Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
File: IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft (raw, json)
Hash identifier: vaM8dsvN5Rj0i414AGfASBBVskqN7PUStuJildCBORI=
Subject key identifier: 06:6A:B5:3C:07:7E:B5:71:4F:ED:27:EA:BF:BF:C8:C5:D8:0C:DE:2A
Authority key identifier: 21:01:B6:38:8D:64:35:F5:49:90:90:53:82:B4:1D:C9:67:5F:D4:90
Certificate issuer: /CN=2101b6388d6435f54990905382b41dc9675fd490
Certificate serial: 019A51503D14093F96F1ACD7A160574BBA07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
Manifest number: 059E
Signing time: Wed 05 Nov 2025 00:00:03 +0000
Manifest this update: Wed 05 Nov 2025 00:00:03 +0000
Manifest next update: Thu 06 Nov 2025 00:00:03 +0000
Files and hashes: 1: EAD0diuoZK02qxxsVWWiclAVX5I.roa (hash: kzXgijoQ+OFnt0McFOmyH17ijOy9UUEek/dQbYMoKFU=)
2: IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl (hash: gCJag1WZgjMAUKdTnDEdv9OVnGiPnlEZ2ghOAn5XkkE=)
3: nyGLR8VZWMaY-kU1NUM_fc4iRjM.roa (hash: voylSjHlayiNYZNWUzC6whbKd8QLUjoGC1qGpaQazoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:3d:14:09:3f:96:f1:ac:d7:a1:60:57:4b:ba:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2101b6388d6435f54990905382b41dc9675fd490
Validity
Not Before: Nov 5 00:00:03 2025 GMT
Not After : Nov 6 00:00:03 2025 GMT
Subject: CN=066ab53c077eb5714fed27eabfbfc8c5d80cde2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a7:ea:2f:63:b4:8d:ac:4e:03:e0:9a:92:20:
4d:a1:7b:e2:b2:c3:38:97:b3:29:ff:05:20:3a:94:
f7:8e:89:96:e3:48:a0:22:96:96:d6:0a:4e:89:d9:
c9:ff:2c:b3:9b:93:9a:92:c4:18:04:ea:f0:08:4d:
3c:66:a5:6d:4a:b8:be:2a:bc:9c:53:47:ec:4a:b1:
31:2e:27:26:52:5f:b4:1c:61:90:81:9d:68:95:4a:
b9:20:86:28:fe:81:43:d9:ec:ec:d1:89:f2:94:90:
1a:f7:07:2a:9b:be:8e:71:71:6c:a2:18:ab:db:64:
a7:3a:76:d0:83:55:16:65:31:6f:3a:c4:23:61:cb:
4c:18:08:6c:06:10:fd:2a:b4:0c:36:5c:08:78:b5:
38:42:38:5f:72:29:f4:ea:6c:c2:b1:70:24:c6:89:
b6:d6:65:93:0b:b9:84:86:e1:ee:88:b5:90:30:6a:
0c:b3:11:90:dc:5a:6f:6a:73:3c:20:13:c9:42:12:
d1:c7:97:6f:f2:0b:70:fc:0e:f4:7e:95:c6:77:52:
a4:b3:62:37:b9:75:08:ca:f0:f5:72:43:6d:88:9c:
20:76:37:ac:44:ec:b7:92:0a:1d:a1:04:74:b8:da:
3c:fe:ce:7f:a0:0f:d2:c0:9c:be:e5:0d:48:69:a2:
06:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6A:B5:3C:07:7E:B5:71:4F:ED:27:EA:BF:BF:C8:C5:D8:0C:DE:2A
X509v3 Authority Key Identifier:
keyid:21:01:B6:38:8D:64:35:F5:49:90:90:53:82:B4:1D:C9:67:5F:D4:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a3:4b:ff:c7:bf:ce:d7:15:96:54:31:6f:7e:37:90:83:e5:
