Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
File: IuSOFh5JBZI_bUqirgohUw8t4gs.mft (raw, json)
Hash identifier: DfXKswuc1RUXHHRMNc+pWVWj6kEyI+qHFAB7FbGvIvk=
Subject key identifier: 75:FB:D1:CF:4B:83:A9:CA:33:2F:E8:36:87:20:ED:9A:CF:C3:7F:52
Authority key identifier: 22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
Certificate issuer: /CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Certificate serial: 019A52D2872EBB82AF7337062AFB8CEB89A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 07:02:00 +0000
Manifest this update: Wed 05 Nov 2025 07:02:00 +0000
Manifest next update: Thu 06 Nov 2025 07:02:00 +0000
Files and hashes: 1: IuSOFh5JBZI_bUqirgohUw8t4gs.crl (hash: emvOIHz5mBAr260ayJxfKcwPge2sMnxsQe3Kk3bDSYc=)
2: OUi5qBFFBiQ3EGmTWiGmad22xM4.roa (hash: KwdKSyLAfkRw0QNUdiy6X/wiXk2JmvHy0XAz3/ojAhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:87:2e:bb:82:af:73:37:06:2a:fb:8c:eb:89:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Validity
Not Before: Nov 5 07:02:00 2025 GMT
Not After : Nov 6 07:02:00 2025 GMT
Subject: CN=75fbd1cf4b83a9ca332fe8368720ed9acfc37f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:98:c7:0e:f5:ea:b4:00:37:7b:fa:72:75:2a:
a2:7d:75:91:1f:2f:ed:61:ca:7a:ad:b6:e7:26:19:
de:54:35:36:99:70:d3:20:21:ce:73:7b:9b:4d:8f:
5c:53:08:db:d0:9c:6c:8b:8a:4c:5a:c4:19:99:6e:
af:34:76:1f:ce:5d:00:fc:f1:05:8f:52:da:76:03:
7b:18:b6:b9:e4:11:f8:4b:45:35:54:2b:f5:bc:fb:
fd:25:5e:44:d7:79:de:fa:7c:41:13:9d:1f:4f:3e:
ed:66:9f:33:cb:30:49:35:ee:b3:9e:96:7d:38:16:
77:b8:9f:46:b9:af:1d:5c:ff:20:24:75:bf:81:35:
8c:96:d7:70:67:2e:ba:a9:ec:03:15:fd:20:d3:49:
8b:30:e7:69:f9:f4:6c:92:ab:0e:d3:f1:d6:d3:18:
d4:e4:91:b5:b1:6e:00:eb:01:b2:42:5f:d1:9f:64:
83:12:04:f3:42:5c:fd:c1:c5:e9:fe:36:57:d5:d4:
0f:03:fd:9f:ac:79:8c:8f:bc:0b:9f:23:31:a4:3e:
25:0e:50:d5:6b:72:e2:8b:79:f1:5b:90:20:10:48:
b1:dd:09:a2:86:b6:09:a4:e5:21:1d:54:50:8f:fc:
5a:c7:a1:c3:be:9c:46:81:94:c6:36:83:9b:8d:e1:
2b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FB:D1:CF:4B:83:A9:CA:33:2F:E8:36:87:20:ED:9A:CF:C3:7F:52
X509v3 Authority Key Identifier:
keyid:22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:12:da:bb:8c:f7:0d:2a:5d:d4:2c:e2:96:5d:53:75:95:d9:
72:71:2f:a4:0b:a1:73:32:8a:a8:47:37:ef:4d:3d:1c:40:74:
ac:c9:0c:ab:13:8d:bc:79:55:bd:c2:95:27:63:46:05:d8:ec:
