Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
File: iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft (raw, json)
Hash identifier: illEqMkr/vEgFOosjoF+JuQ1yIlQts/UcWuM3eBrq54=
Subject key identifier: 62:7B:22:E4:40:37:F4:B6:7C:6E:F4:42:D8:3C:65:C7:46:1E:36:F3
Authority key identifier: 88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE
Certificate issuer: /CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
Certificate serial: 019A4F62C699A87BA5DDA76043AA62CB70E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
Manifest number: 067B
Signing time: Tue 04 Nov 2025 15:01:04 +0000
Manifest this update: Tue 04 Nov 2025 15:01:04 +0000
Manifest next update: Wed 05 Nov 2025 15:01:04 +0000
Files and hashes: 1: NOTlqU2dG5SZUtFWrRvKPCIYT_I.roa (hash: fMBaaIac4pSZ5FYQhcUdq0rjdRPBorC9IDyKulvOrp0=)
2: iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl (hash: H4AkqX/yqP7QUG/CkTrazS2XGDun+wDAMOQBV6LwOYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:c6:99:a8:7b:a5:dd:a7:60:43:aa:62:cb:70:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
Validity
Not Before: Nov 4 15:01:04 2025 GMT
Not After : Nov 5 15:01:04 2025 GMT
Subject: CN=627b22e44037f4b67c6ef442d83c65c7461e36f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f8:e3:05:df:32:e3:25:3e:f1:02:ef:af:9c:
36:7b:c4:ca:5a:7c:05:b5:25:52:da:92:da:f4:5d:
40:1b:ce:a7:db:e6:23:47:9a:b1:1a:0d:d1:56:e4:
d6:ba:33:61:1a:fc:33:2e:dd:14:b8:00:29:1d:3d:
80:ed:bf:ff:e4:80:17:d5:51:b0:8a:87:ab:72:58:
80:88:bd:cd:4c:71:7f:25:ed:aa:c1:bb:ca:38:aa:
4e:d0:dc:ae:df:89:a0:d3:d4:c7:35:22:39:c8:8e:
16:88:d3:f1:77:4c:7e:ca:e6:21:ee:6f:e0:ad:b1:
73:0c:f9:4c:81:8d:57:51:2b:c7:f6:7d:91:81:75:
b4:0f:b4:5f:51:72:46:c6:ca:dd:72:82:cd:c3:b1:
70:0e:59:6c:95:2f:11:f0:10:31:56:06:b3:ae:11:
71:8b:f4:ee:4a:be:8a:1d:f2:5c:f0:68:d7:09:bf:
bf:e7:e1:1f:a6:f3:37:eb:70:08:33:38:06:93:6c:
f0:a3:b4:17:85:3b:d0:87:39:0e:32:a0:8d:f4:67:
7d:bd:cb:5e:78:e1:b0:bc:59:d7:7a:61:d1:b1:af:
95:e2:72:5d:1f:eb:49:25:b5:60:c0:9f:42:9c:3c:
11:7e:e3:90:9d:e1:7a:e8:93:06:5e:96:ee:21:e9:
5c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7B:22:E4:40:37:F4:B6:7C:6E:F4:42:D8:3C:65:C7:46:1E:36:F3
X509v3 Authority Key Identifier:
keyid:88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d9:f9:10:41:ab:7f:b0:5e:bb:67:94:04:93:96:80:c6:96:
d0:a7:25:eb:9b:d9:e9:05:71:a4:aa:b5:8f:eb:d0:9f:cb:24:
4f:ed:5b:26:a2:00:08:1b:05:93:6f:cf:52:0d:dc:31:8a:dc:
9c:31:1b:1f:3d:c0:c8:c4:d9:de:99:fc:d6:08:9c:5e:09:21:
4b:b8:4e:2f:f4:e2:e3:5f:2f:72:57:74:13:be:4c:99:1a:df:
80:ff:de:3a:fd:75:f0:85:68:9a:24:c3:b8:23:44:6a:41:50:
39:85:a6:bf:98:6f:e6:cb:57:aa:e9:99:4c:e2:48:14:20:a1:
e0:3a:47:41:5f:df:8e:67:99:15:22:9c:f4:12:b3:a7:16:ea:
f1:9f:40:25:61:81:e4:16:bb:f7:25:c9:e4:0b:89:91:2e:c3:
da:b9:fd:e7:f0:be:db:14:22:f7:22:a6:77:3e:96:52:d8:37:
d0:7a:7d:51:42:fb:f7:14:3a:06:19:f6:33:25:ae:dd:49:6c:
a8:c6:6b:98:e9:c9:07:2b:23:25:da:63:e9:84:66:d1:90:f2:
37:e6:c3:71:af:14:cf:d9:92:0d:7a:d9:1f:21:29:41:df:16:
f1:f6:c8:c8:35:99:c4:93:0f:7c:b8:fa:4c:cf:29:11:12:25:
8c:97:f9:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYsaZqHul3adgQ6piy3DjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZDVjODBiMzU4NzMyY2YxZWNlZWNmMmY1YmRjOGFiM2Rj
MTgxYWUwHhcNMjUxMTA0MTUwMTA0WhcNMjUxMTA1MTUwMTA0WjAzMTEwLwYDVQQD
Eyg2MjdiMjJlNDQwMzdmNGI2N2M2ZWY0NDJkODNjNjVjNzQ2MWUzNmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/jjBd8y4yU+8QLvr5w2e8TKWnwF
tSVS2pLa9F1AG86n2+YjR5qxGg3RVuTWujNhGvwzLt0UuAApHT2A7b//5IAX1VGw
ioercliAiL3NTHF/Je2qwbvKOKpO0Nyu34mg09THNSI5yI4WiNPxd0x+yuYh7m/g
rbFzDPlMgY1XUSvH9n2RgXW0D7RfUXJGxsrdcoLNw7FwDllslS8R8BAxVgazrhFx
i/TuSr6KHfJc8GjXCb+/5+EfpvM363AIMzgGk2zwo7QXhTvQhzkOMqCN9Gd9vcte
eOGwvFnXemHRsa+V4nJdH+tJJbVgwJ9CnDwRfuOQneF66JMGXpbuIelc4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJ7IuRAN/S2fG70Qtg8ZcdGHjbzMB8GA1UdIwQY
MBaAFIjVyAs1hzLPHs7s8vW9yKs9wYGuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU5YSUN6V0hNczhlenV6eTliM0lxejNCZ2E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iNzViOTItZjFjNy00YjU2LTlhOWYt
OWEyZjc5NmM5NDc3LzEvaU5YSUN6V0hNczhlenV6eTliM0lxejNCZ2E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9iNzViOTItZjFjNy00YjU2LTlhOWYtOWEyZjc5NmM5NDc3
LzEvaU5YSUN6V0hNczhlenV6eTliM0lxejNCZ2E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmtn5EEGr
f7Beu2eUBJOWgMaW0Kcl65vZ6QVxpKq1j+vQn8skT+1bJqIACBsFk2/PUg3cMYrc
nDEbHz3AyMTZ3pn81gicXgkhS7hOL/Ti418vcld0E75MmRrfgP/eOv118IVomiTD
uCNEakFQOYWmv5hv5stXqumZTOJIFCCh4DpHQV/fjmeZFSKc9BKzpxbq8Z9AJWGB
5Ba79yXJ5AuJkS7D2rn95/C+2xQi9yKmdz6WUtg30Hp9UUL79xQ6Bhn2MyWu3Uls
qMZrmOnJBysjJdpj6YRm0ZDyN+bDca8Uz9mSDXrZHyEpQd8W8fbIyDWZxJMPfLj6
TM8pERIljJf5SQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:48 2025 by rpki-client