9e:19:71:e1:9d:46:f8:a5:8b:7e:b2:67:9c:78:1b:12:1b:64:
dd:14:32:d7:74:4b:95:5e:45:bb:90:92:37:a4:a0:53:e3:9c:
a5:1b:4c:48:ff:9d:d8:5b:4a:8f:01:e9:2a:ba:7b:4a:c1:57:
c3:2a:27:58:13:63:20:13:a7:57:4e:3d:ae:d5:d9:6d:a1:19:
20:1d:52:f6:44:27:ce:59:41:f8:a5:16:5b:77:42:02:25:6e:
f3:57:e0:68:10:ac:54:03:5d:f8:81:41:3d:ac:06:14:92:05:
86:ae:7c:30:a9:f8:66:1b:74:1d:35:67:84:77:4b:95:71:5a:
c2:d4:d6:d7:0e:a1:bf:95:13:6f:eb:af:d7:03:ab:27:82:8d:
d8:7f:fe:34:6c:2b:c7:5d:04:74:8d:f6:a0:8b:f3:4c:2b:4e:
0a:68:ee:dd:7e:42:34:f5:cc:80:b0:a0:f4:29:de:1c:d0:25:
f0:fa:a6:35:59:25:c5:f5:32:f4:05:3e:43:35:c2:f2:ab:13:
c5:77:0d:8f:83:c8:9e:6b:32:88:2d:d6:b8:b0:20:e0:7f:79:
ae:eb:33:52:46:bd:3e:6c:75:4d:9e:e9:df:5c:5f:3b:ea:7d:
51:c9:2b:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUD0UCT+W8azXoWBXS7oHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMDFiNjM4OGQ2NDM1ZjU0OTkwOTA1MzgyYjQxZGM5Njc1
ZmQ0OTAwHhcNMjUxMTA1MDAwMDAzWhcNMjUxMTA2MDAwMDAzWjAzMTEwLwYDVQQD
EygwNjZhYjUzYzA3N2ViNTcxNGZlZDI3ZWFiZmJmYzhjNWQ4MGNkZTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzafqL2O0jaxOA+CakiBNoXvissM4
l7Mp/wUgOpT3jomW40igIpaW1gpOidnJ/yyzm5OaksQYBOrwCE08ZqVtSri+Kryc
U0fsSrExLicmUl+0HGGQgZ1olUq5IIYo/oFD2ezs0YnylJAa9wcqm76OcXFsohir
22SnOnbQg1UWZTFvOsQjYctMGAhsBhD9KrQMNlwIeLU4Qjhfcin06mzCsXAkxom2
1mWTC7mEhuHuiLWQMGoMsxGQ3FpvanM8IBPJQhLRx5dv8gtw/A70fpXGd1Kks2I3
uXUIyvD1ckNtiJwgdjesROy3kgodoQR0uNo8/s5/oA/SwJy+5Q1IaaIG/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZqtTwHfrVxT+0n6r+/yMXYDN4qMB8GA1UdIwQY
MBaAFCEBtjiNZDX1SZCQU4K0HclnX9SQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVFHMk9JMWtOZlZKa0pCVGdyUWR5V2RmMUpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jMjA5NWEtM2IzZC00YWM0LTljMzIt
NGRmODkxMjE4OGY3LzEvSVFHMk9JMWtOZlZKa0pCVGdyUWR5V2RmMUpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9jMjA5NWEtM2IzZC00YWM0LTljMzItNGRmODkxMjE4OGY3
LzEvSVFHMk9JMWtOZlZKa0pCVGdyUWR5V2RmMUpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJaNL/8e/
ztcVllQxb343kIPlnhlx4Z1G+KWLfrJnnHgbEhtk3RQy13RLlV5Fu5CSN6SgU+Oc
pRtMSP+d2FtKjwHpKrp7SsFXwyonWBNjIBOnV049rtXZbaEZIB1S9kQnzllB+KUW
W3dCAiVu81fgaBCsVANd+IFBPawGFJIFhq58MKn4Zht0HTVnhHdLlXFawtTW1w6h
v5UTb+uv1wOrJ4KN2H/+NGwrx10EdI32oIvzTCtOCmju3X5CNPXMgLCg9CneHNAl
8PqmNVklxfUy9AU+QzXC8qsTxXcNj4PInmsyiC3WuLAg4H95ruszUka9Pmx1TZ7p
31xfO+p9UckrDA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:49:02 2025 by rpki-client