Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
File: iTr8bv5imQomky9A4VCyfu1TnEs.mft (raw, json)
Hash identifier: MiJ4c1qkymWrWnrr/zMAvbMn4j+xZCX9v2OnXrxKHdo=
Subject key identifier: B3:5A:FF:AD:86:24:26:C4:C8:58:3D:1F:5E:D0:CC:AD:3D:32:98:61
Authority key identifier: 89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
Certificate issuer: /CN=893afc6efe62990a26932f40e150b27eed539c4b
Certificate serial: 019A4E4F334E4DD4C5EE03EF9283146F7A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 10:00:04 +0000
Manifest this update: Tue 04 Nov 2025 10:00:04 +0000
Manifest next update: Wed 05 Nov 2025 10:00:04 +0000
Files and hashes: 1: UvkgBounMtuI2EY4VakFPmSVVf8.roa (hash: B8b+cAv47Fq4zMohD+Ikbfg+w/maMgI605v1qgGvxbU=)
2: aMP60-6kIcycfPRX1mrnGq3rKu4.roa (hash: 3JfLcJd1nqn3CbGO/VzxfaF4cayveMgFQoD5eZc253E=)
3: iTr8bv5imQomky9A4VCyfu1TnEs.crl (hash: r56YENyOHInoPGoBC+2ZB0k+rop9IjRCmhU9GPy6m9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:33:4e:4d:d4:c5:ee:03:ef:92:83:14:6f:7a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893afc6efe62990a26932f40e150b27eed539c4b
Validity
Not Before: Nov 4 10:00:04 2025 GMT
Not After : Nov 5 10:00:04 2025 GMT
Subject: CN=b35affad862426c4c8583d1f5ed0ccad3d329861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e5:04:2a:46:2c:34:0b:80:97:28:b5:9d:af:
6e:bf:6a:f8:27:d7:98:35:21:80:1f:2d:21:e0:5d:
dd:a2:0d:aa:22:2f:d2:95:0d:12:3c:45:d6:93:da:
62:30:48:13:b8:28:81:e2:e3:15:5a:c1:70:81:2e:
2d:52:49:fb:26:9b:d1:8a:f8:07:62:d4:5c:c5:1e:
f7:5e:06:bc:00:3f:97:a5:5b:25:1f:c1:9c:2c:b6:
5c:dd:ae:cc:4f:a6:e3:f8:99:d4:a4:b3:d4:1d:2e:
4c:d8:74:08:e0:71:3a:22:46:7d:3d:df:aa:c6:27:
01:34:e3:2c:22:9b:a6:42:c4:c2:ea:19:f3:1f:19:
a4:07:ff:b7:ec:cf:82:db:59:57:f4:26:d6:fa:54:
80:9a:a0:99:13:37:4d:53:b8:95:6e:e4:df:8a:fc:
2b:06:a5:28:89:6b:55:55:ad:a0:b1:d2:76:b4:8a:
3f:3a:75:b8:cc:7d:64:b9:ec:e9:28:64:6d:42:d4:
5c:92:2b:64:21:95:d9:db:3e:ec:9e:b5:af:55:13:
c7:02:84:25:c4:24:54:b4:17:d0:27:d6:22:d0:87:
9a:58:a4:0b:f0:e0:5e:f5:ab:99:d7:07:56:5e:0a:
c5:5e:28:fa:af:8b:e3:c0:d0:7d:b2:66:17:27:f2:
5f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5A:FF:AD:86:24:26:C4:C8:58:3D:1F:5E:D0:CC:AD:3D:32:98:61
X509v3 Authority Key Identifier:
keyid:89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:f1:cb:8b:4b:52:f2:c3:75:41:32:a3:e7:35:be:8c:af:52:
a8:2f:45:3c:94:44:d0:36:b3:06:85:27:85:7d:3d:ea:15:fb:
b8:ba:96:b1:67:fc:17:17:ed:0f:82:e4:b9:ac:9f:fc:89:43:
f8:a7:ab:ca:5f:dd:94:a1:1f:e6:95:81:33:22:8c:75:b0:7d:
ad:b8:ef:84:ea:aa:a3:13:e3:11:89:eb:ed:90:93:28:e9:7c:
8a:14:11:e3:f3:15:b5:62:54:e2:3a:1f:61:8f:0d:75:30:47:
fd:94:b9:9a:b1:60:37:30:3c:4f:ab:7e:1f:63:26:15:37:3f:
66:60:8a:ab:1d:e5:2b:d8:89:53:93:d9:ab:a3:6d:92:b8:c4:
2d:1d:bf:2e:a7:44:34:76:03:c1:08:33:25:39:74:d3:22:18:
30:6a:82:41:0c:3d:de:a2:cb:5a:a5:a9:19:48:67:d8:2d:4b:
c6:73:03:3a:24:69:c8:a8:58:75:20:3e:ad:fc:b5:3e:2c:c0:
ff:37:66:3d:c8:5c:92:3b:df:a9:b5:38:b3:fd:a2:b3:2a:09:
7f:ea:74:6b:52:b0:9c:5b:d9:7d:45:ce:87:ff:f9:3b:79:dc:
2b:1d:0e:00:1f:2a:2d:7c:06:67:87:d0:22:6a:e5:ea:7b:23:
10:46:d3:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOTzNOTdTF7gPvkoMUb3qRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5M2FmYzZlZmU2Mjk5MGEyNjkzMmY0MGUxNTBiMjdlZWQ1
MzljNGIwHhcNMjUxMTA0MTAwMDA0WhcNMjUxMTA1MTAwMDA0WjAzMTEwLwYDVQQD
EyhiMzVhZmZhZDg2MjQyNmM0Yzg1ODNkMWY1ZWQwY2NhZDNkMzI5ODYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOUEKkYsNAuAlyi1na9uv2r4J9eY
NSGAHy0h4F3dog2qIi/SlQ0SPEXWk9piMEgTuCiB4uMVWsFwgS4tUkn7JpvRivgH
YtRcxR73Xga8AD+XpVslH8GcLLZc3a7MT6bj+JnUpLPUHS5M2HQI4HE6IkZ9Pd+q
xicBNOMsIpumQsTC6hnzHxmkB/+37M+C21lX9CbW+lSAmqCZEzdNU7iVbuTfivwr
BqUoiWtVVa2gsdJ2tIo/OnW4zH1kuezpKGRtQtRckitkIZXZ2z7snrWvVRPHAoQl
xCRUtBfQJ9Yi0IeaWKQL8OBe9auZ1wdWXgrFXij6r4vjwNB9smYXJ/JfswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNa/62GJCbEyFg9H17QzK09MphhMB8GA1UdIwQY
MBaAFIk6/G7+YpkKJpMvQOFQsn7tU5xLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVRyOGJ2NWltUW9ta3k5QTRWQ3lmdTFUbkVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83ZTE4ZjAtYWYxZC00N2MxLThkYjUt
NWE1MjMzZGMwY2UwLzEvaVRyOGJ2NWltUW9ta3k5QTRWQ3lmdTFUbkVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi83ZTE4ZjAtYWYxZC00N2MxLThkYjUtNWE1MjMzZGMwY2Uw
LzEvaVRyOGJ2NWltUW9ta3k5QTRWQ3lmdTFUbkVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2/HLi0tS
8sN1QTKj5zW+jK9SqC9FPJRE0DazBoUnhX096hX7uLqWsWf8FxftD4Lkuayf/IlD
+Keryl/dlKEf5pWBMyKMdbB9rbjvhOqqoxPjEYnr7ZCTKOl8ihQR4/MVtWJU4jof
YY8NdTBH/ZS5mrFgNzA8T6t+H2MmFTc/ZmCKqx3lK9iJU5PZq6NtkrjELR2/LqdE
NHYDwQgzJTl00yIYMGqCQQw93qLLWqWpGUhn2C1LxnMDOiRpyKhYdSA+rfy1PizA
/zdmPchckjvfqbU4s/2isyoJf+p0a1KwnFvZfUXOh//5O3ncKx0OAB8qLXwGZ4fQ
Imrl6nsjEEbT9Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:57 2025 by rpki-client