Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
File: irPpZch0fi-l3dEoV2c_BgQu-kM.mft (raw, json)
Hash identifier: EFoqMzNBs/lowPW71xEY9+MfGZAum11/brhzRyA8P/Y=
Subject key identifier: 67:A0:CC:88:95:28:CE:F1:CD:AB:61:F8:EF:1D:54:C7:45:8B:3A:39
Authority key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
Certificate issuer: /CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Certificate serial: 019A4E192063D702D69C462ADED4BF3509BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
Manifest number: 16A0
Signing time: Tue 04 Nov 2025 09:01:00 +0000
Manifest this update: Tue 04 Nov 2025 09:01:00 +0000
Manifest next update: Wed 05 Nov 2025 09:01:00 +0000
Files and hashes: 1: 0R4cTom2N3Ffy-a36Ai0y_lwR7M.roa (hash: Nepk/Ut8yLvwSKOE+VPPTDkKY+eqYlx1ya61v2fExqo=)
2: DO5JxSipVW_jSyusVYE1KNyV5oM.roa (hash: fTaf/BSF7U37w4OYShE1QwyUlpAokZv3Xb6JIFlzFT0=)
3: MHydlao-1yBTTsCdp3bBe4bDnkc.roa (hash: OnwOrVTgc/R+eeJsST7imMdVV9F4opbfB++sLNDhiX8=)
4: irPpZch0fi-l3dEoV2c_BgQu-kM.crl (hash: zX1wUUjxVA+s1Jkx/wlebNgxQPs/5I3i1G0cHhQbIvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:20:63:d7:02:d6:9c:46:2a:de:d4:bf:35:09:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Validity
Not Before: Nov 4 09:01:00 2025 GMT
Not After : Nov 5 09:01:00 2025 GMT
Subject: CN=67a0cc889528cef1cdab61f8ef1d54c7458b3a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d2:8b:05:0c:fc:ba:77:cb:fb:ce:19:d3:82:
9c:56:cd:d2:1c:39:94:65:4b:93:10:1e:9b:e1:47:
6f:77:ba:6b:b8:1c:2c:f0:62:53:2b:ef:fd:14:13:
02:d2:40:76:a1:1c:8d:ad:a1:04:d1:b2:38:77:45:
4e:9c:0b:99:34:7f:12:72:44:01:6e:f6:a1:b1:88:
39:c9:2c:b6:46:3c:f1:d3:71:b2:5d:f2:1c:f2:97:
14:47:66:2a:87:ec:68:f8:93:5b:69:a3:5b:40:d4:
14:1a:d5:4e:e6:c1:f0:74:84:78:ef:60:a3:70:d2:
c3:8f:0a:d0:4f:92:44:c8:c7:3c:29:0f:a3:20:00:
28:da:7e:0b:5c:bf:85:a7:30:9d:43:3a:8e:75:4d:
2d:0e:0c:bb:38:20:3d:84:56:8c:4a:e5:ee:53:46:
af:2d:d6:44:cc:c4:bf:a7:e5:e3:3d:4c:43:8d:d7:
a4:3f:ce:bc:b8:24:cb:b8:c8:54:cd:e6:10:cf:27:
c1:c5:cd:6e:33:25:1d:da:b1:0b:51:32:9c:78:61:
09:82:f0:ed:ab:9c:ea:a8:f2:3e:74:7b:36:13:c2:
42:54:23:d1:e8:a7:9f:18:ac:d5:3d:19:78:b5:f9:
67:ae:a0:15:e5:4f:55:bc:6c:a0:f8:48:31:52:d1:
bd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A0:CC:88:95:28:CE:F1:CD:AB:61:F8:EF:1D:54:C7:45:8B:3A:39
X509v3 Authority Key Identifier:
keyid:8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:be:f1:d4:61:13:02:d1:64:4f:c5:7d:cd:89:c8:ce:cb:91:
b0:42:96:ee:d9:00:59:a2:a6:99:78:e7:57:3a:9a:56:08:98:
1d:16:97:ef:8b:63:5f:ad:20:61:9b:a4:75:a4:d6:8e:3a:e8:
fd:2b:8f:9b:88:7b:1e:85:e4:8e:94:35:c4:b5:d9:3a:85:3f:
7a:c7:f0:ed:0b:c4:a6:7f:ff:77:9a:a7:2e:77:ea:c4:16:49:
c9:80:68:e8:3e:f8:22:e0:c5:10:46:07:fe:73:c2:68:28:0f:
bb:6e:1a:e6:21:1d:a9:a4:69:db:87:ff:e9:24:f2:fa:aa:9b:
82:95:00:48:a7:76:71:b4:f2:8d:fe:35:bd:ba:90:92:a1:e9:
21:cf:fc:78:62:05:91:54:08:23:3d:dd:c5:56:f4:ec:3b:c2:
f8:1b:c4:7b:b8:ea:79:83:ef:83:8c:b9:a0:5b:fa:f0:d9:29:
9b:b6:52:f3:93:45:e8:2f:f9:3d:b7:6b:ed:90:25:e6:95:c4:
98:fd:ac:d0:33:99:59:7e:b5:e3:a9:97:e5:7b:37:0b:49:5a:
25:e5:a3:38:dd:57:54:bb:16:f5:20:b9:a6:47:0a:60:39:f5:
ba:96:e9:9c:7f:4b:00:f3:1a:93:9a:02:63:65:04:b6:4e:9a:
99:ed:cd:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGSBj1wLWnEYq3tS/NQm/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYjNlOTY1Yzg3NDdlMmZhNWRkZDEyODU3NjczZjA2MDQy
ZWZhNDMwHhcNMjUxMTA0MDkwMTAwWhcNMjUxMTA1MDkwMTAwWjAzMTEwLwYDVQQD
Eyg2N2EwY2M4ODk1MjhjZWYxY2RhYjYxZjhlZjFkNTRjNzQ1OGIzYTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldKLBQz8unfL+84Z04KcVs3SHDmU
ZUuTEB6b4Udvd7pruBws8GJTK+/9FBMC0kB2oRyNraEE0bI4d0VOnAuZNH8SckQB
bvahsYg5ySy2Rjzx03GyXfIc8pcUR2Yqh+xo+JNbaaNbQNQUGtVO5sHwdIR472Cj
cNLDjwrQT5JEyMc8KQ+jIAAo2n4LXL+FpzCdQzqOdU0tDgy7OCA9hFaMSuXuU0av
LdZEzMS/p+XjPUxDjdekP868uCTLuMhUzeYQzyfBxc1uMyUd2rELUTKceGEJgvDt
q5zqqPI+dHs2E8JCVCPR6KefGKzVPRl4tflnrqAV5U9VvGyg+EgxUtG9rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGegzIiVKM7xzath+O8dVMdFizo5MB8GA1UdIwQY
MBaAFIqz6WXIdH4vpd3RKFdnPwYELvpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXJQcFpjaDBmaS1sM2RFb1YyY19CZ1F1LWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yNTEzNjAtYzVjNS00YTQwLWFmNzIt
MDQ0MjdhOTlmMWM1LzEvaXJQcFpjaDBmaS1sM2RFb1YyY19CZ1F1LWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8yNTEzNjAtYzVjNS00YTQwLWFmNzItMDQ0MjdhOTlmMWM1
LzEvaXJQcFpjaDBmaS1sM2RFb1YyY19CZ1F1LWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApr7x1GET
AtFkT8V9zYnIzsuRsEKW7tkAWaKmmXjnVzqaVgiYHRaX74tjX60gYZukdaTWjjro
/SuPm4h7HoXkjpQ1xLXZOoU/esfw7QvEpn//d5qnLnfqxBZJyYBo6D74IuDFEEYH
/nPCaCgPu24a5iEdqaRp24f/6STy+qqbgpUASKd2cbTyjf41vbqQkqHpIc/8eGIF
kVQIIz3dxVb07DvC+BvEe7jqeYPvg4y5oFv68Nkpm7ZS85NF6C/5Pbdr7ZAl5pXE
mP2s0DOZWX6146mX5Xs3C0laJeWjON1XVLsW9SC5pkcKYDn1upbpnH9LAPMak5oC
Y2UEtk6ame3NJw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:09 2025 by rpki-client