Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
File: IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft (raw, json)
Hash identifier: K8HLzALtCi8/4TD+cQdOZ0bPbE67knwsjzBOiuKPxeA=
Subject key identifier: 29:36:BC:83:48:72:F9:D7:2A:21:2E:1B:E9:77:86:F4:B1:D5:6A:BF
Authority key identifier: 20:50:DF:51:F0:E5:BC:81:DB:4B:05:F4:49:F7:43:08:D7:FC:FA:2E
Certificate issuer: /CN=2050df51f0e5bc81db4b05f449f74308d7fcfa2e
Certificate serial: 019A5150A27F50B8D3ED26056BCFAF3B893D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
Manifest number: 1696
Signing time: Wed 05 Nov 2025 00:00:30 +0000
Manifest this update: Wed 05 Nov 2025 00:00:30 +0000
Manifest next update: Thu 06 Nov 2025 00:00:30 +0000
Files and hashes: 1: 5TmF660osVLf2yedLZYIouqKzCQ.roa (hash: svEuw+A3XrP85kyKwdSMhC87V3nCBDwlLWE+iKrkH+s=)
2: IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl (hash: x8nApQfoFLKNmTHd/Tqvz/yfMVUojcKa1wAfiGzVUPw=)
3: QbfQw6PQWXMnUYTcNMeoW813ttw.roa (hash: g9TBhQ7bZYV+JTfg685xMP7NzWGbPIajKmZ/OPgHv/k=)
4: SqW3-Pav388bYoCFb9onFjXDUEM.roa (hash: rQ+0p4O5Q843ntXsLKc+VAqP1ejZ7AJIeWPPGt1vzco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:a2:7f:50:b8:d3:ed:26:05:6b:cf:af:3b:89:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2050df51f0e5bc81db4b05f449f74308d7fcfa2e
Validity
Not Before: Nov 5 00:00:30 2025 GMT
Not After : Nov 6 00:00:30 2025 GMT
Subject: CN=2936bc834872f9d72a212e1be97786f4b1d56abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c5:33:9e:86:a5:dd:40:0a:01:e2:1f:1a:13:
c4:9f:17:1c:c0:86:5e:ad:dc:22:2b:51:4b:3a:30:
6e:fc:0b:ca:f7:c9:6f:d7:30:97:34:e2:f9:0c:f0:
4e:ad:53:51:31:08:03:71:0b:02:66:2d:85:ec:ab:
d4:c9:af:4f:76:cd:25:dc:d9:d6:cd:83:f6:6c:62:
5d:8e:29:af:17:eb:be:d3:7c:f0:31:9e:fb:8a:08:
14:27:c9:3c:94:b5:f3:6d:27:b3:02:84:86:13:56:
40:e5:c1:d5:0f:7e:88:a9:64:41:86:28:e1:8a:96:
ed:ff:97:c8:ab:30:34:d2:78:8d:ea:bc:88:34:a1:
50:22:46:9f:54:78:7b:ae:8e:ce:4c:b2:62:19:43:
ed:c6:27:a3:38:6c:a3:82:7c:5a:ce:03:93:49:89:
08:62:68:27:82:c4:22:a7:a5:16:50:e6:54:56:d7:
77:a1:54:d2:f2:17:39:56:04:86:be:df:7c:9c:ec:
e8:50:df:55:74:ea:26:fd:c1:79:87:9b:e7:03:0f:
c4:d2:9d:d2:bb:8f:c2:65:18:7e:72:49:58:1d:6c:
9a:7d:04:85:24:3f:b0:a1:4e:a7:93:45:f8:1b:c9:
ab:dd:ad:e6:42:72:08:d7:fd:e6:26:5f:46:bc:22:
fb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:36:BC:83:48:72:F9:D7:2A:21:2E:1B:E9:77:86:F4:B1:D5:6A:BF
X509v3 Authority Key Identifier:
