Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
File: IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft (raw, json)
Hash identifier: baDgA247sxdew5tkhknGIsbWiqq6T3gFHSywlDX+g7g=
Subject key identifier: 4F:77:91:84:37:74:51:13:50:3C:BD:4C:7D:94:D7:6F:CF:EB:8D:11
Authority key identifier: 20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
Certificate issuer: /CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Certificate serial: 019A507483EE9DAD4A1C0FD17B3504BE883D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
Manifest number: 147F
Signing time: Tue 04 Nov 2025 20:00:04 +0000
Manifest this update: Tue 04 Nov 2025 20:00:04 +0000
Manifest next update: Wed 05 Nov 2025 20:00:04 +0000
Files and hashes: 1: IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl (hash: DLq+p97HeI40h6wuVYdGUClEjuC+9wDjrl9+9/waLfI=)
2: Tj1VT7s8ilnWaRH5FDEx4ErgOfw.roa (hash: EAnVAxYXeZnLn3O7V7JRGZpaiw9YJLofd+adf3s7hWw=)
3: z8gJT3mWJvoCjNtGavez3w-sptI.roa (hash: rAtA37xRZ8BRiEnR3BviWDsE+vEFga17zSGIolCXdPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:83:ee:9d:ad:4a:1c:0f:d1:7b:35:04:be:88:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Validity
Not Before: Nov 4 20:00:04 2025 GMT
Not After : Nov 5 20:00:04 2025 GMT
Subject: CN=4f77918437745113503cbd4c7d94d76fcfeb8d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:31:54:f9:8c:17:fa:29:ae:16:bf:4c:cc:48:
c2:61:6a:fb:5d:e6:a5:3b:52:3e:2e:48:23:7e:31:
8a:31:20:2f:d3:52:43:c9:82:9c:0b:fa:d8:99:ac:
8f:7f:0b:a9:cf:fb:2f:a6:80:90:3c:b5:35:63:c4:
f2:ae:4d:04:f3:8b:e3:76:2f:28:e2:85:f4:6e:8a:
e9:30:c0:46:44:0a:d7:e8:33:61:d7:7c:73:71:ca:
1f:d0:42:cd:6b:03:dc:70:27:9c:67:a0:43:6e:cc:
dd:e7:e9:72:1a:e4:ab:62:eb:df:f1:ed:c9:54:4e:
51:c1:58:98:4d:52:25:4a:2e:0b:05:cf:c3:cb:54:
e0:54:50:b4:f1:7b:27:a9:01:21:04:7e:6e:57:41:
51:4d:3b:04:a7:8f:47:f2:3a:f5:e6:57:94:1e:93:
d4:dc:1d:3e:9b:36:59:fa:ca:ae:76:c0:5c:ce:c9:
da:fa:2c:b9:57:bf:b6:ac:1e:ae:b8:db:6f:12:5a:
81:d3:11:37:b7:f2:13:7b:8e:be:1a:ee:4e:ec:c5:
0e:53:28:99:85:d2:b2:55:5e:58:32:19:ea:85:e8:
44:f3:69:f9:87:8e:50:d0:08:76:15:ac:5f:5a:c5:
98:0a:f9:5a:fc:6a:42:41:5e:a7:6c:51:4a:ed:29:
bc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:77:91:84:37:74:51:13:50:3C:BD:4C:7D:94:D7:6F:CF:EB:8D:11
X509v3 Authority Key Identifier:
keyid:20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:8b:4f:da:0a:17:dd:10:0e:39:5e:7b:da:b5:fe:23:2b:3a:
fc:91:01:24:4b:e4:4c:1f:39:7d:d6:84:77:2c:50:fb:ee:27:
ce:09:94:d5:ee:24:cd:f0:73:1a:b7:b6:68:e6:15:c5:e4:0a:
0f:f0:47:4f:0f:86:5c:d4:a9:e5:4b:fe:3e:98:ad:7c:b1:8a:
1d:c1:c5:76:f0:b9:56:bd:c3:bb:26:59:5b:90:fe:07:52:75:
0b:e2:d1:c7:b4:93:d0:aa:3f:cf:d5:09:da:e8:1e:fa:d2:84:
9f:8e:24:f7:a3:3f:2d:f1:c2:97:d0:c8:34:e6:8e:4e:99:06:
cb:04:cf:11:49:52:cf:5d:14:4f:ed:c3:bc:4a:e6:15:a0:eb:
fa:fb:4f:ab:20:ff:09:82:3b:5d:cc:9c:83:e1:fe:fd:e7:3f:
b6:4f:bf:f6:f1:8a:94:4a:3c:f0:7c:da:ae:3b:bc:82:8d:5a:
5b:5b:c8:91:9a:97:5e:d8:90:61:45:eb:f7:03:5f:34:d5:8f:
40:a7:78:e4:20:42:20:f6:44:fe:e2:82:57:a8:57:01:98:47:
d7:66:61:dd:6c:ac:fa:ca:d1:be:7b:bc:c3:c3:d2:40:21:4d:
df:84:b9:7f:c2:7b:24:7e:a9:03:db:f5:f3:fa:ed:d4:56:8b:
9f:95:a9:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdIPuna1KHA/RezUEvog9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNzhiYWVlNmI2ZWM1NDI1YTE2YjFmYzAwYzUyYzMwZWQ5
NWEzZjAwHhcNMjUxMTA0MjAwMDA0WhcNMjUxMTA1MjAwMDA0WjAzMTEwLwYDVQQD
Eyg0Zjc3OTE4NDM3NzQ1MTEzNTAzY2JkNGM3ZDk0ZDc2ZmNmZWI4ZDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTFU+YwX+imuFr9MzEjCYWr7Xeal
O1I+LkgjfjGKMSAv01JDyYKcC/rYmayPfwupz/svpoCQPLU1Y8Tyrk0E84vjdi8o
4oX0borpMMBGRArX6DNh13xzccof0ELNawPccCecZ6BDbszd5+lyGuSrYuvf8e3J
VE5RwViYTVIlSi4LBc/Dy1TgVFC08XsnqQEhBH5uV0FRTTsEp49H8jr15leUHpPU
3B0+mzZZ+squdsBczsna+iy5V7+2rB6uuNtvElqB0xE3t/ITe46+Gu5O7MUOUyiZ
hdKyVV5YMhnqhehE82n5h45Q0Ah2FaxfWsWYCvla/GpCQV6nbFFK7Sm8zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE93kYQ3dFETUDy9TH2U12/P640RMB8GA1UdIwQY
MBaAFCB4uu5rbsVCWhax/ADFLDDtlaPwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUhpNjdtdHV4VUphRnJIOEFNVXNNTzJWb19BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iMTgyYmMtYmMzMi00ZTJmLWJhZDct
Y2E1MWZiNDA4OTAxLzEvSUhpNjdtdHV4VUphRnJIOEFNVXNNTzJWb19BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9iMTgyYmMtYmMzMi00ZTJmLWJhZDctY2E1MWZiNDA4OTAx
LzEvSUhpNjdtdHV4VUphRnJIOEFNVXNNTzJWb19BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABYtP2goX
3RAOOV572rX+Iys6/JEBJEvkTB85fdaEdyxQ++4nzgmU1e4kzfBzGre2aOYVxeQK
D/BHTw+GXNSp5Uv+PpitfLGKHcHFdvC5Vr3DuyZZW5D+B1J1C+LRx7ST0Ko/z9UJ
2uge+tKEn44k96M/LfHCl9DINOaOTpkGywTPEUlSz10UT+3DvErmFaDr+vtPqyD/
CYI7Xcycg+H+/ec/tk+/9vGKlEo88Hzarju8go1aW1vIkZqXXtiQYUXr9wNfNNWP
QKd45CBCIPZE/uKCV6hXAZhH12Zh3Wys+srRvnu8w8PSQCFN34S5f8J7JH6pA9v1
8/rt1FaLn5WpCg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:55:17 2025 by rpki-client