df:8b:7d:9a:a7:59:a7:66:96:e7:61:38:c6:
5c:f2:77:59:3b:a7:28:8d:69:0d:af:f2:17:87:37:
a6:e0:a5:26:2b:03:b6:05:c3:66:e2:8b:5f:14:8a:
9c:46:9c:1e:42:e6:36:59:fe:3c:23:ca:61:b4:b4:
d6:62:93:6c:3f:94:87:67:96:a4:fb:47:1d:62:af:
b1:a0:4f:32:fd:35:05:68:52:f7:b1:6d:82:e4:03:
b9:bb:47:9c:08:e1:ea:bb:81:55:6f:cc:37:58:ae:
20:1c:bc:9d:2d:18:55:85:ec:f7:7e:0a:1e:88:8c:
6f:63:14:72:2c:85:ce:df:80:84:01:ce:61:b2:1e:
01:3d:aa:9c:e2:ff:3f:41:7e:96:fc:32:ec:4f:3c:
58:a3:86:2c:6e:34:a1:b9:b7:7d:c9:8a:61:80:a2:
eb:0d:f6:63:2b:b0:02:41:5b:d6:87:95:0c:d6:bf:
e7:8f:94:f9:14:fe:1f:c9:bf:8c:6b:31:06:32:d6:
85:9f:44:d0:42:5a:16:45:e0:6e:56:e8:1c:f1:bf:
4a:3b:be:0e:bd:63:68:dd:d2:b0:e8:4a:ca:a3:d0:
16:59:d2:a2:58:92:80:50:bf:a4:e6:89:cd:d1:da:
3a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4D:2A:A3:C9:57:A3:5C:93:63:D7:13:9D:2F:0D:50:50:76:7F:77
X509v3 Authority Key Identifier:
keyid:89:53:64:DD:8F:F7:30:A9:08:B0:9B:5F:99:13:C1:53:FC:16:AA:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:47:d3:91:3c:5c:14:7e:61:e1:a1:68:00:9f:7f:8f:21:00:
1e:39:87:8e:a8:e7:ac:20:6a:96:d1:db:b2:89:c8:73:8d:d8:
de:cb:be:a0:ec:7a:4b:06:c1:ad:80:1b:07:38:a5:fb:16:68:
08:dd:06:e5:8d:8d:ee:c4:e4:e3:8c:e6:12:63:33:e1:b5:8a:
65:dd:9b:1d:b3:d3:72:d0:31:1c:20:28:49:fa:29:f0:98:ef:
7d:f3:a4:e3:8b:0a:d7:65:58:f6:07:f2:17:f8:2a:9f:34:1c:
47:f4:48:93:3d:f4:32:59:3b:b1:61:bd:9f:7f:55:aa:aa:7f:
1b:ff:a6:ca:60:02:2c:c0:3f:c4:34:75:b1:db:2e:83:77:ed:
63:64:53:a6:9b:19:02:37:65:2f:a1:63:c0:c2:3a:55:b2:93:
2b:14:54:11:18:81:69:d1:e4:9a:59:aa:89:07:e2:80:86:89:
71:fe:c1:24:21:d5:99:ef:3c:12:23:99:5c:cc:26:0f:b5:15:
e8:33:fe:7a:74:bb:f6:f6:6d:e1:65:02:31:5c:ee:6a:27:0d:
ec:a0:73:08:27:33:5c:c1:c7:32:3e:46:27:3c:68:3f:45:ca:
87:8f:96:43:c7:01:5d:90:c1:b6:19:25:a3:9d:3c:39:e3:3e:
7c:3c:c4:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9EN2L51Vf29jPR03ynueMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NTM2NGRkOGZmNzMwYTkwOGIwOWI1Zjk5MTNjMTUzZmMx
NmFhM2MwHhcNMjUxMTA0MTMwMDIyWhcNMjUxMTA1MTMwMDIyWjAzMTEwLwYDVQQD
EygwMzRkMmFhM2M5NTdhMzVjOTM2M2Q3MTM5ZDJmMGQ1MDUwNzY3Zjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTmO/2nf6EsY8qd3SPAzQt+LfZqn
WadmludhOMZc8ndZO6cojWkNr/IXhzem4KUmKwO2BcNm4otfFIqcRpweQuY2Wf48
I8phtLTWYpNsP5SHZ5ak+0cdYq+xoE8y/TUFaFL3sW2C5AO5u0ecCOHqu4FVb8w3
WK4gHLydLRhVhez3fgoeiIxvYxRyLIXO34CEAc5hsh4BPaqc4v8/QX6W/DLsTzxY
o4YsbjShubd9yYphgKLrDfZjK7ACQVvWh5UM1r/nj5T5FP4fyb+MazEGMtaFn0TQ
QloWReBuVugc8b9KO74OvWNo3dKw6ErKo9AWWdKiWJKAUL+k5onN0do6lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANNKqPJV6Nck2PXE50vDVBQdn93MB8GA1UdIwQY
MBaAFIlTZN2P9zCpCLCbX5kTwVP8Fqo8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVZOazNZXzNNS2tJc0p0Zm1SUEJVX3dXcWp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy85MjJiY2QtZjFhZC00ZDYzLTgyNDMt
Mjk0YjFhYTE0ODY2LzEvaVZOazNZXzNNS2tJc0p0Zm1SUEJVX3dXcWp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy85MjJiY2QtZjFhZC00ZDYzLTgyNDMtMjk0YjFhYTE0ODY2
LzEvaVZOazNZXzNNS2tJc0p0Zm1SUEJVX3dXcWp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0fTkTxc
FH5h4aFoAJ9/jyEAHjmHjqjnrCBqltHbsonIc43Y3su+oOx6SwbBrYAbBzil+xZo
CN0G5Y2N7sTk44zmEmMz4bWKZd2bHbPTctAxHCAoSfop8JjvffOk44sK12VY9gfy
F/gqnzQcR/RIkz30Mlk7sWG9n39Vqqp/G/+mymACLMA/xDR1sdsug3ftY2RTppsZ
AjdlL6FjwMI6VbKTKxRUERiBadHkmlmqiQfigIaJcf7BJCHVme88EiOZXMwmD7UV
6DP+enS79vZt4WUCMVzuaicN7KBzCCczXMHHMj5GJzxoP0XKh4+WQ8cBXZDBthkl
o508OeM+fDzENg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:39 2025 by rpki-client