2f:01:c9:2f:1a:2b:19:56:3d:28:df:9d:e2:ab:02:c0:49:74:
7d:d6:9c:9f:4a:d0:2a:04:1f:92:62:04:fc:87:e8:c2:69:42:
04:cf:8b:bf:b9:da:45:ac:b8:bb:25:83:4f:42:de:4d:e6:e1:
bc:98:62:b3:ea:78:7e:a1:9c:b7:55:c6:34:f8:6c:02:fe:8b:
c4:9a:ba:b0:cd:27:22:db:71:06:64:7a:26:5c:78:08:bf:d1:
30:46:ea:5c:f5:4c:c0:69:d4:70:2b:90:64:10:73:25:92:84:
ba:1c:61:c7:46:fd:72:a4:bd:bd:39:61:89:69:66:21:fa:b9:
9b:52:42:86:ae:c2:80:ff:aa:b0:b6:76:e8:b2:d3:70:8d:ff:
70:f2:23:7a:f9:5b:cc:87:9c:e4:9d:36:5b:b2:73:9d:18:1f:
98:42:52:67:22:f2:8a:e1:f2:b5:99:ad:ff:40:91:4b:3e:1e:
72:93:37:a4:98:6b:55:47:2f:c9:19:53:ff:44:ec:f6:7e:81:
5a:0a:a5:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0ocuu4KvczcGKvuM64mhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZTQ4ZTE2MWU0OTA1OTIzZjZkNGFhMmFlMGEyMTUzMGYy
ZGUyMGIwHhcNMjUxMTA1MDcwMjAwWhcNMjUxMTA2MDcwMjAwWjAzMTEwLwYDVQQD
Eyg3NWZiZDFjZjRiODNhOWNhMzMyZmU4MzY4NzIwZWQ5YWNmYzM3ZjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5jHDvXqtAA3e/pydSqifXWRHy/t
Ycp6rbbnJhneVDU2mXDTICHOc3ubTY9cUwjb0Jxsi4pMWsQZmW6vNHYfzl0A/PEF
j1LadgN7GLa55BH4S0U1VCv1vPv9JV5E13ne+nxBE50fTz7tZp8zyzBJNe6znpZ9
OBZ3uJ9Gua8dXP8gJHW/gTWMltdwZy66qewDFf0g00mLMOdp+fRskqsO0/HW0xjU
5JG1sW4A6wGyQl/Rn2SDEgTzQlz9wcXp/jZX1dQPA/2frHmMj7wLnyMxpD4lDlDV
a3Lii3nxW5AgEEix3QmihrYJpOUhHVRQj/xax6HDvpxGgZTGNoObjeErjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHX70c9Lg6nKMy/oNocg7ZrPw39SMB8GA1UdIwQY
MBaAFCLkjhYeSQWSP21Koq4KIVMPLeILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXVTT0ZoNUpCWklfYlVxaXJnb2hVdzh0NGdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yYzM0ZTktNzU1OS00MWE2LTljYWMt
M2U2Yjc1MWE1NWY0LzEvSXVTT0ZoNUpCWklfYlVxaXJnb2hVdzh0NGdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8yYzM0ZTktNzU1OS00MWE2LTljYWMtM2U2Yjc1MWE1NWY0
LzEvSXVTT0ZoNUpCWklfYlVxaXJnb2hVdzh0NGdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxLau4z3
DSpd1Czill1TdZXZcnEvpAuhczKKqEc37009HEB0rMkMqxONvHlVvcKVJ2NGBdjs
LwHJLxorGVY9KN+d4qsCwEl0fdacn0rQKgQfkmIE/IfowmlCBM+Lv7naRay4uyWD
T0LeTebhvJhis+p4fqGct1XGNPhsAv6LxJq6sM0nIttxBmR6Jlx4CL/RMEbqXPVM
wGnUcCuQZBBzJZKEuhxhx0b9cqS9vTlhiWlmIfq5m1JChq7CgP+qsLZ26LLTcI3/
cPIjevlbzIec5J02W7JznRgfmEJSZyLyiuHytZmt/0CRSz4ecpM3pJhrVUcvyRlT
/0Ts9n6BWgqlSA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:59:46 2025 by rpki-client