keyid:20:50:DF:51:F0:E5:BC:81:DB:4B:05:F4:49:F7:43:08:D7:FC:FA:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f3:02:1e:33:3a:22:84:3a:84:e2:78:a4:5f:47:fb:82:cc:
09:28:cb:19:a3:90:63:51:9f:a9:45:73:5a:1b:aa:7d:55:0e:
25:78:00:24:fd:65:7b:9c:62:4b:9f:3e:e7:f3:c0:12:0d:d5:
61:79:a8:15:2f:bc:e8:23:ed:aa:06:19:88:99:14:8c:45:d8:
c6:2f:55:7d:4e:5b:0b:eb:40:47:9c:63:85:5f:bc:4f:bc:06:
33:c9:da:94:2e:13:c3:cc:5d:fa:c5:65:52:8a:d9:0c:5f:d3:
62:34:f6:5e:e8:2c:a4:8f:7a:1e:d4:9b:01:05:1e:36:45:a7:
83:9f:9c:bc:08:1d:96:bc:0f:ab:6d:2a:3f:4b:77:87:a6:8a:
34:06:a1:f0:ac:4f:33:99:89:78:e0:08:9a:fa:95:8c:2f:8b:
ac:90:3d:87:c4:c9:05:ea:af:ba:38:1c:00:70:24:02:0d:8f:
b1:31:91:34:0f:da:b3:09:be:55:ca:5d:5a:99:c8:de:f8:d8:
10:39:4b:04:fb:88:92:c9:50:af:3e:b3:bf:62:1b:18:cc:c2:
df:60:82:e4:db:7f:80:2b:52:b9:69:b8:79:f6:99:cc:3d:3a:
3f:7a:75:66:84:b3:98:e3:bf:8e:9a:30:49:fe:35:5e:3b:a7:
42:8d:b8:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUKJ/ULjT7SYFa8+vO4k9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNTBkZjUxZjBlNWJjODFkYjRiMDVmNDQ5Zjc0MzA4ZDdm
Y2ZhMmUwHhcNMjUxMTA1MDAwMDMwWhcNMjUxMTA2MDAwMDMwWjAzMTEwLwYDVQQD
EygyOTM2YmM4MzQ4NzJmOWQ3MmEyMTJlMWJlOTc3ODZmNGIxZDU2YWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sUznoal3UAKAeIfGhPEnxccwIZe
rdwiK1FLOjBu/AvK98lv1zCXNOL5DPBOrVNRMQgDcQsCZi2F7KvUya9Pds0l3NnW
zYP2bGJdjimvF+u+03zwMZ77iggUJ8k8lLXzbSezAoSGE1ZA5cHVD36IqWRBhijh
ipbt/5fIqzA00niN6ryINKFQIkafVHh7ro7OTLJiGUPtxiejOGyjgnxazgOTSYkI
YmgngsQip6UWUOZUVtd3oVTS8hc5VgSGvt98nOzoUN9VdOom/cF5h5vnAw/E0p3S
u4/CZRh+cklYHWyafQSFJD+woU6nk0X4G8mr3a3mQnII1/3mJl9GvCL7/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCk2vINIcvnXKiEuG+l3hvSx1Wq/MB8GA1UdIwQY
MBaAFCBQ31Hw5byB20sF9En3QwjX/PouMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUZEZlVmRGx2SUhiU3dYMFNmZERDTmY4LWk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS82MGUzNzYtOTkzYy00YmFmLWI1OTAt
NmU2NDgxZTU3NjVjLzEvSUZEZlVmRGx2SUhiU3dYMFNmZERDTmY4LWk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS82MGUzNzYtOTkzYy00YmFmLWI1OTAtNmU2NDgxZTU3NjVj
LzEvSUZEZlVmRGx2SUhiU3dYMFNmZERDTmY4LWk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMfMCHjM6
IoQ6hOJ4pF9H+4LMCSjLGaOQY1GfqUVzWhuqfVUOJXgAJP1le5xiS58+5/PAEg3V
YXmoFS+86CPtqgYZiJkUjEXYxi9VfU5bC+tAR5xjhV+8T7wGM8nalC4Tw8xd+sVl
UorZDF/TYjT2XugspI96HtSbAQUeNkWng5+cvAgdlrwPq20qP0t3h6aKNAah8KxP
M5mJeOAImvqVjC+LrJA9h8TJBeqvujgcAHAkAg2PsTGRNA/aswm+VcpdWpnI3vjY
EDlLBPuIkslQrz6zv2IbGMzC32CC5Nt/gCtSuWm4efaZzD06P3p1ZoSzmOO/jpow
Sf41XjunQo241A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:12 2025 by rpki-client