Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
File: IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft (raw, json)
Hash identifier: MP9rkBMKc8BTXz7d32hfUUXW43u3mpbEJdPUtkDYRrk=
Subject key identifier: B0:96:D2:F9:D1:F9:6B:4E:01:46:9B:8A:97:C6:85:37:69:B5:3A:16
Authority key identifier: 20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
Certificate issuer: /CN=205945443c5b25e4dcf6203f061ac04d36871554
Certificate serial: 019A4F9941C07C9DFE0BE9B45244541EB630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 16:00:35 +0000
Manifest this update: Tue 04 Nov 2025 16:00:35 +0000
Manifest next update: Wed 05 Nov 2025 16:00:35 +0000
Files and hashes: 1: IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl (hash: L/r+ptkAuJ/ExPTs8CpDyNH2CLZUycqf0dZtzVWeQW0=)
2: vwwOJsNwZhQ7jXxQBO6C3CzaqW4.roa (hash: PgsS8twf0GYuOEotT5Wskvo1GlMh/1Ykh+edTuYgZgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:41:c0:7c:9d:fe:0b:e9:b4:52:44:54:1e:b6:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=205945443c5b25e4dcf6203f061ac04d36871554
Validity
Not Before: Nov 4 16:00:35 2025 GMT
Not After : Nov 5 16:00:35 2025 GMT
Subject: CN=b096d2f9d1f96b4e01469b8a97c6853769b53a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7d:8b:48:0b:73:0a:8a:26:bf:7f:60:be:91:
e8:62:10:d7:e3:9e:77:91:57:4b:3d:ec:b8:c9:a5:
98:09:8b:5e:7c:0c:50:11:36:3f:de:64:13:33:2e:
e5:aa:11:6e:b9:92:2c:d1:33:68:e6:41:61:ab:b8:
f6:cb:99:9a:82:7d:63:96:3e:a7:04:3d:a8:1e:63:
cc:af:7b:9e:fd:01:26:20:e0:03:ad:d0:80:c3:52:
3e:83:41:b4:60:f2:2e:f5:50:55:e9:d7:b5:4b:5a:
91:f7:a5:4d:19:09:44:62:c6:bc:2c:87:45:71:a5:
77:7c:87:0d:62:de:00:8c:7c:0c:ab:87:3e:5f:c2:
ce:a9:0f:b9:47:82:8f:4b:6b:83:6a:f4:08:24:75:
de:6b:6a:86:9a:a8:7f:56:d7:37:44:77:41:1b:f5:
16:38:c4:44:ed:e2:8a:12:9e:f9:aa:f9:ba:12:81:
d7:0b:23:a2:1e:aa:a0:5a:ec:00:23:fc:10:0e:1e:
fc:b0:5f:bb:96:70:2b:7a:1e:2b:6c:d9:c9:f3:0b:
8e:ff:bf:12:34:29:92:08:92:07:9f:93:05:12:2c:
94:d5:16:8d:dc:a2:6d:a8:0f:db:22:56:96:de:e1:
d3:da:67:52:2d:e0:64:1b:00:e2:81:3b:63:fe:04:
95:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:96:D2:F9:D1:F9:6B:4E:01:46:9B:8A:97:C6:85:37:69:B5:3A:16
X509v3 Authority Key Identifier:
keyid:20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c2:4c:6e:9c:a5:f4:3f:bb:17:97:e7:28:cb:7b:dc:86:23:
24:dd:41:79:6e:32:23:6e:f2:53:ad:9d:87:58:5d:bc:d1:de:
