Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
File: iK09YNkgV_8PoBH0UMNkbjUtpdg.mft (raw, json)
Hash identifier: kXB2TeKvdpOSSl6AhevPykEUe8I4Cae3wVC9WinUbBo=
Subject key identifier: 97:07:5A:61:F9:AE:4E:38:75:D9:B9:AF:03:BA:2D:72:BC:DA:0D:CC
Authority key identifier: 88:AD:3D:60:D9:20:57:FF:0F:A0:11:F4:50:C3:64:6E:35:2D:A5:D8
Certificate issuer: /CN=88ad3d60d92057ff0fa011f450c3646e352da5d8
Certificate serial: 019A4DAB273445D822E4489902085DBCE654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
Manifest number: 0360
Signing time: Tue 04 Nov 2025 07:00:53 +0000
Manifest this update: Tue 04 Nov 2025 07:00:53 +0000
Manifest next update: Wed 05 Nov 2025 07:00:53 +0000
Files and hashes: 1: ZbzYnCdTKy9eNC3OK0DEdLUOyKk.roa (hash: oL/nHAdw2PWuZlbLqbaKwj0TlvoNl+Sz5bzNx/L6zWY=)
2: iK09YNkgV_8PoBH0UMNkbjUtpdg.crl (hash: q27lsmoPVwfCZsn5mcoUNNwwgKbYx3Vamo0zQAMJm4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:27:34:45:d8:22:e4:48:99:02:08:5d:bc:e6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ad3d60d92057ff0fa011f450c3646e352da5d8
Validity
Not Before: Nov 4 07:00:53 2025 GMT
Not After : Nov 5 07:00:53 2025 GMT
Subject: CN=97075a61f9ae4e3875d9b9af03ba2d72bcda0dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2c:c0:5f:87:5c:b1:52:a8:05:3d:38:e9:82:
1a:52:40:a5:df:19:35:da:78:eb:4e:94:67:41:36:
30:cf:ed:fe:39:53:95:e9:8c:9a:43:21:f3:81:62:
6e:31:3f:2b:b3:88:b4:03:92:38:23:c5:d7:a8:d7:
27:6e:1c:6b:75:ec:e5:36:a5:5d:cf:6e:6d:87:cd:
c2:e3:7a:99:5a:1a:83:f8:10:7e:6d:db:7e:fa:dc:
b9:fb:6c:c8:df:37:5d:4e:51:b8:fe:e0:88:a1:23:
e7:92:2a:e6:63:20:38:ff:ce:57:34:91:96:9c:ec:
c8:f6:58:0b:cf:3c:f7:e7:7d:8f:64:45:3d:4d:ed:
74:3e:79:3f:a7:04:21:62:52:18:9d:94:c4:f2:ee:
48:55:62:73:b3:5e:3e:64:67:eb:b8:ce:3d:b0:71:
9c:ad:19:4f:6c:66:e8:b0:b2:3a:30:cd:0c:23:a3:
b8:96:cd:75:8d:00:e3:d5:17:07:ae:fd:f9:16:bc:
8d:cf:dc:8d:2f:a9:a3:86:50:37:77:62:a1:f4:65:
63:30:d4:e7:d9:74:45:a4:99:75:f6:be:19:54:84:
3f:76:2c:a8:cf:17:dc:ec:65:c3:2b:6e:46:c9:e4:
1a:7c:be:b1:5d:80:fe:62:2b:c1:62:eb:87:af:98:
cb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:07:5A:61:F9:AE:4E:38:75:D9:B9:AF:03:BA:2D:72:BC:DA:0D:CC
X509v3 Authority Key Identifier:
keyid:88:AD:3D:60:D9:20:57:FF:0F:A0:11:F4:50:C3:64:6E:35:2D:A5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:11:67:6a:1f:ac:92:6b:6b:a1:d0:20:95:50:d2:92:2d:ab:
bb:a7:50:ea:10:68:28:35:0d:bd:6d:75:18:c9:f9:41:51:51:
9e:30:fd:df:8a:67:a9:7b:49:7c:c6:d8:53:dd:ed:8c:4e:b1:
9e:7e:82:d0:5c:b3:47:a3:c7:ab:7b:8b:04:2f:fc:4b:8e:51:
12:13:55:cc:3c:64:f5:6e:c8:b3:cb:ef:8c:49:59:91:33:dc:
5f:b7:df:eb:52:1c:af:ca:4b:21:bb:f2:05:ac:4a:05:a7:81:
69:01:c0:53:67:66:50:55:af:25:01:a8:7b:95:56:b9:f2:c3:
bf:4b:a5:af:71:ba:3a:bf:d2:b5:b5:09:15:01:b1:f3:95:8a:
c8:35:f7:ad:21:d9:7f:35:b5:e7:5f:31:6b:ad:f0:cc:a7:7f:
ce:4b:24:eb:7a:ec:2d:34:cd:85:38:db:f1:e1:dc:84:63:d6:
85:ef:69:30:f1:a9:b5:ff:89:00:68:6d:58:8e:f5:3b:69:cd:
07:98:72:13:34:93:8c:11:6a:48:39:7b:07:f3:58:2e:6f:e2:
7a:bb:10:d5:9c:0e:7f:0c:11:e8:3a:7b:4f:cd:fb:e6:6b:6b:
72:23:19:70:1e:d4:07:14:1d:ea:5b:ff:a9:12:ac:05:d6:9d:
df:6b:61:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqyc0Rdgi5EiZAghdvOZUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YWQzZDYwZDkyMDU3ZmYwZmEwMTFmNDUwYzM2NDZlMzUy
ZGE1ZDgwHhcNMjUxMTA0MDcwMDUzWhcNMjUxMTA1MDcwMDUzWjAzMTEwLwYDVQQD
Eyg5NzA3NWE2MWY5YWU0ZTM4NzVkOWI5YWYwM2JhMmQ3MmJjZGEwZGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSzAX4dcsVKoBT046YIaUkCl3xk1
2njrTpRnQTYwz+3+OVOV6YyaQyHzgWJuMT8rs4i0A5I4I8XXqNcnbhxrdezlNqVd
z25th83C43qZWhqD+BB+bdt++ty5+2zI3zddTlG4/uCIoSPnkirmYyA4/85XNJGW
nOzI9lgLzzz3532PZEU9Te10Pnk/pwQhYlIYnZTE8u5IVWJzs14+ZGfruM49sHGc
rRlPbGbosLI6MM0MI6O4ls11jQDj1RcHrv35FryNz9yNL6mjhlA3d2Kh9GVjMNTn
2XRFpJl19r4ZVIQ/diyozxfc7GXDK25GyeQafL6xXYD+YivBYuuHr5jLywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcHWmH5rk44ddm5rwO6LXK82g3MMB8GA1UdIwQY
MBaAFIitPWDZIFf/D6AR9FDDZG41LaXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUswOVlOa2dWXzhQb0JIMFVNTmtialV0cGRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wNzlkZGItODIwYS00ZDUxLWJmOGQt
OGQxMWVhZDNhZjhjLzEvaUswOVlOa2dWXzhQb0JIMFVNTmtialV0cGRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8wNzlkZGItODIwYS00ZDUxLWJmOGQtOGQxMWVhZDNhZjhj
LzEvaUswOVlOa2dWXzhQb0JIMFVNTmtialV0cGRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABRFnah+s
kmtrodAglVDSki2ru6dQ6hBoKDUNvW11GMn5QVFRnjD934pnqXtJfMbYU93tjE6x
nn6C0FyzR6PHq3uLBC/8S45REhNVzDxk9W7Is8vvjElZkTPcX7ff61Icr8pLIbvy
BaxKBaeBaQHAU2dmUFWvJQGoe5VWufLDv0ulr3G6Or/StbUJFQGx85WKyDX3rSHZ
fzW1518xa63wzKd/zksk63rsLTTNhTjb8eHchGPWhe9pMPGptf+JAGhtWI71O2nN
B5hyEzSTjBFqSDl7B/NYLm/iersQ1ZwOfwwR6Dp7T8375mtrciMZcB7UBxQd6lv/
qRKsBdad32thTg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:32 2025 by rpki-client