b2:59:02:a0:87:84:f7:16:8e:54:33:da:7f:53:17:04:e4:0d:
82:7a:71:87:ff:80:c0:33:25:79:aa:f9:c8:54:cb:77:42:68:
33:8e:e4:ff:81:6d:dc:72:63:76:87:85:50:39:49:cd:56:d6:
ea:4a:02:96:78:11:3f:5b:99:ea:4c:28:aa:3a:3e:ce:59:bf:
54:e3:f1:03:50:1f:14:2c:29:30:b3:00:44:79:42:9a:3a:f8:
23:4a:a1:cb:59:eb:4c:94:e6:a5:01:76:5d:d7:9f:85:54:5f:
c1:2a:61:39:79:59:d3:89:b8:16:bc:8d:e2:93:e1:41:d9:cf:
15:18:2f:75:be:9b:e7:a3:f7:c5:d3:25:99:24:24:06:ca:2d:
8c:7d:22:7c:f5:64:e5:ac:f8:06:df:64:47:bb:f9:c4:09:9b:
bd:66:c8:f5:70:70:84:74:86:69:c2:63:21:3f:ad:22:34:3c:
17:06:9e:79:78:58:29:2c:8b:f1:96:be:75:d4:32:00:48:c0:
21:58:a5:65:10:83:bf:54:ad:0a:9b:65:1b:b2:d8:13:46:75:
bb:f7:fc:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmUHAfJ3+C+m0UkRUHrYwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNTk0NTQ0M2M1YjI1ZTRkY2Y2MjAzZjA2MWFjMDRkMzY4
NzE1NTQwHhcNMjUxMTA0MTYwMDM1WhcNMjUxMTA1MTYwMDM1WjAzMTEwLwYDVQQD
EyhiMDk2ZDJmOWQxZjk2YjRlMDE0NjliOGE5N2M2ODUzNzY5YjUzYTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH2LSAtzCoomv39gvpHoYhDX4553
kVdLPey4yaWYCYtefAxQETY/3mQTMy7lqhFuuZIs0TNo5kFhq7j2y5magn1jlj6n
BD2oHmPMr3ue/QEmIOADrdCAw1I+g0G0YPIu9VBV6de1S1qR96VNGQlEYsa8LIdF
caV3fIcNYt4AjHwMq4c+X8LOqQ+5R4KPS2uDavQIJHXea2qGmqh/Vtc3RHdBG/UW
OMRE7eKKEp75qvm6EoHXCyOiHqqgWuwAI/wQDh78sF+7lnAreh4rbNnJ8wuO/78S
NCmSCJIHn5MFEiyU1RaN3KJtqA/bIlaW3uHT2mdSLeBkGwDigTtj/gSVeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCW0vnR+WtOAUabipfGhTdptToWMB8GA1UdIwQY
MBaAFCBZRUQ8WyXk3PYgPwYawE02hxVUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUZsRlJEeGJKZVRjOWlBX0JockFUVGFIRlZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85NDUzMDUtMGE2My00YzJmLWFhZmYt
Y2IyMjBiNzE5ZTc4LzEvSUZsRlJEeGJKZVRjOWlBX0JockFUVGFIRlZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85NDUzMDUtMGE2My00YzJmLWFhZmYtY2IyMjBiNzE5ZTc4
LzEvSUZsRlJEeGJKZVRjOWlBX0JockFUVGFIRlZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp8JMbpyl
9D+7F5fnKMt73IYjJN1BeW4yI27yU62dh1hdvNHeslkCoIeE9xaOVDPaf1MXBOQN
gnpxh/+AwDMlear5yFTLd0JoM47k/4Ft3HJjdoeFUDlJzVbW6koClngRP1uZ6kwo
qjo+zlm/VOPxA1AfFCwpMLMARHlCmjr4I0qhy1nrTJTmpQF2XdefhVRfwSphOXlZ
04m4FryN4pPhQdnPFRgvdb6b56P3xdMlmSQkBsotjH0ifPVk5az4Bt9kR7v5xAmb
vWbI9XBwhHSGacJjIT+tIjQ8FwaeeXhYKSyL8Za+ddQyAEjAIVilZRCDv1StCptl
G7LYE0Z1u/f8EA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:17:58 2025 by rpki-client